Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
File:                     150163dc-8b27-3e02-913c-e2a4c34fdb91.roa (raw, json)
Hash identifier:          IJE3vE750k6S+9wDl9XHOubVnbSZ4XgDaVtycsil6dk=
Subject key identifier:   82:6D:95:AC:B2:20:22:2E:2D:22:7A:42:FB:0C:15:AB:84:B5:FF:B6
Certificate issuer:       /CN=cb01b28a-436d-42dd-8750-5361f2309297
Certificate serial:       010D0C9F4328584B13D6BC2555AA10BCB2597580
Authority key identifier: A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     9312
IP address blocks:        93.179.124.0/22 maxlen: 24
                          94.103.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:bc:25:55:aa:10:bc:b2:59:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb01b28a-436d-42dd-8750-5361f2309297
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=a344a6a1-5c77-40e3-a5ac-768b9ea107e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:13:d7:72:c7:15:cd:73:13:a0:c3:8e:90:
                    d0:31:98:d1:f7:e6:bc:eb:13:0e:e4:79:4b:d0:68:
                    0b:43:de:04:a5:6f:7c:2f:12:c8:33:ca:8d:f4:12:
                    1f:09:d4:41:cd:b6:45:c7:8f:92:b6:55:d4:92:aa:
                    a9:6c:f8:fd:4e:60:97:fb:a9:a7:06:93:c2:44:6b:
                    cc:e3:ad:3b:b6:39:41:78:be:ce:74:32:d2:f7:be:
                    7f:2e:d8:a5:0d:06:7e:53:63:81:f4:7c:83:a6:62:
                    72:7f:f1:67:33:41:a3:e9:6f:f6:da:9d:66:79:0c:
                    b3:25:be:90:29:af:c6:77:0e:2e:73:6a:5d:8a:5f:
                    c0:b0:b5:97:cd:a0:cb:83:3a:4a:9e:d6:0d:73:2b:
                    0c:e1:05:63:5a:af:4d:ce:7c:ec:4d:bd:77:23:c9:
                    14:e0:1f:ff:08:5a:33:95:27:c4:05:67:f0:3d:cb:
                    49:0e:5e:a0:42:13:ae:48:32:1e:a0:45:ca:a7:3c:
                    8a:71:3e:7c:83:fe:de:b9:c2:5e:30:3d:7b:72:ba:
                    b6:1a:a6:88:cc:e3:8b:23:42:6a:45:30:bb:a1:51:
                    7a:a2:3b:ae:78:f1:e3:1c:2d:46:67:66:12:30:a5:
                    8c:55:09:66:51:63:8d:76:22:db:73:d3:ec:02:3d:
                    fd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6D:95:AC:B2:20:22:2E:2D:22:7A:42:FB:0C:15:AB:84:B5:FF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/150163dc-8b27-3e02-913c-e2a4c34fdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297/cb01b28a-436d-42dd-8750-5361f2309297.crl

            X509v3 Authority Key Identifier:
                keyid:A0:3F:D7:81:F7:6B:86:20:05:40:B3:B0:F1:5E:57:49:8A:88:1E:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cb01b28a-436d-42dd-8750-5361f2309297.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.124.0/22
                  94.103.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:ad:92:c3:9f:58:76:83:8c:8c:90:e4:22:92:5b:11:5e:7d:
         8e:d8:bd:2b:4a:8d:3e:fa:1b:82:40:28:46:37:37:ba:d0:06:
         4f:aa:3d:ea:ea:83:4e:7a:b7:7d:7e:2c:02:2a:d9:86:29:b9:
         9b:f2:3e:21:b9:69:22:ff:1e:f6:76:b4:dc:5b:03:de:6a:02:
         56:84:db:7f:29:62:d2:13:3c:61:c3:5d:28:89:ed:9d:86:77:
         81:bd:15:7c:05:65:3c:5c:b9:1a:aa:69:46:8e:cf:a6:e7:8d:
         b6:ea:e8:9f:47:65:a1:05:72:84:b5:c2:21:58:30:b6:7e:78:
         fe:8e:e5:78:96:df:a3:20:62:60:81:84:25:91:7f:dd:8c:af:
         5c:83:af:77:2e:66:82:35:6c:42:c8:76:13:02:9c:d5:c6:3d:
         a2:57:6d:9e:d3:64:5b:12:ea:cb:ab:d4:a3:d2:fd:9b:7b:ef:
         9e:a6:25:9c:5e:42:00:df:e4:48:77:80:b6:59:ce:c7:83:8f:
         a3:f4:d5:84:15:63:5f:61:60:c9:c8:90:2a:58:d2:03:83:6e:
         54:b3:ac:3a:12:bb:b4:d6:85:66:dd:0b:cd:c1:3b:8b:b6:4b:
         09:7f:7e:cd:4d:bd:91:5e:7e:57:21:17:17:2f:12:2d:93:cf:
         74:3f:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:35:30 2025 by rpki-client