Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/27466df2-1687-3f9f-bd84-1b16d1dd7cfe.roa
File:                     27466df2-1687-3f9f-bd84-1b16d1dd7cfe.roa (raw, json)
Hash identifier:          qH3MZxHB4gEsJ4N3SGaCJaM6/b1MiqSY/0Wkiqtmhg0=
Subject key identifier:   73:26:1D:16:15:46:96:B4:12:A5:E9:A3:04:21:C0:1A:50:E7:E7:55
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BB12F00860A3ECA0E1280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/27466df2-1687-3f9f-bd84-1b16d1dd7cfe.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     14830
IP address blocks:        208.185.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b1:2f:00:86:0a:3e:ca:0e:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=2b74a714-dc8a-4e9a-9e3f-9488d4794098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ae:1b:c4:81:91:a6:5b:2d:93:d6:6f:8d:78:
                    44:23:cb:21:98:12:09:18:d0:90:7a:be:06:6d:64:
                    9a:85:1b:0c:d4:f0:e6:f7:11:15:ef:51:d5:00:a4:
                    0b:48:6b:98:dc:19:85:3d:0d:b3:db:d3:6e:6b:a4:
                    b0:4c:76:bb:cb:30:15:69:22:49:3e:7e:fe:60:42:
                    94:3c:c6:98:56:ef:e5:f0:88:6f:f1:1d:ad:15:e7:
                    6e:e1:48:5e:89:92:ed:70:3e:0c:6a:fc:2a:49:07:
                    56:dd:7e:8a:15:a4:07:11:bc:8e:4d:b8:cd:65:cd:
                    48:0a:ca:79:f0:20:06:d0:b0:6f:df:f1:b4:43:24:
                    ff:fa:ae:5f:24:e8:e0:9e:cc:07:29:a1:fe:e4:fa:
                    eb:43:dc:94:33:da:32:dd:16:e0:d4:4e:0b:d5:1f:
                    7b:e5:db:72:65:79:35:00:6f:56:02:e7:97:04:7b:
                    86:25:17:4f:a6:c8:40:e3:cb:5b:22:b4:3c:89:d5:
                    c1:b3:e6:23:31:12:59:68:04:04:0e:60:9c:25:14:
                    0b:ca:91:15:9b:46:25:02:0c:5b:a0:66:60:0c:90:
                    22:95:a0:69:9e:70:a4:f5:47:e7:0b:4e:14:9f:0f:
                    2b:d6:9e:5a:2f:f9:19:55:b0:87:a8:ac:eb:8c:31:
                    8c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:26:1D:16:15:46:96:B4:12:A5:E9:A3:04:21:C0:1A:50:E7:E7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/27466df2-1687-3f9f-bd84-1b16d1dd7cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c7:03:c1:fe:a0:ba:c0:83:5d:9b:55:e7:d0:20:6c:ab:eb:
         c3:d1:38:4f:ca:1d:50:f9:04:41:c8:31:be:1c:a0:a3:bf:3d:
         d5:43:b9:52:a3:9d:37:1c:ed:44:cf:94:5e:3a:10:eb:c8:63:
         3d:2f:d1:1b:a7:7d:68:b0:27:e0:ef:59:2d:73:80:6e:a8:fb:
         60:64:d2:a7:68:99:1d:ab:8c:bc:4b:62:66:ea:1f:24:c0:d7:
         9f:c8:45:22:a5:38:04:2d:9f:a5:86:29:4b:0b:2a:27:6e:ed:
         19:f5:4f:23:1d:f7:64:d2:34:bb:d4:b3:48:92:ff:d1:32:6a:
         26:ee:78:65:9d:30:fa:26:c8:7a:fa:f9:31:6f:c0:e2:f3:ad:
         27:78:60:f6:83:ae:45:b0:b2:1d:fe:28:7c:d7:58:b1:51:58:
         23:c4:54:91:0b:99:c3:dd:d5:cd:11:2e:25:77:87:3b:dc:29:
         00:05:e5:2a:6b:00:e9:3c:be:2d:91:4f:b4:da:cb:6c:ea:0e:
         65:24:8c:cd:40:2f:15:37:95:84:aa:42:97:7f:e6:b6:33:37:
         37:66:14:c5:0d:72:bf:ae:8e:e4:17:fd:6f:cb:37:42:2b:16:
         76:4d:ad:37:73:7f:ab:df:87:2f:c3:0f:62:c6:7e:8c:ec:14:
         41:e1:e4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:15:15 2025 by rpki-client