Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa
File:                     df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa (raw, json)
Hash identifier:          JosAdzZX7ZQQh1lxo7TSDKzlOGzbcG5EdSew+/pJ3YA=
Subject key identifier:   68:26:23:55:98:B2:27:07:20:20:AB:74:8C:CB:0D:D4:6E:D5:53:FB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B56D74C52EB855687E17F7880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     394973
IP address blocks:        209.249.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:4c:52:eb:85:56:87:e1:7f:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=4e2d1ae3-b20d-497d-8aad-0cee4f1630d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2f:fd:38:36:39:f3:02:65:43:74:7a:8a:57:
                    5f:9e:80:09:60:48:4a:e4:25:61:fa:19:ac:9c:a5:
                    3b:1f:69:f9:81:69:c3:e4:bc:fb:c9:12:b3:e6:e3:
                    c9:65:70:63:c7:c3:78:d6:a8:0f:41:7d:46:db:49:
                    f8:a5:84:26:c0:2d:b7:61:5d:23:4e:5a:13:15:31:
                    5e:be:98:de:64:5e:63:52:f5:06:81:4e:74:fd:69:
                    76:06:f2:7a:3f:77:ca:46:ad:d5:5b:3c:26:42:4d:
                    e1:aa:40:a6:d1:5d:c2:c8:a0:83:b7:13:eb:48:fa:
                    e1:e8:c8:a4:0a:5d:c7:42:2c:75:ae:27:bb:3d:98:
                    0b:1a:84:04:3d:38:f6:9f:0a:21:76:bc:84:7b:95:
                    7b:5f:01:2d:ce:15:de:4b:ae:d2:d0:8f:9f:a1:19:
                    98:6a:7e:ce:6a:df:7a:4b:d5:55:35:67:0f:73:b3:
                    ce:91:76:94:4a:03:3a:79:7b:a4:04:90:b8:98:1c:
                    ca:a4:2c:f8:01:57:6b:26:14:5b:65:19:b0:30:59:
                    dc:ac:f3:62:7f:2b:f2:d6:50:f5:29:85:c1:78:d2:
                    50:4a:f9:d0:83:86:68:a8:d1:2a:6f:fa:be:a1:b2:
                    34:d0:50:d8:a4:3b:3d:12:2b:c8:71:fa:f8:50:56:
                    e4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:26:23:55:98:B2:27:07:20:20:AB:74:8C:CB:0D:D4:6E:D5:53:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/df5de06c-6f7f-354a-b1a4-b4951bbc8135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:58:88:97:af:d3:47:a8:3d:3e:08:ca:9f:44:3c:87:6f:4b:
         fc:a4:f8:6e:62:ff:36:e0:4c:6f:fd:46:08:ba:0b:5c:13:b0:
         f3:7c:3a:b0:f3:1f:52:42:d6:32:86:e8:84:f3:e7:63:b7:84:
         7a:93:eb:a4:cf:ae:dc:c7:99:f4:7e:83:25:60:9a:52:bf:0c:
         2b:d5:50:66:90:74:03:bd:15:c0:b7:83:31:d3:ad:e6:2b:a5:
         bb:71:53:5e:f5:0a:24:b6:71:35:a9:82:34:2d:2c:c9:df:7e:
         7e:71:df:3b:0b:b0:a5:db:89:17:6c:d3:80:ee:9d:a3:0a:1b:
         8a:72:aa:a6:8f:8a:0f:84:7a:1b:9b:b7:b5:2a:25:79:bc:eb:
         1e:c7:b7:36:ec:34:9d:cb:22:93:29:aa:13:ec:b1:04:38:86:
         41:42:fb:85:c1:98:eb:03:89:55:b1:15:20:b6:23:43:88:b4:
         55:a3:73:e5:d6:e3:a1:25:f8:7f:d4:15:83:30:81:62:9d:37:
         4c:f7:d3:ba:b7:fa:1a:36:2c:6e:9c:f9:f5:d5:42:b0:36:bf:
         2f:90:cf:43:e7:13:27:63:9a:4d:a4:ad:2b:f3:bb:f5:aa:c2:
         2b:8f:16:93:66:00:9e:9a:1b:f5:22:7d:be:d8:57:20:98:0c:
         c5:3d:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:27 2025 by rpki-client