Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c81837f-f63c-32a2-9515-7e0590fe6e7b.roa
File:                     8c81837f-f63c-32a2-9515-7e0590fe6e7b.roa (raw, json)
Hash identifier:          mIQ1m+TC4P4UhJb942Q6K97FnUnJSfHmj9LECBqmB+w=
Subject key identifier:   1D:1B:8A:D9:E8:DD:B4:CC:2B:F7:A6:0B:36:00:1F:28:AB:C0:B4:27
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5AAEC004918296A908C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c81837f-f63c-32a2-9515-7e0590fe6e7b.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        209.82.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5a:ae:c0:04:91:82:96:a9:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=8f5e5c7f-60c9-4d85-9e20-55e22cc813c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:28:fe:6a:bc:79:2f:a8:43:ba:bb:b7:32:
                    e7:56:e7:52:99:93:c7:5b:73:98:f8:3d:7b:2a:87:
                    a2:eb:a0:e0:8d:de:ad:a3:4e:6f:cc:54:c6:bf:41:
                    1a:96:90:1e:d3:53:1e:3e:80:8c:7b:fb:f5:35:a0:
                    7b:a0:45:b9:92:14:6a:85:fc:5d:41:5d:00:6f:58:
                    7c:e6:fa:1b:5b:53:2c:8f:b6:51:45:94:91:29:d3:
                    0c:85:f8:f0:8a:33:6f:f8:05:ac:cd:2a:63:31:2d:
                    05:e4:1b:f1:36:72:b3:0d:f0:e0:f6:64:d1:84:c4:
                    07:03:26:db:47:24:2e:90:85:1f:22:b0:c8:6e:36:
                    a3:9e:2c:8c:b5:fe:b9:95:50:6d:e7:47:d7:17:a7:
                    21:ad:b6:dc:bf:04:55:2b:dc:ce:fc:f0:1e:ec:e7:
                    ca:87:f7:be:3b:b0:17:b8:97:b0:18:49:3f:99:91:
                    5e:69:27:7c:5b:24:1b:c0:83:b0:0c:36:0b:1e:05:
                    58:4f:35:c6:47:63:fe:07:5d:df:d1:74:a0:68:fc:
                    90:36:5f:a4:d3:18:83:e4:9f:e0:28:1e:d8:a0:fc:
                    93:de:b8:a1:a4:a1:5d:45:8d:46:78:0f:70:50:05:
                    56:f7:6e:2a:fb:f6:d7:c4:6b:93:77:c6:f2:80:42:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1B:8A:D9:E8:DD:B4:CC:2B:F7:A6:0B:36:00:1F:28:AB:C0:B4:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c81837f-f63c-32a2-9515-7e0590fe6e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:bf:9d:52:a0:1e:6a:cb:5b:30:8d:3f:ef:4f:24:a5:18:
         8f:a4:ac:13:36:83:71:00:1c:8f:31:bd:f7:03:78:c1:e2:e5:
         ab:f0:8f:73:df:46:8c:79:97:68:a6:c2:6a:61:1c:10:1d:56:
         26:ea:51:8e:8c:df:d6:6f:61:c3:f2:ed:80:ca:2a:1a:ee:12:
         78:e0:b9:89:59:82:28:ab:5a:d1:72:2b:1c:88:d2:bf:7e:46:
         da:8d:00:85:32:76:ef:db:22:cb:62:50:59:e0:0d:63:2a:07:
         35:3e:5d:68:29:9a:da:f8:9c:d6:c2:17:00:a6:45:fa:ad:fa:
         0f:a3:21:ea:7e:f4:8e:36:3f:16:ee:bb:6e:75:b8:e0:aa:56:
         a9:d0:40:a9:99:f7:a9:9d:0e:3e:b3:0c:79:b2:59:ff:79:d7:
         bb:ef:2d:8c:96:79:dd:c3:de:c6:9d:d7:c4:f4:47:36:48:23:
         3b:15:8f:7c:3b:61:f6:43:f2:11:be:18:ba:5f:50:48:6b:68:
         d1:5d:59:c7:fb:b9:0f:48:34:86:de:96:db:6f:9b:b8:cf:44:
         6d:25:d7:b8:d8:de:d0:70:85:e7:76:05:41:52:37:8c:12:e2:
         f3:43:86:4a:90:0b:22:b0:be:88:47:af:11:f7:83:fc:78:ce:
         14:7e:60:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:54 2025 by rpki-client