Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa
File:                     f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa (raw, json)
Hash identifier:          qjTIZ7tvxLZlkfWZc7jOw4fv0IyPPNV7SqdDY8yDvo8=
Subject key identifier:   8E:8B:42:D1:E7:E7:40:E5:40:6A:5C:FA:58:31:AF:D3:47:B5:0A:70
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C5618934D56E1C657DE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        206.191.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:56:18:93:4d:56:e1:c6:57:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=98dfaf28-2c18-4df3-a3c0-6650d6592820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:f9:f9:d7:fb:04:6f:c0:44:5a:94:c2:ec:
                    e6:74:71:89:76:0b:bd:20:9a:9a:16:46:fa:eb:ed:
                    12:6f:db:8f:d5:8b:13:4e:14:c9:d2:38:e2:a4:7e:
                    d1:dd:83:d1:1c:bd:d7:86:6f:0b:78:6a:1b:85:dc:
                    65:71:5d:ee:df:ef:6a:ca:e4:73:85:e6:6d:57:9d:
                    66:02:b6:00:be:3d:dc:65:8d:e2:40:5f:e6:43:e2:
                    f9:a8:3c:92:e4:ac:69:62:b5:4f:44:1b:bc:92:3b:
                    c2:4d:ae:d8:d6:cb:de:bb:e9:0b:c1:4f:a3:b8:0c:
                    55:5d:83:02:3d:2d:16:4f:24:00:2b:9d:46:a5:8c:
                    8e:eb:23:af:f4:69:e7:89:01:65:24:e6:93:0a:01:
                    37:5e:37:fd:04:67:0b:27:48:22:44:46:c3:bf:6c:
                    e8:98:34:74:95:34:b6:74:ea:f2:fd:f7:70:be:cc:
                    06:a6:ca:be:49:7a:17:8f:61:e8:6a:f1:85:a8:da:
                    dc:93:ad:b6:3e:5e:1a:ec:ae:72:e7:e0:03:e3:c5:
                    71:83:3c:bb:44:87:88:82:8d:06:d2:cd:d4:67:bf:
                    24:28:bf:af:5f:b9:49:6a:bf:e3:7b:b5:c8:64:e6:
                    ac:c6:1a:95:78:5e:6a:cc:3b:dc:68:df:f3:02:76:
                    ba:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:8B:42:D1:E7:E7:40:E5:40:6A:5C:FA:58:31:AF:D3:47:B5:0A:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1a9f909-9923-393f-b1bd-f91f3cf77ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:6b:b4:f7:53:fd:c3:29:01:1e:b5:04:41:0d:f6:b5:80:8d:
         75:50:c6:48:24:25:f3:1c:34:db:d6:50:fe:f4:db:e9:5d:34:
         4b:33:81:bd:83:4c:83:f4:57:a1:f4:11:43:24:43:29:57:48:
         da:ac:9b:bd:6b:c3:88:86:0c:09:d4:d9:16:df:14:dd:d2:3d:
         00:ef:8a:75:15:0f:de:9d:bc:ab:52:06:f1:3b:95:7d:f5:17:
         ad:e8:71:1e:6b:df:6e:af:fc:a5:96:e3:43:50:f2:05:58:f4:
         d4:05:f9:c5:33:03:e2:b3:cc:5f:4f:b2:5d:ea:30:55:84:07:
         c6:25:62:95:c8:3b:50:35:3b:7e:65:c4:93:b7:30:42:0b:3a:
         b3:6d:ef:3d:3a:1d:1f:d1:c4:d2:b1:da:0e:f4:08:00:a8:73:
         6d:7f:3d:b4:9d:2f:6c:48:9c:19:c9:b9:79:76:a4:76:07:6f:
         5e:9c:16:65:00:72:11:61:04:1c:73:a7:31:34:b5:b4:ca:65:
         b3:3a:af:da:10:71:81:a3:3e:7d:2a:e3:d1:34:97:bb:52:b7:
         09:ef:b5:55:53:9d:fa:23:b4:9f:48:02:d0:6c:67:6a:da:b8:
         c6:5a:f7:68:5c:b3:8b:90:94:b9:4b:35:40:9d:a0:53:95:a9:
         0c:cf:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:24 2025 by rpki-client