Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11b469c1-4cf8-3d0d-a451-1c54f257485d.roa
File:                     11b469c1-4cf8-3d0d-a451-1c54f257485d.roa (raw, json)
Hash identifier:          VB56+Aa8T4hfCMQMC+SYU8X5HHGfRXPi9FJUW02j5Z4=
Subject key identifier:   A9:2D:25:A3:0E:48:AA:B1:58:BC:2B:1E:67:9A:0A:EC:DB:CE:F2:BB
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B970CEC08DD297837C7F29B70
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11b469c1-4cf8-3d0d-a451-1c54f257485d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     63296
IP address blocks:        216.200.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ec:08:dd:29:78:37:c7:f2:9b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=d4cebf35-5f9e-4624-b74d-05ac6b476464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a5:51:d9:d9:d7:19:c6:5e:49:e8:2f:2c:1a:
                    07:d3:8e:44:83:c3:0d:55:a4:07:f9:52:12:c4:ae:
                    64:2a:bd:2f:46:16:de:22:74:2d:af:ea:fe:48:3c:
                    0d:06:d9:ed:20:bc:3d:af:a2:78:6f:c6:f2:1b:65:
                    3f:3b:76:92:9f:71:98:19:5e:e3:db:0f:42:3c:9c:
                    86:6c:c1:58:42:fe:bb:39:c2:bc:bf:5e:2b:f1:71:
                    99:a7:89:8d:a4:ae:4f:42:e7:02:b5:c3:a0:e7:aa:
                    3d:22:d0:ae:33:e6:0b:7b:35:95:f3:02:68:ff:58:
                    18:86:9a:63:eb:87:c7:64:24:6a:0b:48:3f:41:f0:
                    9f:a8:63:29:90:8c:22:e4:01:75:19:c2:3c:95:7f:
                    12:b4:11:d4:54:3d:1e:a0:1d:16:e5:29:3a:b8:be:
                    d3:7a:b2:17:c6:74:69:24:26:96:e0:44:61:40:ef:
                    9a:c9:10:a7:81:3d:12:e1:7a:38:f4:d8:f1:cf:18:
                    86:8d:58:df:3e:c8:44:51:cf:20:bb:cb:3e:3a:19:
                    e9:62:05:5c:40:71:81:13:5c:f3:04:97:dd:c9:d5:
                    a3:3b:45:33:f3:46:df:cf:4f:bf:23:98:f8:bb:c4:
                    2f:2d:0b:a9:45:15:df:f6:e7:19:91:db:66:7f:b7:
                    cd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:2D:25:A3:0E:48:AA:B1:58:BC:2B:1E:67:9A:0A:EC:DB:CE:F2:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11b469c1-4cf8-3d0d-a451-1c54f257485d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:80:10:97:20:6d:af:90:91:99:24:a0:3e:df:a2:a1:b5:
         a7:04:29:46:a7:3f:59:1d:d2:83:96:5b:af:4d:6c:11:09:12:
         1e:bd:c5:27:21:d8:52:36:86:3b:8d:78:b8:c6:9f:75:cb:cd:
         06:f4:d8:df:10:ea:a5:7c:c9:84:bb:0a:bc:f9:78:93:d7:95:
         0b:e5:3f:1e:0d:e5:97:7a:d5:30:34:73:d9:cd:3c:fe:61:cf:
         3a:66:e4:7f:02:cd:ae:26:eb:19:0f:2d:88:3f:af:a5:27:cd:
         d4:cc:cc:9b:1b:ac:e3:fb:08:dd:c3:fd:9a:15:63:6a:fe:b3:
         9f:d7:6e:db:ff:8b:c6:61:a5:0a:81:22:96:25:6e:be:a5:f4:
         b0:97:a1:f8:09:a7:27:8b:e4:47:75:4f:4d:fb:93:bb:7a:ae:
         3c:df:42:96:03:94:24:75:da:f6:2b:2a:e4:51:b0:2c:bf:75:
         dd:26:c7:27:6e:8f:08:b6:ee:29:b7:ca:60:5f:f5:0a:de:be:
         98:59:c6:21:80:3c:60:a5:8c:2d:6e:ba:18:f4:38:bb:13:dc:
         bc:bf:85:81:d9:6d:98:c3:d2:79:3a:32:35:3c:b7:20:09:5a:
         c0:ac:7c:d9:9e:da:70:2b:e0:ed:5c:e4:df:f0:2f:f6:eb:e1:
         e4:4f:d2:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:12 2025 by rpki-client