Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a78fa68-b821-3813-b5ca-82355b68b065.roa
File:                     3a78fa68-b821-3813-b5ca-82355b68b065.roa (raw, json)
Hash identifier:          0wG7CN/OvFndQzUBPJzL9ahODiDZ0quc2TFAGIb1gMU=
Subject key identifier:   11:9E:67:A4:26:70:B4:1A:80:90:C3:85:6C:EF:92:B9:8F:37:55:D1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91B9C8C3515E5FB6AC3C500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a78fa68-b821-3813-b5ca-82355b68b065.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     25755
IP address blocks:        128.177.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9c:8c:35:15:e5:fb:6a:c3:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=cf0ba4ab-9bd6-4fe2-ac77-a2eda6df9116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6b:65:74:8f:c6:17:cc:ac:f8:3d:d9:7d:1e:
                    a2:82:be:cc:bc:d3:a9:c0:c8:2a:a2:c1:56:48:20:
                    bf:d5:31:19:37:3f:93:fc:66:4d:bb:e1:fa:7b:a3:
                    d2:ee:59:d7:5c:f4:81:d0:52:df:92:8a:1a:39:7c:
                    b8:54:85:a3:d5:90:a9:90:58:b6:e1:0c:ee:9a:d4:
                    63:4c:a8:f0:a2:bd:fb:75:e1:a8:19:78:46:39:15:
                    33:e4:9c:57:ba:c4:f0:b7:6a:dd:3f:44:d0:0d:8e:
                    57:bc:f1:b7:9d:34:6b:90:d5:2d:2a:fb:15:88:5e:
                    a3:99:99:0a:0c:c8:9c:63:d2:37:f5:5e:5c:44:30:
                    d0:e0:d4:bd:15:3c:cb:45:23:0e:5e:a3:83:3b:d4:
                    a3:b2:1c:ab:84:f8:b0:30:be:db:a6:5b:63:14:8c:
                    98:8c:53:47:6a:08:93:87:6b:6f:dc:8a:32:ca:75:
                    09:f2:f4:c4:25:83:84:54:0a:52:bd:01:37:98:c1:
                    db:5f:cb:56:fb:b6:e4:93:24:e8:a7:fc:93:bd:12:
                    3f:be:33:18:d0:c4:4d:bf:53:e2:9f:11:8f:97:36:
                    bc:00:22:e3:71:37:b9:72:d8:b9:ab:92:28:31:30:
                    ed:cf:5e:56:ba:9a:ea:a1:e3:20:91:08:04:a5:71:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:67:A4:26:70:B4:1A:80:90:C3:85:6C:EF:92:B9:8F:37:55:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3a78fa68-b821-3813-b5ca-82355b68b065.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cf:80:fd:fd:a0:08:8d:9d:8f:89:2b:fa:ee:3d:69:7e:59:
         ff:bc:b8:46:f8:07:ce:a7:38:c2:ec:7b:a9:7e:fe:49:a9:e6:
         d4:bb:b1:30:38:3d:97:87:2a:d9:df:8b:d0:b2:61:e1:b0:52:
         43:4f:b0:90:81:2c:03:7b:38:14:b5:29:9e:e4:1f:0e:26:1f:
         87:68:fe:6d:60:03:2e:51:ff:c7:72:bb:05:4d:b7:53:81:43:
         dd:ac:51:8a:f3:3c:62:52:e0:2d:e5:a8:24:01:07:5f:bc:47:
         49:37:7e:98:1d:4b:4f:d1:cb:16:7f:83:3c:27:b2:56:5d:00:
         81:b9:05:93:47:99:2c:4b:c7:7a:dc:08:ae:7d:14:bc:15:a5:
         db:ea:bc:b6:49:43:52:7d:9a:75:ce:62:32:fd:a5:c4:c9:c9:
         91:96:1b:91:b1:7a:54:ce:6c:85:44:bb:ac:c5:73:0b:05:3e:
         32:fe:a8:04:c7:26:41:79:fe:7d:b6:7f:fa:68:ae:c1:ac:a0:
         f7:5e:23:dd:5d:27:7d:4d:e2:33:7b:6d:2a:ba:d9:50:b9:94:
         70:2e:a3:eb:92:7a:cf:23:cd:a5:3a:c8:4f:04:c0:b9:84:9e:
         d3:d9:55:29:6a:ec:99:3e:8e:48:3c:97:17:a2:5b:2d:1a:1b:
         77:26:ee:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:02:15 2025 by rpki-client