Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d032f7ea-7f92-3c31-88e1-bb1499a4b8bd.roa
File:                     d032f7ea-7f92-3c31-88e1-bb1499a4b8bd.roa (raw, json)
Hash identifier:          3nbVZGTPpKqlSwcKdTsxrhvBOqDi+l1yPm1iavu4+xw=
Subject key identifier:   C7:A4:55:5A:08:AE:46:9C:57:9A:0A:4A:AE:FE:FE:60:6D:B0:17:63
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C61C49B28E24BCB901D88
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d032f7ea-7f92-3c31-88e1-bb1499a4b8bd.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        216.191.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:61:c4:9b:28:e2:4b:cb:90:1d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=03a0dad0-c13e-462c-9cac-ced1cac01b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:93:0a:97:05:84:25:5b:8d:82:df:69:43:
                    67:57:09:26:b0:70:53:f6:6e:fc:39:27:44:d7:47:
                    82:ad:ff:6e:35:57:be:52:2e:54:6c:ae:ad:3e:e5:
                    20:0e:ca:66:06:f2:c7:7b:66:14:02:04:b6:c9:3f:
                    91:f0:74:d9:d9:bc:8c:1c:c9:b9:7b:4c:46:c5:16:
                    03:9c:ae:d7:9d:25:ac:47:75:a2:24:51:92:50:af:
                    d3:f6:aa:97:d5:14:cb:d9:65:ca:31:f5:9b:58:9d:
                    ae:8f:76:89:67:a7:63:74:83:9f:ff:b8:11:41:74:
                    48:2d:3e:bb:7f:42:ca:b3:9a:4e:ec:2a:20:6e:2c:
                    e8:ef:2f:a2:c7:b4:1d:b6:75:7d:98:86:17:79:c9:
                    9e:2c:27:a2:cc:64:ea:79:4b:63:65:ef:86:64:2a:
                    89:08:e4:ec:99:3d:7a:76:da:d9:29:eb:68:bd:7a:
                    b1:60:3e:99:26:a3:2e:6c:59:6e:25:b9:1f:4e:bd:
                    21:83:8e:4e:4a:00:97:df:5f:e5:e6:0b:e6:46:8f:
                    fb:c9:b1:7c:c9:cc:4f:0d:43:7d:d9:cb:eb:8f:2f:
                    c8:15:bd:c8:7f:b3:65:d7:da:50:36:02:d2:23:2e:
                    1a:94:d9:28:52:61:3f:4a:36:39:3b:33:c4:b4:c0:
                    6f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:55:5A:08:AE:46:9C:57:9A:0A:4A:AE:FE:FE:60:6D:B0:17:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d032f7ea-7f92-3c31-88e1-bb1499a4b8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:80:55:29:86:77:68:c3:5f:bc:3e:98:c3:32:fc:37:90:b1:
         86:18:27:20:b4:59:b1:63:64:98:62:89:e9:25:8a:19:5f:78:
         df:82:4e:59:f2:6a:5b:f5:35:da:d7:f3:1a:12:7f:56:27:48:
         d5:5e:87:f3:4b:cf:fd:8a:6b:ab:85:c1:bb:ba:46:34:0e:a5:
         da:73:ef:28:3b:14:45:9a:83:46:eb:15:b8:be:a8:c7:f9:83:
         41:56:54:1c:19:b1:13:8c:6a:3f:a8:e2:d0:ef:3b:1d:17:e0:
         34:ce:c6:bb:6d:2b:e2:97:a7:15:01:0a:3f:c0:23:04:cd:df:
         ae:78:d9:39:5b:0d:76:71:87:3d:39:c9:94:11:6e:9a:44:0b:
         a7:e2:73:c7:ed:9f:e0:7d:35:08:3f:59:a6:a7:cb:20:f4:3f:
         61:92:30:59:45:30:d4:a9:c4:be:b9:e3:09:37:d0:0b:65:f7:
         37:2b:8f:11:a1:2a:49:c2:ec:26:78:24:12:0e:ab:6a:bf:31:
         33:3f:61:12:82:eb:95:c1:5c:78:77:ac:8c:44:34:ac:f4:f2:
         c8:c4:40:d5:06:27:8d:08:bb:89:ab:5c:d5:23:dd:ac:52:fa:
         27:7b:53:8a:79:2a:4a:8b:6d:f6:c6:d3:0c:76:93:0e:7c:5c:
         46:c3:b8:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:57 2025 by rpki-client