Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/236bcf51-5ba4-3fd7-9685-87706dc03360.roa
File:                     236bcf51-5ba4-3fd7-9685-87706dc03360.roa (raw, json)
Hash identifier:          i+eB6ZRv4is3E3VpUuGbi7czxFXt/a4LG4YkknWmQw8=
Subject key identifier:   D3:BB:92:2E:C1:DB:49:F2:32:E6:3E:76:B2:BC:41:2A:35:89:E4:93
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA39D1DB303767D9832694B00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/236bcf51-5ba4-3fd7-9685-87706dc03360.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     6461
IP address blocks:        67.230.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:1d:b3:03:76:7d:98:32:69:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=5996eb08-0779-413a-9bf3-77f9a26268f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:d8:05:6f:44:48:f1:e2:9d:db:08:97:ed:
                    a6:21:81:29:0a:5a:b6:a3:e8:64:bc:0c:9f:39:04:
                    6d:ce:eb:8c:87:e3:e5:59:3e:4e:ea:e5:3b:ab:fa:
                    35:d9:67:c3:8a:cc:01:9f:6d:7a:72:48:21:ff:f2:
                    7d:89:ba:e5:da:78:8e:e2:42:29:2b:75:8e:7f:06:
                    c1:d7:95:b8:e8:26:13:d9:4d:18:c0:cd:61:c8:9b:
                    7f:a2:b9:56:bb:74:66:c9:4b:93:b8:69:39:0a:81:
                    b2:dd:e1:47:fa:8e:e1:56:78:84:6c:be:c3:17:03:
                    67:49:cb:29:53:4a:f6:1c:97:b4:da:c5:c8:90:1f:
                    5c:a2:e3:7f:63:1d:90:e0:b7:df:00:d7:cd:3e:a1:
                    71:b2:a1:7c:8f:e1:9a:8e:78:cc:27:bb:0a:73:2b:
                    19:8e:2e:0f:bc:ac:48:a7:61:7e:71:59:35:9c:4c:
                    b2:e3:7d:23:bb:f9:c8:12:14:b2:57:9f:38:c3:63:
                    05:95:98:b6:c2:83:55:59:c6:a5:fc:9d:9f:9f:35:
                    1b:ba:07:0c:21:7e:07:23:a4:e9:61:2d:b2:26:ab:
                    08:f0:31:13:7e:e0:20:05:42:32:f6:a5:4a:40:c1:
                    82:52:ee:9e:00:c4:f5:45:88:66:a8:83:e6:8f:b8:
                    62:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BB:92:2E:C1:DB:49:F2:32:E6:3E:76:B2:BC:41:2A:35:89:E4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/236bcf51-5ba4-3fd7-9685-87706dc03360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.230.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:69:98:0b:8f:b2:39:c2:11:a4:fc:f4:b4:08:dd:2c:b8:a1:
         05:44:22:d8:af:8b:f6:92:62:83:d4:e4:e4:c5:b1:75:d8:12:
         f0:8b:17:b6:20:26:90:08:cc:87:dd:ab:f2:cf:cf:6e:46:b1:
         a6:96:db:1a:32:7f:0e:9d:1f:54:87:a4:4e:b5:81:9e:50:1b:
         3b:b8:ab:86:1f:be:49:a0:fd:75:44:4e:1e:5e:fc:c9:b7:e5:
         65:4c:f2:b1:17:08:72:0f:0c:7e:14:42:0b:a3:ca:54:28:09:
         2d:52:1d:7e:07:5e:d6:9d:bb:35:e1:dd:fc:a4:8c:89:51:a3:
         a7:78:dd:a5:51:74:ad:fa:c0:c5:1a:a2:58:25:71:5b:86:4f:
         f3:ae:64:4a:5d:ab:58:67:4d:ce:99:80:a9:05:87:dc:4f:8b:
         0b:db:15:c6:48:6d:8f:ef:08:45:84:b3:e1:d5:ff:9b:65:b6:
         22:11:10:ad:9b:6a:b2:18:c7:23:8d:42:1b:b2:35:37:43:39:
         58:60:c2:ce:c2:a9:49:31:74:3b:82:c6:1d:78:14:9b:d8:1b:
         8f:58:ea:7f:ed:9f:07:5e:1e:a8:d6:79:c2:92:11:ae:bc:10:
         bf:9e:36:85:85:21:f8:92:6e:0f:ff:58:16:f2:ac:16:e9:12:
         bc:b0:b7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:24:58 2025 by rpki-client