Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa
File:                     2c12998d-60f7-3c30-a85e-91c82147a7c4.roa (raw, json)
Hash identifier:          SOyzx+vy/B0LdnpWfN3nQ6NhMnL1OVXtvuBcjdPre+M=
Subject key identifier:   30:E1:71:F5:D1:1D:51:C1:E7:C9:D0:C4:7D:EA:E0:48:E9:C7:BB:85
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BB0C4B51677964DAA10A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     39960
IP address blocks:        208.185.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b0:c4:b5:16:77:96:4d:aa:10:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=488f43f2-3760-4759-aa0e-a9c1ec9dee7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ef:95:18:29:84:fd:67:99:9b:bc:9a:aa:2f:
                    fb:cd:8c:48:33:72:e0:85:94:ff:1f:86:82:aa:f1:
                    21:b5:be:6a:3f:42:d5:91:9f:e2:2f:ea:42:7e:b6:
                    63:f4:ba:72:47:90:47:50:6f:cb:03:39:92:cc:96:
                    a6:e5:4d:07:24:c7:23:a7:f0:93:68:33:8b:e2:a7:
                    31:32:0b:fe:e1:4b:90:d1:a9:2e:1c:9a:7c:53:f5:
                    66:32:0d:21:2a:5b:0f:c5:c7:4d:65:fd:1a:d5:a9:
                    18:08:80:9d:04:27:cb:f6:63:77:f5:be:3f:c3:aa:
                    b9:19:10:28:1c:b9:c6:51:f1:bb:5c:f9:ab:ff:78:
                    d9:a9:62:2e:f1:36:19:04:39:17:70:3c:ec:05:dc:
                    0d:e3:3c:0d:60:a0:72:a2:ba:12:b6:d7:e9:9b:e6:
                    a9:eb:79:a4:fd:96:ef:ba:43:e5:04:48:96:3a:85:
                    16:d7:25:b7:15:49:f0:5d:10:ca:e9:a1:15:6a:cf:
                    12:00:6e:1e:2b:3f:2f:b3:e3:ed:f1:91:78:76:6b:
                    3b:69:f5:62:8b:19:2f:61:27:84:06:e1:c0:d9:00:
                    31:d9:cf:1c:bd:96:5b:75:fe:fe:11:0e:e0:30:db:
                    5b:c1:7f:8c:5f:1c:62:85:39:a0:90:2b:96:99:5c:
                    c2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E1:71:F5:D1:1D:51:C1:E7:C9:D0:C4:7D:EA:E0:48:E9:C7:BB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2c12998d-60f7-3c30-a85e-91c82147a7c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:15:33:e2:3a:97:22:30:7c:73:1c:5c:d5:f9:09:3f:39:3c:
         a9:5a:74:64:81:2d:0c:39:06:23:a1:c6:01:84:02:bf:f4:b3:
         c4:8b:cb:27:86:99:d1:fc:10:fd:31:62:3f:cf:8f:cb:22:13:
         1b:22:57:82:9d:f8:5e:8c:fa:75:1d:a5:cc:ab:18:fb:de:72:
         fc:fa:7a:58:c6:cd:59:3a:e6:91:de:1f:7b:ea:60:1f:47:03:
         22:98:06:8a:52:55:85:88:2e:8f:0e:01:38:17:77:51:3c:7e:
         8a:cf:e1:29:6a:ec:1b:83:9d:05:42:9b:18:4a:df:e3:ee:3a:
         34:f1:8a:02:a7:01:b1:68:7f:e9:5f:fd:b8:2a:0b:f5:c1:92:
         ba:9d:63:fc:27:aa:1a:00:6e:d2:32:0d:fe:92:94:83:ea:07:
         1f:b0:ae:59:d7:57:6e:0c:f8:9f:b3:3c:75:ea:a5:d5:5f:da:
         3f:22:3f:aa:5c:3d:86:99:50:d1:94:52:9e:ba:f1:da:e2:1d:
         a7:c7:0d:cb:a5:8e:4b:8e:d2:15:ed:1d:aa:63:5d:c7:91:59:
         4a:bb:65:f5:27:73:1a:57:c0:98:08:26:2c:19:89:a1:5e:89:
         eb:9d:9d:43:14:ae:35:8a:34:e9:a1:88:9e:dd:8d:27:b6:fc:
         e8:6e:8d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:19:28 2025 by rpki-client