Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1f4f293-7f64-344b-876c-d522422e4744.roa
File:                     f1f4f293-7f64-344b-876c-d522422e4744.roa (raw, json)
Hash identifier:          SCSh6KQpKzQLTdzFZsWAO1kEQPvIj3YWWJsHe7+aHuE=
Subject key identifier:   AE:5B:74:94:BE:D0:D7:9E:2E:7F:6A:0F:D5:11:83:D2:F6:AB:01:93
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B2A2C56DE69D9AF5E42974060
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1f4f293-7f64-344b-876c-d522422e4744.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     15290
IP address blocks:        207.245.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:56:de:69:d9:af:5e:42:97:40:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=1b9682da-dd95-45c6-8ced-58445e073fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:7a:ea:bb:43:e3:79:5e:e0:16:6d:7b:6f:
                    eb:6c:2b:6b:89:c8:0f:96:e2:10:b2:06:ea:d1:0b:
                    36:01:de:4b:f9:21:f7:5c:9b:83:65:80:7d:78:6e:
                    2c:2e:ac:c6:89:89:9d:53:f7:3d:6a:96:c5:3b:49:
                    c3:3f:e2:b6:c4:f2:60:15:1d:81:77:2f:79:34:05:
                    d4:a3:8d:b1:42:97:88:95:5d:d9:ed:76:14:33:00:
                    c6:c4:dc:26:4a:82:16:df:84:23:2c:14:cd:a9:ae:
                    f9:de:82:17:ba:e3:16:f1:ba:c8:03:2c:4d:cd:44:
                    4b:33:4c:7f:72:3c:12:d2:67:90:82:e7:1a:21:27:
                    85:77:19:b8:9b:c4:e5:7f:2c:05:e4:81:7b:37:31:
                    36:dd:39:6d:72:ae:94:6a:80:81:12:b9:39:6c:4f:
                    9e:aa:89:53:60:83:1b:76:9d:0c:da:78:6b:0c:3d:
                    4f:33:02:d6:f3:87:b0:05:6b:d9:38:5d:1b:2f:10:
                    2c:56:84:95:b3:84:1c:dd:db:dd:9a:0c:8e:6e:7c:
                    ba:db:5c:39:fa:54:93:ed:f2:0b:8a:a9:ef:b5:21:
                    c0:29:72:71:12:83:c1:8c:50:93:00:30:b9:37:94:
                    98:8f:82:f3:85:f5:5d:d9:29:24:a1:a8:6b:49:26:
                    e0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5B:74:94:BE:D0:D7:9E:2E:7F:6A:0F:D5:11:83:D2:F6:AB:01:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f1f4f293-7f64-344b-876c-d522422e4744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.245.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:82:90:06:a4:72:36:3c:c0:c2:b0:b1:29:f9:6d:23:63:e8:
         ed:1b:26:6e:99:06:ae:e0:1a:4c:dd:73:45:56:a5:91:e1:ad:
         8f:ff:b7:8e:01:42:06:e3:c2:d9:38:3a:73:0d:01:ba:1f:04:
         38:04:1e:bc:76:d7:a1:15:6e:ae:93:ca:1f:6d:67:39:c6:32:
         ce:f4:ee:aa:ff:bd:b8:41:53:93:7c:2f:92:56:f7:17:3a:94:
         1c:0d:00:87:50:c0:84:96:2f:2d:b2:d7:fd:9b:f1:07:28:26:
         90:06:e7:11:1a:04:2f:b6:bb:9a:78:06:65:47:e2:6d:89:b5:
         19:20:df:00:de:d4:21:bc:0e:a9:a7:07:e4:0a:22:e2:c3:74:
         07:d6:54:3d:a2:02:01:a9:40:98:54:ad:49:4a:62:c6:1e:cb:
         f5:90:a7:fb:f9:51:02:79:09:c6:42:ad:e5:12:aa:d7:74:65:
         d0:1b:58:8d:ea:15:33:63:8e:4b:c8:b1:eb:74:52:c4:20:52:
         31:ef:35:c6:45:da:50:e7:40:a9:d3:70:31:59:1c:c2:c1:66:
         a1:5b:50:98:0e:e1:65:f0:de:df:12:31:36:13:9a:d2:b7:f5:
         40:bc:bd:4f:ca:bf:db:14:b4:87:74:5e:17:08:bb:82:61:aa:
         c1:49:38:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:32:09 2025 by rpki-client