Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a5b1f77-4985-318a-87df-d89b535013fd.roa
File:                     8a5b1f77-4985-318a-87df-d89b535013fd.roa (raw, json)
Hash identifier:          5JKL50RIvjLPgL0408NsZCi4/GlHfZcVro3hoegCMvI=
Subject key identifier:   AB:4D:0E:BC:AF:6D:DB:E0:93:47:34:32:FA:CB:0D:03:F1:BC:57:33
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C52A9CF6649AEFC0B33C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a5b1f77-4985-318a-87df-d89b535013fd.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2001:4c8:108d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:52:a9:cf:66:49:ae:fc:0b:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=a7531216-80db-45b2-9d59-cf3eb91867be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:25:e6:42:a0:13:10:f5:e4:46:9b:98:c8:
                    fe:ee:6c:b1:71:0b:c1:6a:3b:b4:d8:a5:dc:85:0d:
                    15:0d:68:2d:fb:36:10:b9:d7:a8:37:62:22:72:13:
                    7f:75:a3:81:20:fb:42:0c:05:ca:cf:d8:ff:e5:4c:
                    ef:17:d2:f2:3b:d7:fa:d0:03:7e:90:ec:09:77:82:
                    67:fb:75:4a:77:56:8c:a5:d3:f2:66:26:d2:11:70:
                    f2:c7:80:f7:a0:06:f8:3f:89:fa:f4:7f:ba:cd:89:
                    ae:97:dd:e5:c5:0b:dd:a3:b6:65:bd:53:96:ea:e0:
                    1c:5d:98:8b:01:f9:e4:d6:75:5a:dd:1c:04:54:85:
                    f3:c1:1c:90:3c:37:b8:d4:f1:08:d0:3a:d0:2f:7d:
                    1b:83:5e:43:95:fc:fe:1b:a9:19:57:c8:4d:06:f9:
                    37:6c:3f:5e:e1:5a:54:ce:9a:cd:2f:08:e9:b9:4b:
                    e1:71:7a:cd:72:47:28:69:da:cf:bc:8a:89:80:90:
                    15:e8:5d:e1:c3:11:13:04:3a:75:84:09:89:c1:94:
                    f0:11:16:92:3b:65:40:7f:d8:bf:b4:5f:36:6c:8e:
                    ad:81:92:29:ad:90:ef:40:f1:20:35:0b:53:aa:5d:
                    cf:f5:5a:fa:dc:84:33:8e:20:6d:db:19:86:a9:3f:
                    07:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4D:0E:BC:AF:6D:DB:E0:93:47:34:32:FA:CB:0D:03:F1:BC:57:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8a5b1f77-4985-318a-87df-d89b535013fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:108d::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:88:5e:94:74:b6:79:0d:d5:4c:53:33:d3:ca:5b:f4:28:3c:
         c3:ae:a6:50:1a:67:9b:ea:fd:c2:50:6b:5e:94:24:30:c4:0a:
         f5:ae:f0:f4:76:17:0b:33:b4:73:f9:c7:0d:aa:fd:f8:4c:ff:
         d6:38:f2:d8:b8:45:5d:29:d0:04:a6:01:ce:1e:6d:45:db:1d:
         1a:04:a4:a5:3c:7b:a8:ce:f0:3a:3f:ac:70:62:29:03:53:8d:
         18:0d:f8:ec:af:e1:ac:c9:1b:42:13:37:62:73:b6:ce:1e:23:
         bc:12:cd:e3:e3:14:bb:54:0e:80:c7:87:5f:fb:75:ad:e5:87:
         fb:df:08:04:7b:bf:47:8e:3e:0c:ef:22:88:9e:bc:29:ce:f6:
         03:b6:a5:3a:42:a8:4a:06:6d:ff:2c:c5:d3:eb:e5:3f:4d:38:
         2a:3b:5b:9a:e2:21:46:4f:a3:21:5c:f2:bf:ae:48:fe:51:5d:
         3b:91:4b:07:ab:b8:c2:c9:28:6b:d7:0a:1c:dc:b3:8c:70:7a:
         d2:50:40:7e:0c:3c:18:55:83:ff:1a:80:da:22:dc:32:c9:4b:
         d7:4d:6b:2f:3b:6a:b6:fd:70:4b:48:76:a4:4c:9e:72:cc:73:
         a3:c5:85:d0:e8:b1:5c:6d:64:af:0e:2d:2c:95:cf:42:bc:ab:
         af:a9:dd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:37:03 2025 by rpki-client