Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5d8fe22c-92b9-3ab6-95c2-51dbf0b99e93.roa
File:                     5d8fe22c-92b9-3ab6-95c2-51dbf0b99e93.roa (raw, json)
Hash identifier:          5SiEx2xyPYasq1v2lUctLOJ7uh1uwHk8jViTvBWmVVc=
Subject key identifier:   5F:D0:8D:7B:91:4E:4E:61:3F:C3:91:5E:E6:D6:64:CB:9E:95:A6:A4
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C526FD2BC51FA3B2FA400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5d8fe22c-92b9-3ab6-95c2-51dbf0b99e93.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2001:4c8:1085::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:52:6f:d2:bc:51:fa:3b:2f:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=6c8f4a71-5aa7-4710-b529-bed88ce73540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:e0:5a:57:a1:77:dd:46:b0:53:ec:ba:7f:
                    8d:97:ba:84:f6:9c:e1:a1:2e:d4:a2:07:0a:6b:3f:
                    66:e1:90:62:48:a9:1d:bb:77:fd:07:0b:98:80:3a:
                    16:60:ed:6d:8c:a4:56:1c:8b:93:3a:b3:77:c3:df:
                    69:42:32:d5:cb:a2:18:ac:b5:e2:85:20:99:95:00:
                    ec:fe:e6:33:d3:7e:d0:3e:8c:7e:30:ea:de:7e:7c:
                    33:13:c0:1e:56:57:38:aa:fa:ec:29:fa:fe:4d:2c:
                    6d:d0:37:f7:e5:66:17:6e:97:1b:8e:a5:c8:c0:36:
                    68:f5:3b:69:0f:de:ac:57:c5:32:f1:28:2b:19:b7:
                    90:af:b4:70:ec:83:55:a9:43:3b:0b:df:fa:9e:0a:
                    c1:00:49:63:13:50:cd:5c:97:c7:f3:6f:77:21:07:
                    d3:30:f0:78:a3:19:e8:35:27:b1:1d:20:47:db:ab:
                    c7:9d:42:7d:cb:59:5e:51:6e:7a:9c:2b:86:3d:8d:
                    a2:b1:1a:1a:e7:d8:90:aa:68:48:71:08:0a:3f:70:
                    37:e8:99:d1:68:01:66:4b:9a:15:0e:c5:0f:30:97:
                    02:7a:54:2d:94:19:4a:e1:44:fe:a6:c6:a9:e8:57:
                    08:7c:ae:ba:d7:c9:32:80:1a:c7:ad:a7:7a:60:d3:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D0:8D:7B:91:4E:4E:61:3F:C3:91:5E:E6:D6:64:CB:9E:95:A6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5d8fe22c-92b9-3ab6-95c2-51dbf0b99e93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1085::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:33:14:05:dd:76:ec:9f:fd:48:98:bb:2a:b9:17:ab:1d:
         a0:84:d3:99:a1:b5:bb:9b:57:15:8b:81:42:6b:46:e5:14:99:
         ab:6a:50:28:39:fd:8b:a8:b1:0c:13:cb:c3:16:3d:10:ad:e4:
         73:ce:cc:f6:dc:6b:74:6b:5c:1c:d6:de:85:a0:3e:46:b7:49:
         a9:ce:5a:cf:73:d4:5b:bf:b2:77:57:94:61:92:5a:4c:bc:b1:
         2f:ba:b2:89:35:02:e1:ba:dd:6d:96:85:ed:d8:2f:01:51:a4:
         75:72:c2:7a:1a:fa:6d:86:6b:e3:5f:99:02:3f:81:c4:08:3f:
         b9:85:85:58:30:5d:37:9e:94:5b:83:6f:1d:dd:ea:9f:2b:87:
         1f:f6:ee:0e:d2:4f:f8:bd:f3:62:08:5c:18:ef:cf:ec:56:fa:
         61:56:d6:eb:ca:50:33:50:65:fc:ca:6a:19:71:7d:52:30:f0:
         6a:53:92:74:84:7b:29:ca:57:75:e4:69:20:4d:57:fc:f6:cf:
         a5:14:51:33:b0:52:63:e9:ac:46:e0:11:ef:42:2c:6c:23:d8:
         e9:57:7f:9e:71:c5:dd:a1:cf:f4:ea:b7:8d:3b:1c:f6:2b:af:
         90:29:1d:e4:62:23:66:2f:cb:3c:13:70:4f:f6:32:0b:72:55:
         49:c0:28:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:13 2025 by rpki-client