Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa
File:                     2df008f4-9165-39db-aadb-70bcfaaaa611.roa (raw, json)
Hash identifier:          RaeDXPpcM2JBrGa2VFpEG72sifCOTEkwzzqg6vVHWjg=
Subject key identifier:   0A:B6:F5:75:34:BD:3A:E4:A0:F3:A0:95:03:56:D7:B8:7B:4A:17:55
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103A4800C2D080D49B4880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     16503
IP address blocks:        64.20.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3a:48:00:c2:d0:80:d4:9b:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=ba49e346-bc92-474c-9080-e809ee77288e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3c:3b:24:e0:c7:e2:21:8f:1d:d6:e3:94:00:
                    bd:a4:39:fc:d5:75:c3:8c:b6:fb:41:5c:9f:1a:58:
                    53:14:c3:dd:76:83:21:88:eb:5a:8a:24:13:03:90:
                    e4:0c:d7:28:ed:52:69:d4:1c:6a:4e:27:e2:cf:d9:
                    3f:75:19:9e:80:b8:59:09:db:42:2e:ff:7e:a0:5e:
                    be:6b:e3:bc:10:84:84:0e:7f:8f:3f:06:95:45:94:
                    9c:68:b1:1b:39:b2:70:b4:bc:3c:63:37:db:93:39:
                    42:75:23:8a:e1:ab:b4:15:f9:38:fe:13:4c:4c:bb:
                    03:46:73:10:30:49:ea:e3:d8:10:91:46:2f:4c:a6:
                    5b:d3:f7:f1:e3:1f:ad:5e:ec:82:55:29:41:ac:90:
                    dc:34:f5:d5:f4:63:83:fb:2f:ad:4e:84:91:39:c0:
                    95:6e:79:d0:ec:3a:d6:d2:54:13:ac:8a:ef:f8:54:
                    4f:6b:b3:bf:a5:78:28:d6:a8:b7:04:ae:c0:33:9f:
                    37:1f:2b:2b:d4:09:7f:f2:79:1d:ce:b9:f2:29:57:
                    56:4f:e2:e4:8d:e7:13:26:cb:af:d3:c0:82:53:39:
                    4c:6d:31:a6:f3:be:f5:25:fa:bc:b5:78:16:d5:5e:
                    12:72:43:0a:f1:f6:ab:ee:68:a9:05:1b:c8:1d:f7:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B6:F5:75:34:BD:3A:E4:A0:F3:A0:95:03:56:D7:B8:7B:4A:17:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2df008f4-9165-39db-aadb-70bcfaaaa611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.20.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:93:75:da:39:c6:39:21:35:b2:80:7d:d8:a2:b9:25:fc:12:
         58:d3:54:b2:c0:bf:31:22:92:70:8f:dc:f5:8f:d5:a1:22:d1:
         40:7c:e1:04:26:b6:49:62:54:8e:10:90:20:ae:d5:cf:ca:86:
         79:7b:e5:7f:53:c9:f2:77:5b:15:78:29:6f:d2:60:ec:7e:15:
         11:b9:c1:6f:5e:7e:81:da:01:24:40:01:c2:97:c7:d1:d1:c5:
         d9:b6:7c:48:c1:35:8c:3a:eb:e5:09:3c:8b:e8:04:a6:ab:f3:
         54:1c:02:d7:02:5f:3f:cd:ae:14:76:2f:14:ac:85:72:dd:2b:
         7f:0b:d8:80:01:49:74:c1:41:8c:be:92:a9:32:cf:a4:25:80:
         e3:b9:c8:f7:08:79:bf:10:d8:34:a9:c5:fc:66:ec:bd:53:9e:
         ca:de:78:90:a1:7e:c8:33:b5:be:3a:36:4a:61:40:4d:00:55:
         9d:ec:8c:92:b7:a3:db:03:86:42:00:68:36:d8:ab:49:5d:c4:
         ce:05:81:e1:19:2a:79:d0:36:48:40:b5:ad:eb:22:0e:22:99:
         1c:77:b2:5c:77:40:24:cc:0f:da:07:bd:63:af:21:96:fb:f5:
         43:98:c9:87:bb:ac:00:02:64:58:c4:af:a5:5e:34:b8:e7:05:
         18:08:ab:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:01:29 2025 by rpki-client