Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abde5797-0e16-3f69-a422-a741554c49d5.roa
File:                     abde5797-0e16-3f69-a422-a741554c49d5.roa (raw, json)
Hash identifier:          BkDGv92xpwIoFifCG5C+D3hmaIizeyE5UfFBK4xphag=
Subject key identifier:   AA:BA:D6:60:5A:E4:50:36:33:AB:B7:05:17:A2:71:91:89:0F:83:6E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B328C5D2ACC061F4338111300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abde5797-0e16-3f69-a422-a741554c49d5.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        216.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5d:2a:cc:06:1f:43:38:11:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=17cddec4-7300-4e96-8bc5-bf69547a15db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b8:28:a6:4e:33:5c:4f:ee:61:eb:05:98:ce:
                    68:cb:23:44:87:eb:0b:81:39:51:49:c6:a7:62:f6:
                    ed:12:4a:74:ff:d2:2e:5e:69:0d:93:9f:39:76:40:
                    2b:86:a9:15:31:c1:24:d6:01:8f:d7:ae:97:14:6d:
                    3f:e3:67:35:57:89:41:72:6e:5f:5a:22:a8:80:52:
                    3c:c2:65:1b:98:30:01:7e:ff:9a:a0:c3:9a:09:09:
                    a5:de:c3:25:95:02:32:fa:42:7d:22:8d:3a:25:35:
                    c7:56:7e:82:e7:1e:a2:ff:4a:30:aa:eb:82:4b:e5:
                    c0:01:bf:4e:e0:0d:b7:4b:df:f6:92:b8:c1:13:b1:
                    ed:c7:37:7c:85:5c:2a:26:49:d5:31:59:c4:9a:8a:
                    e7:0b:1e:8f:fa:d7:89:56:f3:93:0f:b1:34:c4:0e:
                    01:fe:32:fe:6a:dc:f9:cf:2e:df:5f:4f:1b:ea:be:
                    2a:6c:af:19:b4:85:27:3d:57:4e:77:11:c7:f6:c5:
                    6c:6a:b9:19:13:34:86:86:6d:e9:58:c9:f0:fe:3c:
                    da:04:df:b9:4e:b2:61:48:68:ab:37:5b:28:1a:07:
                    ec:df:b3:63:bf:ce:d3:5d:f1:11:5a:64:67:04:2b:
                    e3:c7:11:07:b7:55:28:b4:1b:c5:22:b1:c9:10:b0:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BA:D6:60:5A:E4:50:36:33:AB:B7:05:17:A2:71:91:89:0F:83:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/abde5797-0e16-3f69-a422-a741554c49d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.13.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a4:3d:b3:e2:52:33:1d:10:3a:ba:49:30:a9:0c:e5:da:26:
         b9:32:58:dd:bb:b9:67:c6:9b:d2:aa:40:b4:b3:fd:73:99:fd:
         2c:d0:7d:c0:88:2d:d8:b1:60:38:26:d4:ee:7c:ba:23:af:1f:
         9d:3c:ac:0d:e6:dd:1d:de:69:6a:96:f7:57:39:b0:29:96:7d:
         a7:ca:01:20:47:0d:3e:fd:cf:e8:d4:d8:42:2e:bb:6c:74:cc:
         09:54:48:35:e8:b8:c4:5c:4a:39:d0:b4:fa:d3:6e:1b:7e:39:
         11:fa:ad:9a:0e:4e:d2:97:2d:16:3e:dc:32:28:fe:44:17:e5:
         58:70:8a:59:75:c7:4b:27:f4:22:ea:c6:95:0b:96:f7:70:0e:
         1b:5a:75:cb:64:28:2e:8f:3c:68:46:0a:73:19:9a:2d:a2:1d:
         c8:6e:22:57:4f:9a:14:de:ad:8c:1d:de:bf:27:48:4f:ae:0d:
         0a:7f:9a:39:0f:5b:c7:00:33:cf:95:2b:80:8d:54:9d:87:c5:
         a3:d5:39:8d:25:6b:7f:d8:0b:56:66:2d:cc:de:bf:c7:a9:2c:
         2a:dd:a8:ba:9d:8d:25:96:a7:1f:0e:ae:68:87:85:3d:67:35:
         7c:df:44:8b:f5:f6:e6:76:46:65:dd:55:fc:8b:de:69:db:3b:
         24:b8:0b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:46 2025 by rpki-client