Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/622109c2-f1c1-3da2-b6ed-9d8a38e71cc3.roa
File:                     622109c2-f1c1-3da2-b6ed-9d8a38e71cc3.roa (raw, json)
Hash identifier:          Pe7vLK8PZj39rBImgf+9IDW8XAf0uXnCNQkaAJb8d+Y=
Subject key identifier:   0C:A0:AF:48:AF:F5:EC:DD:EB:30:CD:DA:CD:C0:B9:24:45:40:FA:DE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C55E0B4D14E1CF12738E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/622109c2-f1c1-3da2-b6ed-9d8a38e71cc3.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        206.191.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:55:e0:b4:d1:4e:1c:f1:27:38:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=53f3f3f6-c25f-4bfc-bd26-69a1a8dad96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:fb:01:54:1d:ac:21:80:c8:85:dd:0d:54:
                    17:f4:4a:39:2c:b2:6d:67:ea:cd:4e:ed:c7:ed:80:
                    d1:44:a7:f3:a3:9f:7f:72:8e:71:41:a4:a3:a5:6d:
                    bd:f1:b5:1d:af:e0:00:ee:95:b1:fe:67:80:01:d2:
                    64:b4:78:5f:d1:ae:a0:8d:3c:16:48:7e:3e:b2:a8:
                    21:3e:a7:a9:25:c4:59:89:51:e9:d2:d9:7a:7b:98:
                    c4:d6:f4:bc:c4:a2:b8:a7:fc:fa:d4:dd:d8:0a:72:
                    d0:90:c2:1c:cd:fb:64:c3:dc:08:8e:a5:91:10:42:
                    19:0a:23:3e:60:98:d5:eb:13:a7:9d:55:31:8a:b2:
                    e0:3e:3b:88:b3:7d:90:b6:6d:d8:31:da:28:45:ec:
                    62:32:ff:f8:f8:3b:80:35:ad:4a:2d:94:b1:1d:1b:
                    58:08:53:d3:3e:c3:fe:15:6f:87:5d:7d:eb:a5:ef:
                    c5:d4:51:d0:d4:ba:80:60:1a:55:6c:84:e6:13:7d:
                    60:b4:1b:ad:e8:d9:30:3f:c8:79:82:52:c5:b6:82:
                    e8:99:b5:55:fa:aa:f0:4c:14:27:c1:5d:0a:98:31:
                    fa:39:94:b4:b2:bd:4c:c1:c8:cb:7c:49:86:39:20:
                    c8:bb:33:7c:a2:6e:93:53:19:d7:ec:b2:b9:00:1a:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A0:AF:48:AF:F5:EC:DD:EB:30:CD:DA:CD:C0:B9:24:45:40:FA:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/622109c2-f1c1-3da2-b6ed-9d8a38e71cc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:12:04:a0:d7:ce:5a:3e:8f:d9:c0:f5:30:e6:7d:97:a5:9c:
         d6:ac:4c:ae:55:e0:30:75:a8:f6:2b:cb:45:57:54:f1:99:91:
         28:bc:fb:06:03:fb:45:4b:37:97:08:c1:5e:e1:63:f8:b7:32:
         b3:d9:fb:d8:f5:7f:87:76:59:f7:aa:3e:eb:ad:1e:16:6f:db:
         e5:81:a5:c9:0d:ee:a0:f0:a4:03:e1:23:9c:86:05:9f:34:ae:
         c6:03:d5:5a:e7:f0:d7:8a:bb:0c:3d:1e:f0:65:21:ab:c1:bd:
         06:e8:81:97:f5:36:ea:2d:cf:20:42:2f:5e:56:04:88:18:f8:
         5c:1f:4e:5a:c6:37:21:27:cf:ed:d5:d1:ff:66:2b:c0:f7:39:
         29:b1:24:50:a8:7c:33:91:0d:21:89:6e:80:08:5a:dd:cb:c7:
         41:92:51:d0:1f:76:5a:32:3e:63:2d:d1:c8:70:5a:fc:03:6a:
         b4:42:e6:8f:15:58:cb:66:fa:25:56:f8:bd:08:5e:51:e2:46:
         69:1d:fc:44:f4:89:82:09:bc:c5:3e:25:bc:f4:9b:1e:17:c8:
         c1:31:5a:24:e7:4e:dc:da:b2:d7:10:91:ee:d3:7e:45:60:6c:
         a0:9a:df:fd:30:bc:94:54:56:f4:0c:72:e6:29:7b:ff:33:a3:
         1a:01:95:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:13 2025 by rpki-client