Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59bb5840-cebd-3e24-ac04-ce15d997b867.roa
File:                     59bb5840-cebd-3e24-ac04-ce15d997b867.roa (raw, json)
Hash identifier:          kILpon7bI7JAFaZwkSb7gc2vMTMipbSmYCyv/Au8lSo=
Subject key identifier:   F8:C7:55:51:CB:61:DB:E6:D7:20:11:AF:FA:0A:B2:00:ED:53:B1:75
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B3C51AB52677C46BAD59F5B00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59bb5840-cebd-3e24-ac04-ce15d997b867.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     17025
IP address blocks:        208.184.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:ab:52:67:7c:46:ba:d5:9f:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=ec3323e5-9dee-4292-9b05-2e5c9ad38440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f4:d2:ea:95:1c:2a:14:a6:ad:16:43:83:d6:
                    e0:7d:87:1a:41:5d:97:bb:fb:53:3d:d9:e6:74:9b:
                    2f:0f:2c:41:0c:dc:ad:6f:14:74:09:eb:01:57:28:
                    81:6c:c4:47:4c:e0:ad:cb:36:93:f5:9e:87:ed:0f:
                    62:59:be:43:8b:a4:36:ac:7d:b1:f5:b8:67:50:c8:
                    4a:53:84:df:f9:99:a0:48:0e:86:37:1c:93:00:3c:
                    54:5d:60:de:9c:2c:c6:9d:b0:1f:73:a0:d1:55:90:
                    9e:00:39:03:6f:6c:1c:94:bc:c4:16:72:e6:02:ac:
                    0f:c6:6d:b1:88:91:5a:be:f1:18:b2:8d:06:a5:3f:
                    45:f0:e4:f7:8e:c1:79:65:12:84:50:0e:a3:74:ad:
                    b7:bc:30:1b:bb:a3:cb:a9:db:84:9c:3b:7d:21:a8:
                    36:fc:1b:f4:11:16:f9:ed:2e:99:4b:b7:e3:f6:7e:
                    a1:a4:f5:4e:2c:51:ec:b3:34:b9:9f:77:15:5d:b3:
                    5b:16:c7:33:d8:6b:df:2f:58:c8:0c:20:d7:1c:32:
                    33:10:ec:c8:c5:eb:9e:6c:b7:d5:ee:46:87:1a:22:
                    c9:bf:77:f7:4f:fd:35:c1:f4:87:6d:67:21:02:0b:
                    c0:de:f6:e5:e4:8a:ab:4d:77:49:b9:f0:c3:93:91:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:C7:55:51:CB:61:DB:E6:D7:20:11:AF:FA:0A:B2:00:ED:53:B1:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59bb5840-cebd-3e24-ac04-ce15d997b867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:38:2c:4d:ca:c0:08:3a:86:77:5e:a4:2f:d3:6b:50:9d:bf:
         ba:b9:56:d2:b1:3a:98:7e:ad:b3:75:57:a0:6b:8f:81:54:75:
         09:8a:1b:7f:6f:05:63:f9:5c:c3:d5:39:a2:4b:22:c4:0d:91:
         4f:da:fe:3f:66:e2:fb:33:99:c0:b2:fb:4e:ac:6f:77:08:8c:
         19:ad:9f:95:69:55:d8:c3:81:f1:2e:83:72:20:9c:a0:0d:b8:
         76:a2:24:58:02:9c:2d:12:35:bd:fd:21:79:f9:6e:ad:e0:48:
         99:e4:37:d8:2b:c7:51:5d:7c:fd:11:a0:42:65:87:17:9f:44:
         54:3e:2e:30:02:ad:27:6e:93:92:23:d2:86:d6:f6:f8:4f:33:
         ba:8a:e9:d0:5b:f2:25:a3:01:15:41:a4:da:1f:07:c8:9c:92:
         88:03:f2:0e:42:f9:59:09:46:bc:df:e5:4f:5e:19:d3:6c:34:
         e7:63:76:d1:d5:f3:60:75:f9:12:25:92:77:1c:51:e8:36:e1:
         b7:06:3a:74:94:1a:18:b9:b3:1b:30:6c:61:05:04:bc:10:88:
         13:a9:ec:e8:34:55:e2:b7:ce:ef:4a:73:d9:da:51:fe:3c:b1:
         a2:aa:a4:f4:8d:63:7f:65:d1:45:f0:f4:53:47:a9:d0:ea:3b:
         5e:0e:57:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:26 2025 by rpki-client