Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bc723ba7-968e-3d80-9277-8aa1fdc54d8c.roa
File:                     bc723ba7-968e-3d80-9277-8aa1fdc54d8c.roa (raw, json)
Hash identifier:          I5qZJVuFyIvVXiFctx2pYX7aaI9SBLDZVAVOQqm4h1Y=
Subject key identifier:   38:BF:E2:63:9F:39:69:E7:37:B5:A0:93:B9:36:C7:E3:F2:F8:77:A4
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C61AD55373360A93AEA00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bc723ba7-968e-3d80-9277-8aa1fdc54d8c.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        216.129.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:61:ad:55:37:33:60:a9:3a:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=78af4def-9374-472a-86e7-33d89a9f745a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b1:c7:a2:80:cc:6e:80:0f:00:2f:92:09:fb:
                    e0:79:c3:9a:08:90:50:40:96:a4:74:cc:73:e9:82:
                    6e:7b:a2:bf:23:cf:b5:87:2b:90:6c:44:00:b2:59:
                    2f:c7:52:7a:b8:94:9f:1b:b9:cd:8d:87:1d:34:f3:
                    fc:61:6c:1d:2e:a0:16:2b:c4:dd:af:74:c9:10:f6:
                    7f:fa:12:2e:68:55:e5:79:48:b5:17:11:07:85:2c:
                    6c:9f:e1:a7:b8:ef:30:29:4b:dc:9a:1f:09:3c:e3:
                    2a:95:fa:18:9b:1b:77:7d:7a:35:f4:a3:4a:af:0b:
                    71:50:0a:aa:55:ad:45:22:ad:b6:d6:db:90:bb:43:
                    61:9c:09:88:af:c0:8c:78:8c:fe:34:5f:83:a4:ba:
                    60:e6:a5:f4:d8:b4:a3:8f:0e:b0:81:2a:ab:58:42:
                    17:42:41:52:4e:52:a8:dc:7f:86:30:d0:68:46:88:
                    41:80:89:b4:dd:c9:74:de:fa:a8:a4:66:ce:8e:b6:
                    40:66:1b:fc:87:eb:88:85:6f:08:34:4c:0a:f3:35:
                    cd:f7:1a:7c:3e:7c:09:65:92:a0:2c:ac:78:42:43:
                    5f:d4:a1:55:4a:6f:3b:c5:ec:e9:3e:27:1f:91:87:
                    7f:dc:83:bb:3e:0a:74:7a:94:90:3a:58:ee:ac:87:
                    07:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BF:E2:63:9F:39:69:E7:37:B5:A0:93:B9:36:C7:E3:F2:F8:77:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bc723ba7-968e-3d80-9277-8aa1fdc54d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.129.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:1b:cc:d4:38:61:9f:d9:1d:58:9b:82:7c:a4:08:b4:4b:bd:
         6d:7c:49:ac:92:05:33:01:fc:5e:b5:ea:38:46:e8:50:f6:3f:
         ea:1e:92:da:eb:ad:cd:4d:93:3b:84:91:d5:20:00:d2:0a:7d:
         8c:48:24:23:9d:b6:36:a3:ba:f5:fb:cf:3a:93:ac:5d:4a:fd:
         77:c5:ae:1f:67:83:88:2d:14:b7:47:1a:df:bf:ee:50:8e:6a:
         8f:f9:c1:df:70:a7:9a:e9:45:78:f3:eb:39:b8:f8:dd:77:4d:
         55:e4:30:f8:58:20:c2:7c:9a:b8:24:fd:dc:89:48:1c:88:fb:
         82:02:65:85:fa:90:5f:6d:42:7e:a9:f3:85:9c:78:ce:2e:db:
         a6:af:50:52:a6:ac:40:3f:f6:94:59:00:5f:86:64:cf:ec:f7:
         5f:61:8c:79:fa:c4:09:ce:27:93:e4:b8:fa:0d:06:40:53:ca:
         69:57:a1:87:81:0d:62:f4:cd:82:28:56:3b:db:c8:ac:54:4e:
         f2:43:de:54:19:39:5c:a1:87:cf:d0:84:a3:92:d6:f0:83:6e:
         24:06:0d:28:64:f4:28:5c:e3:08:79:a0:8b:9f:3b:a1:74:47:
         b2:af:bc:61:ba:cf:de:0f:e9:19:77:97:9c:80:9e:04:24:d5:
         96:4f:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:28:54 2025 by rpki-client