Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5ab286-0bd0-3881-83b6-72cbaec68ddd.roa
File:                     3e5ab286-0bd0-3881-83b6-72cbaec68ddd.roa (raw, json)
Hash identifier:          1108ergpFpRTdt0MzPenJbtcO81oSdvjzAbsXUtqdoc=
Subject key identifier:   80:66:E9:59:6E:BF:91:95:8C:6B:4D:FB:9E:FD:1E:E2:71:63:D0:C5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCF18AA5D9826E293069C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5ab286-0bd0-3881-83b6-72cbaec68ddd.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     62994
IP address blocks:        209.124.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f1:8a:a5:d9:82:6e:29:30:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=f2f3b538-b9c3-4d9f-9a6d-f7961658bb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f2:49:c4:20:b5:89:69:fa:cb:9c:c1:b5:08:
                    e9:ed:db:03:0f:64:a7:62:3d:50:65:5b:63:5d:15:
                    42:fe:eb:cb:af:b2:80:11:56:54:37:43:a7:9e:76:
                    1a:e0:11:fd:2f:5a:98:7f:b7:74:08:5d:57:f1:5e:
                    14:05:44:c5:26:32:8f:c3:ed:ad:fd:09:84:9e:42:
                    67:db:e9:0f:76:cd:45:a0:a4:3b:e3:83:29:1f:60:
                    bd:77:4f:c7:d8:7f:c4:b2:fe:4f:66:5e:2f:10:ec:
                    9f:19:6f:2f:64:95:a0:34:db:1d:6b:33:8c:a7:c5:
                    80:70:0a:31:53:44:d8:bf:c4:c0:02:9a:cb:95:dd:
                    16:c0:58:70:00:cc:f3:b0:a4:31:60:ac:c8:27:2b:
                    f9:75:7e:6c:ed:7b:88:94:30:54:5f:2f:79:0e:0e:
                    f7:2f:26:69:3c:c7:60:19:37:ba:32:ea:cf:3c:42:
                    8d:c1:e2:3d:a5:06:36:d1:d2:33:51:24:19:75:ad:
                    2d:52:a1:ac:6d:7d:56:7e:a7:d3:e7:aa:f8:59:45:
                    98:c7:34:b0:f4:ab:da:60:b6:44:4a:b4:b9:3a:29:
                    b4:53:16:2e:81:a7:58:fe:bb:df:16:3a:e7:e8:63:
                    8b:80:50:32:c8:62:bc:a8:e0:91:4e:5f:40:e6:0b:
                    47:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:66:E9:59:6E:BF:91:95:8C:6B:4D:FB:9E:FD:1E:E2:71:63:D0:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5ab286-0bd0-3881-83b6-72cbaec68ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:df:a0:08:25:d5:b5:c5:ac:13:51:d7:26:0c:51:9e:b2:c6:
         71:44:18:9f:40:d2:a3:1a:73:3c:82:35:f6:e2:7c:8e:8f:6e:
         71:36:db:85:b9:06:79:1a:c7:d8:94:66:3d:c6:81:78:ca:d9:
         e5:b9:5a:6f:f6:75:3b:7d:a7:b1:6e:74:f0:a9:49:8b:49:1a:
         ca:ce:83:3f:ad:2c:86:7d:9b:52:bf:a0:a9:12:bf:02:77:35:
         88:43:73:a8:fc:47:ec:ef:b7:65:3c:f7:60:7d:be:5e:c5:f8:
         31:fc:a9:cd:30:44:d2:d8:f0:ce:91:de:8b:8b:9b:e8:c5:a6:
         df:51:47:7e:02:34:5a:df:3e:ba:2b:f5:73:08:fe:04:d1:e1:
         e7:1a:4d:2c:1d:a9:e6:4c:c0:1f:c0:7f:5f:32:96:6e:23:c8:
         9d:a4:63:df:78:b3:fa:c2:0d:f5:5b:3b:94:4c:a8:bf:cc:eb:
         98:43:fd:30:3e:e0:04:28:61:88:15:f7:d6:d2:e8:a4:25:2c:
         8f:55:74:12:c8:e2:cd:97:48:fd:84:a9:08:7a:0c:68:b3:39:
         3e:1d:7a:f5:ef:12:c8:c4:cb:ba:b4:0f:67:25:45:b0:60:f6:
         17:31:8b:d8:9e:2b:fc:74:cd:59:29:ed:37:a1:38:2d:60:88:
         9f:f1:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:33 2025 by rpki-client