Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e8e2895d-36d9-3f37-99b9-d7d5c355f928.roa
File:                     e8e2895d-36d9-3f37-99b9-d7d5c355f928.roa (raw, json)
Hash identifier:          db1eBSNzCUAUxEGPYZJ9kGc08M9xoNXck8pG6r7s1l8=
Subject key identifier:   EE:4F:34:C2:41:24:3F:A3:55:2E:39:E3:83:75:18:4E:C7:2D:9F:6D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5B62BBF585A21106F180
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e8e2895d-36d9-3f37-99b9-d7d5c355f928.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        209.146.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:5b:62:bb:f5:85:a2:11:06:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=b99b7877-dfde-44a3-96e2-70b3fe9ef186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f7:ae:b6:40:3d:3f:27:9f:d1:1f:91:26:3b:
                    75:5d:d5:1b:78:6a:ad:9d:a1:ab:08:c5:5c:07:8b:
                    db:bd:ac:e8:23:ad:9e:70:71:22:2f:7c:16:34:21:
                    da:94:c3:86:00:e3:92:ac:35:33:9a:bc:55:23:53:
                    7c:be:83:bb:d4:5c:03:11:cb:55:17:7c:8a:3c:15:
                    cb:6d:d6:d5:01:d0:24:69:f3:83:b2:b2:ad:cc:dc:
                    36:de:e2:7a:65:c9:d9:96:c2:7d:48:a7:42:7f:eb:
                    be:16:ed:90:80:e5:c6:4e:c9:95:23:95:b0:85:23:
                    2d:73:29:8c:35:ea:c9:c1:7d:30:5a:0b:24:67:fa:
                    e3:0f:31:39:fa:6c:8f:aa:a0:76:b1:bc:05:16:b9:
                    27:0b:eb:05:79:60:ed:e7:c8:53:e9:51:9d:2d:ba:
                    c2:66:00:ee:3d:db:8f:8e:20:bd:33:0f:95:a3:ae:
                    72:27:6d:cf:19:d9:24:ad:26:39:cd:42:ad:c4:1b:
                    17:c0:da:92:50:9f:3b:bf:ca:8c:0b:76:c7:77:96:
                    9d:6e:1d:9d:64:89:4c:ee:7e:76:a5:82:7b:05:23:
                    8a:03:30:ce:43:94:04:e2:4d:a5:43:e5:d9:1d:a3:
                    04:9c:31:fc:8e:79:23:9b:62:7f:b8:27:38:3b:68:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4F:34:C2:41:24:3F:A3:55:2E:39:E3:83:75:18:4E:C7:2D:9F:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/e8e2895d-36d9-3f37-99b9-d7d5c355f928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:51:44:05:53:b8:c0:26:23:18:f7:37:45:d2:44:dc:a7:f1:
         a0:77:38:ad:4f:d1:ee:17:c7:a5:5a:bc:c8:7c:d8:b7:63:c8:
         1a:a8:e9:2c:c4:01:ad:ec:bd:12:b6:80:4a:85:e0:3b:22:0f:
         4b:41:ee:81:79:c2:f6:65:be:ed:37:d8:36:d6:9d:50:ad:ed:
         de:5f:30:c5:56:fa:41:0b:8f:8c:59:7d:b4:da:23:62:8d:b2:
         8c:ca:3e:24:2a:52:ef:b6:45:89:5e:c9:ac:0c:92:b5:d5:67:
         50:e6:30:d9:59:7e:f8:a6:05:00:9c:ad:73:76:f9:aa:39:94:
         4b:b5:2e:ab:ab:f2:5d:d0:a0:fe:a2:e1:f5:52:79:64:f4:12:
         b7:aa:6a:50:a6:b1:3a:33:f8:f4:0a:92:83:9a:d3:c5:79:26:
         a1:87:b3:e0:94:c4:05:95:72:08:61:50:42:60:a5:91:5c:e0:
         0e:c3:7a:8e:b0:89:22:62:44:d8:f8:f4:e7:c3:13:6b:5f:fe:
         87:18:c4:80:5a:dd:c1:ad:21:2a:27:0e:7f:8d:6a:f3:a0:d2:
         98:b3:b2:6c:e0:0a:d1:a9:d3:bb:39:0b:06:06:30:1b:5e:c9:
         b1:71:80:0d:03:65:48:94:e4:62:7e:aa:ad:d3:05:0c:75:d2:
         9a:04:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:30:11 2025 by rpki-client