Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c65b7d5-aa58-322d-a55c-4d957eefaa0f.roa
File:                     2c65b7d5-aa58-322d-a55c-4d957eefaa0f.roa (raw, json)
Hash identifier:          VZZ/wEBbmEphvDKqvmcBpAIPhoWrsxp7LxX6A3EKnzU=
Subject key identifier:   A7:FA:A0:0D:D6:15:83:51:69:F8:1A:AB:4E:35:02:FC:BC:B3:81:41
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C652882FAA2E18E1A4A40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c65b7d5-aa58-322d-a55c-4d957eefaa0f.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     53338
IP address blocks:        216.123.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:65:28:82:fa:a2:e1:8e:1a:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=83c151c3-f0f4-479a-8a02-9a0ecc131cc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:13:84:90:be:69:fa:88:b2:8b:99:6f:0b:f1:
                    de:00:3b:03:a0:83:ef:50:2a:91:68:34:26:d6:ac:
                    bf:0a:6f:1c:df:37:ed:4e:25:7c:91:ca:78:34:f8:
                    25:e2:f6:48:f0:3f:bd:df:87:37:f6:2f:58:f1:ed:
                    55:af:a5:66:bf:3d:9c:47:bd:2e:b9:bc:7a:b7:7d:
                    d4:0e:b1:82:8f:9b:89:24:17:94:db:d5:f3:6e:6b:
                    61:65:0f:6e:1c:ac:54:80:bd:b0:aa:7b:78:c9:10:
                    48:f1:24:28:6f:c3:73:35:d3:0a:1b:29:87:1d:8e:
                    a2:88:04:8e:6e:65:56:ff:b8:78:08:17:60:a3:d9:
                    f2:64:94:5e:72:59:d9:19:b7:28:f3:e0:a1:b5:53:
                    dd:9e:c7:f0:4f:5b:20:37:47:46:97:b9:54:4c:65:
                    e9:ca:03:ec:3e:6e:f4:be:65:ae:4b:c9:05:86:d4:
                    e5:88:8e:b7:b8:7e:3d:06:c6:f8:ac:fd:95:9a:f5:
                    4d:01:b3:02:da:95:dc:04:76:bf:22:ca:51:60:11:
                    64:22:38:c1:95:57:da:e8:4d:d9:0b:d3:95:d5:f9:
                    d8:21:e8:89:3d:d1:36:55:e2:47:bf:7b:5c:79:4f:
                    33:ff:2d:be:2d:78:48:fc:61:7b:52:c0:52:15:67:
                    80:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FA:A0:0D:D6:15:83:51:69:F8:1A:AB:4E:35:02:FC:BC:B3:81:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c65b7d5-aa58-322d-a55c-4d957eefaa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:47:3d:5f:ec:02:4f:5a:e4:80:7c:3b:ce:b1:a0:f8:9a:
         b3:ba:a6:fe:73:56:b0:f3:ef:a6:b1:e2:a7:ed:8b:89:d5:86:
         93:e7:c5:b6:30:e8:6a:b8:8b:93:fe:e0:5b:fe:0e:e0:85:80:
         b1:a7:92:7c:e7:65:d0:36:93:c2:48:a0:3c:38:98:35:f3:a7:
         f0:00:79:b3:19:c8:f5:a2:0f:56:c5:ec:66:59:3a:46:8b:b2:
         b2:fb:c5:20:15:b7:b6:03:cb:fb:45:50:1a:4b:af:ab:09:b7:
         a2:51:3d:37:be:a3:82:4d:04:70:da:ef:0e:b8:1a:78:f9:b3:
         b2:43:c4:90:1d:a9:84:3a:ab:a4:da:4c:ee:e8:3a:3e:a6:c3:
         8b:76:5e:0a:b8:c4:3c:a5:02:85:a6:20:d6:68:b5:73:0f:e3:
         4a:15:ce:42:00:4c:8a:7a:7a:b2:49:44:8c:65:14:b0:19:79:
         67:cc:98:d6:58:38:ec:55:8e:27:1e:0b:4b:7a:2f:2b:23:03:
         7c:93:f7:4c:fa:0e:d9:23:57:a5:b0:bb:0d:6f:cf:48:18:23:
         b0:2a:9a:f1:69:41:fc:45:4d:79:1f:c4:d1:72:47:07:3d:57:
         e2:07:4e:f6:f0:0e:a1:a9:88:59:fd:56:68:08:5e:91:30:3d:
         c0:ba:9d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:25:43 2025 by rpki-client