Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa
File:                     9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa (raw, json)
Hash identifier:          Sr7UOnUvLZX7b9L76tlT+2bgik/qmSELnQnx6c0CRlI=
Subject key identifier:   82:F2:00:0E:7E:B0:53:DF:F0:3D:08:EA:F5:AB:E3:56:D5:08:4B:E4
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C536F28BF923F35962C00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        2001:4c8:1097::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:53:6f:28:bf:92:3f:35:96:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=84ac8dfd-9f6d-4c32-a0c5-acd059aa932f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e7:12:9b:de:49:37:b1:0e:12:05:b8:9c:11:
                    8b:61:7d:58:64:5a:1b:c7:3a:09:82:43:7c:6f:0a:
                    85:38:c5:21:1e:c2:7d:99:65:19:d9:ce:be:db:94:
                    e1:49:d6:41:5c:23:17:96:ec:2b:b6:4c:eb:35:c1:
                    24:4e:ec:6e:3a:87:f5:34:31:89:6b:fc:94:64:3c:
                    a0:b2:ab:2b:29:81:39:9c:5b:57:20:d6:fc:92:ca:
                    41:eb:f0:4a:e0:d6:35:b3:36:49:28:89:f3:f9:9f:
                    0a:1b:18:5b:a5:21:f2:e1:1e:64:43:13:68:c4:6b:
                    f0:09:3f:b4:30:21:24:85:a5:ae:ec:7a:2c:e7:66:
                    d1:56:65:26:af:96:44:e4:6c:82:84:d8:1d:40:e8:
                    85:a2:9c:8a:b2:02:9a:ff:a3:df:0a:64:27:2e:c3:
                    af:b9:08:f0:1d:a5:76:67:75:e7:e4:5a:7e:ed:a1:
                    72:94:74:c4:9a:c7:6f:aa:cd:97:f9:aa:6b:1c:9c:
                    03:72:54:85:74:46:5d:8d:1c:b4:f4:04:a2:1f:1b:
                    9f:a9:b7:8d:ba:39:f7:c0:6a:1a:83:80:e3:98:0d:
                    5e:d7:ed:3b:56:49:1a:7b:cf:50:22:e0:57:9a:2c:
                    86:9d:68:d7:14:11:c0:73:7f:1a:6b:0e:03:e7:1e:
                    53:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F2:00:0E:7E:B0:53:DF:F0:3D:08:EA:F5:AB:E3:56:D5:08:4B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9b97f581-0d6b-322c-9373-1d93f75ed2d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:4c8:1097::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:40:58:c9:88:86:d8:a4:03:9d:54:c8:0b:6e:24:f3:f5:c3:
         ae:fe:50:14:68:b3:28:ff:7b:3e:40:d2:53:87:82:47:74:79:
         48:1b:44:fb:d7:ad:22:0a:97:c7:94:65:4b:d2:be:1e:ee:63:
         f7:0a:84:35:7d:bc:81:a9:bf:c1:2e:b2:f4:4d:b1:69:12:26:
         2b:58:9f:60:19:22:df:71:47:7a:b3:23:70:f9:53:51:46:1d:
         f1:c6:73:7d:0c:c6:c0:f8:78:37:80:4a:4e:0b:87:64:e9:00:
         6b:9f:c6:0d:c0:f4:69:a6:2d:85:53:0f:21:64:54:84:53:ac:
         da:f6:36:cd:ff:61:4c:6f:4a:d8:01:4b:8d:95:dc:61:46:5e:
         8f:9a:4d:9f:4a:c9:54:50:9a:15:9f:c0:b5:7d:a5:53:c9:de:
         f4:32:ec:09:50:0e:5c:f7:1c:89:8a:41:30:4c:73:d8:1c:15:
         82:e4:4e:72:a9:5b:a2:d6:7d:cb:74:10:af:50:e9:a4:79:dc:
         5b:47:fb:72:bf:54:15:86:ff:25:90:a7:fc:7f:34:bb:3c:8e:
         7c:01:79:4e:7f:f9:9b:56:bf:b4:f1:2f:db:47:b9:86:41:88:
         91:91:59:6e:a8:c6:1e:25:24:68:2f:26:f3:1c:1e:3e:7a:fb:
         79:20:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:16 2025 by rpki-client