Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa
File:                     9d136aa7-dfb5-3618-8279-4710c4db09d1.roa (raw, json)
Hash identifier:          4+0Xm0bxa9Ji8WSjTy1KG2T/YlwIUYFhhe5cFgpDhTU=
Subject key identifier:   5D:1C:92:9A:5B:A0:65:88:D3:2B:6D:C6:9F:8F:F0:A5:A6:4C:28:C8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5039E325174A816B2C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        159.18.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:50:39:e3:25:17:4a:81:6b:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=3350ed80-a02c-4a75-bc39-d11b6ef991a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d1:0d:3e:2e:7c:54:36:87:30:c7:24:14:e6:
                    71:76:d2:60:50:6c:3f:cc:66:7c:ce:da:a9:a1:e2:
                    f4:fa:e5:5d:09:74:85:25:fb:00:29:7f:5a:41:e8:
                    67:7f:14:bb:5a:b5:50:f3:57:0d:3b:88:0b:bf:47:
                    cf:f3:9f:33:cf:35:ea:86:5d:16:cc:d4:5d:b3:be:
                    ad:df:8f:e2:44:b3:94:73:23:76:06:4e:2f:b0:c4:
                    f1:7b:72:4e:f0:88:60:04:3e:53:df:7b:63:be:76:
                    12:e3:6f:19:73:67:3c:ae:30:d2:50:74:92:a9:ed:
                    be:b9:b5:7e:28:6f:0d:ff:a2:9c:4d:fe:25:6a:6e:
                    40:10:09:49:41:7b:03:ff:42:79:0b:5b:aa:10:f5:
                    90:5d:1e:06:52:57:5e:d5:74:f8:7c:ef:88:07:5f:
                    f6:cd:9e:c9:2f:f5:95:91:03:b2:17:d4:ad:61:dd:
                    f7:b2:1d:6e:0e:7d:97:b5:ed:bc:dc:42:3d:06:b7:
                    0e:ea:7f:72:0c:70:22:cf:ed:e7:ae:59:0c:8a:5d:
                    d6:39:8e:87:e7:21:13:9b:07:1e:65:88:55:90:3c:
                    e2:7b:97:6c:96:39:9b:10:2c:42:b3:fd:4c:8e:0f:
                    d5:a9:be:56:a1:ed:70:e2:54:34:40:d9:28:24:b1:
                    91:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:92:9A:5B:A0:65:88:D3:2B:6D:C6:9F:8F:F0:A5:A6:4C:28:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/9d136aa7-dfb5-3618-8279-4710c4db09d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:4c:11:44:4e:ae:c4:ea:a8:ff:f3:48:af:ad:b8:1f:89:ce:
         d7:34:45:6d:d2:65:20:91:e0:b1:a3:1e:84:88:15:64:fd:d6:
         50:e6:be:eb:a2:bc:29:d9:89:52:eb:36:80:17:4e:b0:7b:4c:
         ef:15:d2:d7:bf:37:f1:0b:a1:8a:01:18:da:6c:9b:93:52:fb:
         07:04:1b:34:cd:f1:21:53:ad:0f:0c:fe:52:9e:db:0e:d4:16:
         01:62:e9:0c:4a:6e:6a:2c:c0:ce:ab:19:c2:b7:d5:05:79:c2:
         7c:53:be:93:84:5d:12:ad:e1:ea:44:75:a7:c4:e9:fb:34:b1:
         e0:03:82:4e:96:da:ba:64:b6:ba:35:7d:9b:d3:0a:7d:66:11:
         87:2e:28:29:0c:64:ae:f6:74:5c:8f:6f:08:93:5a:3b:e4:ce:
         7d:46:9f:e1:5a:86:0e:b0:a3:e0:f3:dd:d0:63:8e:50:7d:49:
         e2:60:e8:9e:a3:42:c4:b3:8e:6e:90:bf:2c:15:f6:b9:4f:56:
         a8:e1:26:cb:39:47:fb:76:1d:51:d0:4a:f3:18:df:0c:b5:ec:
         0e:90:4d:bd:92:7b:82:b7:9d:e1:c7:eb:54:73:f1:28:7b:07:
         dd:49:5c:b4:bb:1e:4c:22:7c:09:03:8c:36:ff:91:7a:51:a8:
         7b:15:32:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:46 2025 by rpki-client