Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1d302251-1b2c-378d-a3e4-fff35e26e30d.roa
File:                     1d302251-1b2c-378d-a3e4-fff35e26e30d.roa (raw, json)
Hash identifier:          aZiKIMRaH/FiJwXCKIQNxfmAVlP13A7IoLZig52iHVM=
Subject key identifier:   6D:B1:C3:ED:3C:6F:09:BE:CB:E5:E3:96:8A:13:FB:CD:D6:35:43:AF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103E2CEE4FE382F3060A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1d302251-1b2c-378d-a3e4-fff35e26e30d.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     21632
IP address blocks:        66.62.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3e:2c:ee:4f:e3:82:f3:06:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=6c5641b4-1127-4d92-8912-f35f36e7e149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:81:7a:97:29:40:6a:f1:a2:2f:27:f7:6a:ec:
                    d2:df:5a:9d:fc:19:69:13:ae:f6:cb:1d:fc:f7:c1:
                    29:9b:a8:74:f4:ce:87:28:18:d4:f4:59:d1:98:a3:
                    97:e5:9f:1c:08:5c:21:78:f8:44:b6:1d:28:51:af:
                    29:e0:b1:f9:b9:90:36:1a:41:74:bc:48:c3:bc:97:
                    80:61:39:ed:5d:cb:86:1b:9e:fe:0c:0a:55:b8:bf:
                    1a:40:a7:f8:af:99:bc:ed:8d:a3:72:92:5d:ff:95:
                    3b:0b:80:ab:ce:78:5c:cd:ee:ab:a2:13:87:ba:ce:
                    28:02:0d:66:4c:f4:5d:fe:1c:90:a5:15:c8:9e:d5:
                    89:36:4c:96:9b:48:dc:fc:99:c7:c1:16:fd:4a:ea:
                    94:3c:b9:1e:67:0a:3b:7e:7d:eb:0e:8b:db:d0:29:
                    e8:89:f7:93:cf:9c:f1:c5:85:da:75:4c:0d:f4:37:
                    97:c6:9b:87:08:df:3c:7b:32:d0:c2:75:7d:cc:c1:
                    23:29:23:fb:13:93:a8:17:f4:b2:19:65:49:f3:a5:
                    52:47:69:98:aa:79:4c:a0:50:4a:80:02:cb:53:78:
                    61:62:d1:ac:39:30:b1:e1:f5:90:29:e9:3a:5b:73:
                    92:2d:b1:9a:66:87:c7:db:1e:6c:6d:3a:0a:3b:5d:
                    99:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B1:C3:ED:3C:6F:09:BE:CB:E5:E3:96:8A:13:FB:CD:D6:35:43:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1d302251-1b2c-378d-a3e4-fff35e26e30d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:60:6f:8f:11:bb:ea:a5:d7:3f:4f:e1:88:7d:55:73:f1:91:
         a7:6e:34:88:d0:17:7f:eb:6c:68:06:b0:c3:25:08:d9:67:dc:
         52:0d:ae:0f:23:24:a1:3d:0d:03:c3:30:31:ba:6b:3f:80:cb:
         eb:44:c9:a5:f8:3f:f3:70:03:2c:ab:fc:77:c5:ac:f4:37:35:
         42:d4:47:83:d6:62:00:d3:8e:0f:b5:17:dc:f2:3a:e4:46:da:
         53:d8:6e:95:72:97:be:fc:fa:f7:b5:fd:0c:d4:4b:04:73:8a:
         c5:a9:3f:87:f1:b0:d0:51:96:97:cf:7a:c0:66:1d:f2:9f:21:
         b7:c2:4a:66:2c:28:f1:8a:42:9f:e0:aa:38:04:17:c5:c6:ca:
         2b:a6:cd:4b:fe:f1:ca:32:51:1d:58:22:15:5a:64:1c:36:38:
         c9:0d:62:d3:eb:ee:ef:a3:e5:0f:2c:97:1b:ee:b3:fc:ef:62:
         7c:7a:c4:2b:c7:4a:b0:fb:57:ad:6f:c4:6a:d0:65:eb:88:55:
         a7:93:70:a1:d5:96:fd:41:54:f3:15:f9:2a:db:7d:0a:d7:9c:
         82:9e:bf:b0:10:e4:bf:33:8b:54:e9:c9:0d:fb:b7:45:a1:30:
         10:9e:61:12:7f:6e:53:3f:b8:dc:36:e3:91:02:90:99:e1:2e:
         92:21:3b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:39 2025 by rpki-client