Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/081bd891-ef96-30b3-949b-055da9282a62.roa
File:                     081bd891-ef96-30b3-949b-055da9282a62.roa (raw, json)
Hash identifier:          adI2HOWwcbzcRs0mjKsntX9ozMl3Fe21KsFnir1QiKc=
Subject key identifier:   BA:52:5E:87:C7:F1:B1:F1:5B:0B:94:1F:BD:F4:63:1F:A4:7A:79:DD
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BB0D83D2824121A883380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/081bd891-ef96-30b3-949b-055da9282a62.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     393642
IP address blocks:        208.185.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b0:d8:3d:28:24:12:1a:88:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a3fa35be-c75d-46de-a9c1-3f8cb035dc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:f2:e0:95:d6:82:25:1e:17:e4:bb:a9:7b:
                    63:f9:c1:ea:a9:d8:38:72:8f:e9:4d:a5:d7:f4:1b:
                    bf:c1:33:68:ff:fe:9d:3b:eb:0c:6c:78:65:f6:26:
                    8f:d2:6b:25:06:b0:68:17:f7:5b:f3:5a:e0:9d:84:
                    03:d2:de:e7:ef:e2:df:f6:e3:4a:6f:d2:5c:8a:fe:
                    8a:19:1a:24:6c:94:13:9c:52:54:27:34:e6:d2:2f:
                    b9:7a:ae:02:9f:a9:9c:c9:d1:c9:45:a7:67:94:28:
                    bc:59:03:ff:29:78:b9:6d:b8:bb:9c:69:de:19:63:
                    1d:a3:e6:42:ef:dc:9b:5b:e9:67:33:d5:fa:10:e1:
                    9b:ea:67:84:a4:b2:cb:95:53:3a:9b:76:6d:d2:5f:
                    ec:b1:3e:be:e5:30:7e:d2:54:68:4d:8e:8f:b4:97:
                    cd:ea:70:91:b4:20:eb:63:7b:61:7c:a4:c6:68:72:
                    72:c2:40:e5:a1:fa:97:57:47:69:4b:9f:35:0e:9d:
                    d6:21:04:a4:f3:f5:fd:f4:95:34:01:2c:cd:53:38:
                    1b:6a:6e:53:0b:82:65:f0:44:75:37:f5:ce:ab:c3:
                    d9:c9:77:f8:31:9e:1a:ed:a2:ab:42:38:63:18:94:
                    46:3f:8e:61:2f:1c:8d:c9:df:59:b7:3d:a2:af:b6:
                    3a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:5E:87:C7:F1:B1:F1:5B:0B:94:1F:BD:F4:63:1F:A4:7A:79:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/081bd891-ef96-30b3-949b-055da9282a62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:38:81:6b:5c:08:5f:f0:a7:31:1d:df:4b:0b:e8:df:7f:
         68:ad:bb:bc:6f:d7:4b:b2:6f:47:0d:ca:54:c6:77:b8:22:4f:
         40:14:ea:15:2f:f9:33:bc:96:70:ac:68:c3:64:e2:f0:6a:5e:
         45:13:e3:a6:ab:4c:65:2b:04:ff:da:6e:97:90:17:e8:03:ca:
         25:5a:1e:b0:0b:47:0a:1d:95:cb:04:0b:99:ca:0f:3b:7e:07:
         c8:47:44:c6:ba:b4:8a:26:a7:fd:bf:fa:5b:af:f4:29:d5:96:
         48:77:28:90:8c:ea:ef:6b:a8:a0:00:80:96:30:38:e8:ff:92:
         70:8c:55:1e:ca:7f:56:4e:62:c1:cb:db:0f:2f:a2:59:b2:a3:
         be:83:d6:92:d9:50:ec:cf:fc:85:7c:6d:85:cb:b3:8d:d0:3f:
         71:bb:e6:4d:00:0b:c4:89:1f:b2:c5:8d:b6:d4:67:11:05:85:
         6f:3d:13:51:b7:8f:97:73:a9:ac:4b:48:86:7e:5d:8c:bd:96:
         25:61:16:90:c0:64:68:ed:55:21:e1:42:9e:2f:5c:60:93:d8:
         77:b0:a3:92:cb:82:c6:dc:ee:7e:93:44:d6:fd:f3:8f:d1:ca:
         37:da:68:23:bd:d0:3c:66:cf:a4:87:aa:97:8b:09:fa:fb:39:
         48:53:40:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:38 2025 by rpki-client