Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa
File:                     3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa (raw, json)
Hash identifier:          zNUYX41bIIgAbSeEx0FDmRbNmND/A9vHp4QdTHuQET4=
Subject key identifier:   E6:1C:10:10:D1:08:97:FC:72:80:2A:B8:72:AD:42:0A:BC:BA:2C:12
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D79773AC7891166650E700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     10790
IP address blocks:        128.177.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:97:73:ac:78:91:16:66:50:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=82067f16-fae0-4104-9e94-873c28da6a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a4:80:10:0f:e8:28:cf:05:14:d6:11:14:09:
                    2b:67:7a:70:8a:5e:e9:03:b8:51:63:0c:c7:29:2f:
                    66:5d:2b:b9:a0:49:f8:ef:67:d7:53:d9:b4:d4:8c:
                    ba:5c:e0:b6:b8:33:68:50:6f:31:2b:3d:c4:7f:b7:
                    a8:b6:d3:f1:08:55:ba:7c:6d:06:83:7f:e4:3d:ad:
                    a8:bd:c8:56:78:5d:9e:16:94:62:ad:db:d1:b4:08:
                    08:67:09:1e:ff:5e:22:4c:c4:e0:3a:a5:d1:b1:4a:
                    b4:40:fc:81:a7:6a:59:e5:22:c8:4d:3c:4b:e5:16:
                    73:f6:44:cc:fc:14:6a:b8:3c:6c:b7:06:f0:ed:7e:
                    96:07:8b:4f:0d:0b:70:ae:cb:c2:73:cb:e4:e6:b5:
                    c7:03:81:62:98:e7:f7:63:60:9d:20:f9:aa:77:bb:
                    fd:82:d4:88:0b:3b:1e:92:9a:fe:59:26:de:6f:a6:
                    a0:84:25:ed:3a:7d:91:ee:bd:95:01:e4:ba:41:a2:
                    9b:72:bd:2c:ac:fe:bb:b2:f1:ca:16:29:fd:e5:c3:
                    3e:6c:b7:48:a6:4c:1a:48:fc:46:36:19:ee:dc:a9:
                    a6:3a:da:9e:3d:0b:63:a3:fd:e2:0e:2d:95:f9:49:
                    a3:6b:fc:3a:84:6b:85:34:22:3c:33:60:8b:13:bf:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:1C:10:10:D1:08:97:FC:72:80:2A:B8:72:AD:42:0A:BC:BA:2C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3f420eae-d4d4-3059-8641-ea85ee8d2d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:a4:74:55:7b:fe:3c:22:5f:fb:0d:5b:3d:7a:cc:0f:b6:
         b2:f6:cd:98:22:63:46:2b:a1:2a:a4:a8:c9:f0:73:14:0d:53:
         89:f1:61:cd:fb:15:18:f7:be:5e:11:d7:47:7c:63:1b:a8:9d:
         0c:e2:61:44:9a:71:de:27:f8:4e:5a:9a:82:20:47:ba:f3:33:
         2d:1f:ed:ef:a7:bc:e1:e9:28:54:df:b5:dd:1a:4e:43:ff:ef:
         d0:db:cd:0d:53:6c:59:9d:83:b5:ad:f2:67:13:21:10:cd:85:
         e2:39:3e:c1:0e:62:a3:88:69:4d:2b:2d:40:fc:ac:84:02:96:
         53:d4:32:7a:56:e8:0b:7a:61:30:2c:ed:10:85:91:ec:c3:cd:
         36:6d:ae:48:7e:98:26:4c:04:4b:ee:85:92:a4:f7:b5:9e:50:
         cd:16:3c:d2:a5:3e:30:55:fb:f8:87:19:91:cd:16:3a:d8:cb:
         ed:b6:ac:1c:38:2c:91:3a:9d:38:64:a0:d6:82:4d:b9:20:37:
         93:6d:4d:fc:d8:04:62:c5:c5:3f:29:f4:3d:08:c8:1f:5b:dc:
         f8:b6:6d:10:df:77:37:6b:d2:94:b7:60:85:f3:cb:d6:87:73:
         ff:a9:68:12:22:19:95:c9:4b:df:0e:52:ed:96:7b:62:3a:13:
         ca:d2:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:03:41 2025 by rpki-client