Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa
File:                     1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa (raw, json)
Hash identifier:          YKDpqCRH/3BQkefXg9NaQSdllJnk/cnqHD7MjTMXg9k=
Subject key identifier:   55:77:B6:81:C5:0F:50:DA:30:CF:53:B8:D8:B8:63:92:A4:F1:99:20
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C65088CA3C5E322CE4740
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     46129
IP address blocks:        159.18.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:65:08:8c:a3:c5:e3:22:ce:47:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=ba5c55ed-247d-458b-9fba-9463656aa118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:78:3b:7d:3c:33:1f:90:0d:95:2f:85:af:dc:
                    1d:9a:e7:cc:cf:39:d4:e5:d2:29:74:7d:46:cd:f5:
                    e0:df:9f:aa:aa:b3:85:36:de:b1:8e:48:f3:39:35:
                    cd:d5:6d:a2:20:88:70:02:65:b3:48:70:0d:4b:a1:
                    4f:cb:c5:7e:22:a2:bb:a5:cf:4b:6a:f8:6e:da:76:
                    a6:bf:bd:b3:59:6a:d6:f6:de:91:21:3e:4e:50:c6:
                    84:a7:cc:9f:a8:18:84:77:b0:77:17:f4:b7:28:0d:
                    97:0d:a9:75:dc:56:79:91:dd:d4:b6:fa:30:83:b7:
                    e1:29:41:f7:25:0a:d2:28:7c:f3:ed:a1:02:01:b9:
                    fa:73:ef:d9:06:2f:66:80:de:93:b0:46:ec:1f:b8:
                    a2:1c:6c:33:cb:b7:c9:85:13:b0:b6:12:1d:ac:00:
                    b7:30:b6:bf:b1:0f:0f:4c:34:19:86:b3:34:3a:c2:
                    8c:ab:c3:e0:a6:1c:1c:85:06:de:c8:88:f1:b5:7c:
                    61:27:b8:2e:9b:80:e9:d6:33:77:78:aa:23:5d:5e:
                    26:ed:6a:91:8d:ca:50:8b:e4:8d:8a:e9:b4:d7:6b:
                    ee:42:de:92:64:28:95:18:2a:9a:77:c5:95:57:f0:
                    7f:80:06:0f:11:e8:1f:ed:c1:94:5b:23:34:31:6b:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:B6:81:C5:0F:50:DA:30:CF:53:B8:D8:B8:63:92:A4:F1:99:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1f55fb2b-b0b5-364e-86f2-dcdfb86bfa00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:a9:fc:38:d0:c4:9f:cd:2e:da:c3:b8:c8:c1:82:08:e9:
         bd:f2:9c:0c:06:60:c7:8a:9e:87:92:39:8b:e3:4a:e9:83:dc:
         fc:23:6f:f8:d6:ce:64:2f:f5:06:2d:e8:9d:39:04:fa:e3:86:
         95:fb:aa:46:88:40:f3:a1:12:fb:b3:b8:f9:69:cd:10:08:6f:
         79:c3:cf:53:23:48:e7:fb:a3:11:59:9c:34:b5:0c:03:4f:8d:
         93:3d:e6:d0:18:5c:1c:99:ef:7a:2d:a0:77:23:35:ad:20:46:
         8a:6a:e6:31:51:08:13:4e:52:e2:1a:9e:bc:b8:ec:88:18:c2:
         41:6e:0b:fd:bd:2a:b7:e4:d5:d5:49:08:6f:74:ac:3f:fe:4f:
         97:d9:ae:bf:37:86:c9:58:1c:b4:f1:d7:fe:60:84:68:0b:fb:
         37:bc:ca:7c:46:26:fe:a6:44:d6:0a:2a:1e:08:13:c9:bc:03:
         be:6c:ad:95:78:bc:c9:61:93:f7:31:0c:c9:85:ea:71:d3:0b:
         65:86:f3:74:34:2d:ec:97:ee:05:f8:21:3f:42:7d:59:11:ae:
         61:bb:2f:f2:f6:b8:1b:4c:56:37:a3:10:8a:8c:44:f9:bf:aa:
         4e:d2:05:e6:07:e4:01:e4:01:f0:fa:6d:8b:99:07:55:44:d4:
         dc:95:c9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:55 2025 by rpki-client