Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
File:                     238aa101-b943-3077-86c9-57b2750b798f.roa (raw, json)
Hash identifier:          vtXA3ZzJfkcxpnDCeOdnwiIkTszkk1twd/eq7p+Zwh0=
Subject key identifier:   57:84:BE:F1:80:B5:CC:78:1D:8B:5B:40:7F:2A:E0:F5:4B:B5:B7:54
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BB056B07DE0D23B204A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     63296
IP address blocks:        208.185.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b0:56:b0:7d:e0:d2:3b:20:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=dae7587e-ac33-4808-8b29-d9e49fbe5de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2f:ef:1e:d3:f1:a7:34:23:b6:21:54:eb:b8:
                    b1:d6:dc:e2:c2:bf:06:d1:0f:d6:9d:af:32:62:33:
                    26:4b:31:2d:04:d9:35:cb:44:1f:17:be:0b:ad:bd:
                    71:25:1d:21:59:c1:fa:6a:5b:6c:f4:22:21:92:bf:
                    c2:d4:6a:71:10:70:a8:a1:3c:a6:52:87:e2:07:9a:
                    16:91:24:0f:7d:d5:7c:22:dd:8b:30:7a:7b:db:19:
                    07:c3:c2:76:25:fa:56:4e:72:a2:a4:0a:13:b0:85:
                    a5:b9:5d:a4:fd:55:36:58:fe:cd:1d:59:9e:6f:ca:
                    a3:bb:49:1b:74:43:b6:38:54:78:18:c6:09:a8:f8:
                    f1:fe:77:47:93:4a:44:29:f0:02:80:a2:97:6a:77:
                    c2:46:9b:4b:ef:db:d9:94:9d:09:59:99:b0:61:80:
                    18:f6:2a:d7:da:bd:37:d5:a7:e5:8d:e2:7a:e4:4b:
                    db:ea:ce:c5:0b:ec:aa:94:63:73:33:a7:4a:38:2d:
                    0b:3b:07:1b:ab:c4:ba:a6:14:b9:9a:a8:94:9f:8d:
                    29:90:8b:01:9c:78:96:47:97:70:1b:53:26:07:a0:
                    49:53:a1:7e:75:b7:2b:8d:bb:26:39:21:9e:ac:0d:
                    03:56:98:06:24:b3:d4:d9:0c:7d:f0:ab:6d:63:ec:
                    b6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:84:BE:F1:80:B5:CC:78:1D:8B:5B:40:7F:2A:E0:F5:4B:B5:B7:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/238aa101-b943-3077-86c9-57b2750b798f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c4:8c:3b:46:f5:6e:03:8e:51:aa:c9:8d:c7:82:8a:21:d2:
         49:3e:36:3f:25:a3:31:49:c8:91:79:ff:0c:db:53:89:c1:81:
         b2:53:14:6e:d3:a7:38:2a:88:f1:a1:3a:ac:03:ba:19:2d:b6:
         43:be:71:6e:e7:77:f0:5c:11:01:af:ce:78:b6:02:06:45:43:
         0b:b8:5a:04:f0:83:4d:f6:96:c5:e5:dd:ad:88:4e:33:3a:90:
         d0:12:47:13:9a:98:ef:c3:d3:6d:0b:25:bc:cd:69:41:52:9e:
         94:ae:f9:63:fd:e7:75:ce:5b:4d:ab:a5:af:df:d8:0a:31:54:
         92:cb:0b:57:5c:e4:b6:b0:5c:56:71:1c:94:9c:50:83:78:42:
         8a:69:44:69:ac:3e:bc:eb:19:2c:69:03:bd:5a:a8:91:bb:14:
         1c:00:86:76:72:34:db:78:34:52:87:1a:4f:49:ee:43:e0:47:
         1b:89:fc:5a:ee:31:4f:4d:88:52:a5:56:be:a1:dd:6b:9c:e0:
         31:f6:54:bf:cb:02:56:a7:02:d5:ed:50:ec:f1:b8:b3:d9:e0:
         d6:0a:9e:83:0a:61:2f:fe:75:c8:3b:5f:a4:d4:4f:53:43:23:
         4d:7f:e5:36:d1:0b:09:35:c1:db:6a:4d:e9:15:76:dd:b5:94:
         be:93:82:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:13:45 2025 by rpki-client