Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bad4bfd1-bce1-3f03-975c-45d055539c04.roa
File:                     bad4bfd1-bce1-3f03-975c-45d055539c04.roa (raw, json)
Hash identifier:          Ws0E4SmZVQsT8qcMSmAN0DLf2IZ7pOEtj1LdPJU+zCQ=
Subject key identifier:   70:64:7D:AA:81:17:1C:71:E4:73:AC:6B:52:8A:C2:96:03:AF:A5:D5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C65172F38DFA905FE8100
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bad4bfd1-bce1-3f03-975c-45d055539c04.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     46129
IP address blocks:        159.18.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:65:17:2f:38:df:a9:05:fe:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=02fe33dd-b079-4c23-b3ba-be01b26687d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:dd:40:72:97:e9:22:df:44:1a:3a:a0:32:
                    08:8b:65:ae:96:dd:94:aa:91:cc:85:04:bc:88:9b:
                    76:b8:64:1f:07:72:8a:0b:60:7e:ce:17:43:4e:09:
                    02:10:df:a7:1a:13:23:50:45:c9:76:8d:09:29:05:
                    26:eb:54:d6:32:7a:d4:3b:68:22:73:48:a8:99:22:
                    8f:3c:12:b6:d4:ed:a2:77:fb:9b:3f:35:46:de:23:
                    89:43:3b:6a:c7:49:ac:3e:34:7b:d6:9f:b9:c1:a2:
                    ef:e4:cc:f2:8d:2d:95:bb:97:32:ab:8e:dd:d0:c4:
                    8e:e0:14:ef:05:d9:84:2c:26:db:f4:04:10:15:35:
                    c6:27:97:b1:aa:09:4d:b5:63:67:93:35:cf:cc:50:
                    23:d0:34:bd:8d:76:38:75:ef:71:91:98:f4:fe:2f:
                    c7:4a:38:4a:6e:dd:94:9f:4f:2d:44:63:d0:98:08:
                    90:7f:c3:63:34:67:62:8c:3a:b0:c1:c0:b9:a5:5b:
                    bb:e0:e1:d3:01:d0:3d:cc:6f:9f:89:43:e8:ba:1b:
                    84:9b:76:fd:b7:be:62:89:71:4a:bb:51:5c:71:90:
                    96:0a:9c:82:f8:9f:21:4b:74:3f:a8:7e:b3:df:41:
                    32:8d:e7:b2:07:2a:dd:1e:21:83:48:5d:2b:88:14:
                    0a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:64:7D:AA:81:17:1C:71:E4:73:AC:6B:52:8A:C2:96:03:AF:A5:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bad4bfd1-bce1-3f03-975c-45d055539c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:79:fe:db:40:1f:dc:49:fb:6f:74:95:a1:01:85:76:9f:9b:
         c5:d9:f4:03:21:cc:9e:ce:a2:a5:e0:2b:48:05:99:e7:5c:f9:
         b0:e1:09:06:e4:39:e5:43:b8:8b:c9:ef:91:34:29:3e:7b:75:
         a2:81:8f:4c:18:9d:c7:fe:15:38:a3:57:8f:5b:26:a7:a3:ca:
         1b:0c:e0:75:cd:b4:75:cc:d5:0c:20:f5:5b:5c:6d:e3:10:82:
         9c:5d:34:01:c3:28:0b:22:80:c2:91:ab:f3:7b:a8:42:c8:9a:
         9d:21:07:04:3a:d8:6d:7c:4f:ca:cd:aa:c5:44:e2:c7:04:25:
         40:56:bb:a4:e1:be:01:1a:63:0a:69:b7:7c:7c:99:4d:50:ed:
         23:a7:87:ef:c3:0b:98:bd:e9:be:cd:b7:2a:0b:c5:fa:65:4b:
         86:be:01:3f:46:4f:6c:04:c2:07:f4:56:4a:fd:24:dc:d4:46:
         9d:77:44:06:bb:c2:b5:ce:da:a8:bd:33:84:00:08:23:82:d2:
         24:6f:c6:ef:c6:06:7c:1c:a7:40:c5:ec:18:7b:1c:e9:f1:85:
         db:1c:44:18:70:d4:70:1b:52:f3:52:82:08:31:61:2f:26:f4:
         57:19:33:b8:0c:fa:2f:a5:80:39:68:fc:ba:fb:a7:fb:b3:17:
         3c:ba:bb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:25:41 2025 by rpki-client