Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa
File:                     4447bfed-b16b-39ab-aeee-d53637c2572f.roa (raw, json)
Hash identifier:          k8myn9vm8Nv8V1TeeD7xM/Z83TSkPsigSO4Qlej+6g8=
Subject key identifier:   76:45:FF:3F:42:AF:B2:C4:B9:BB:6C:2F:70:89:68:F7:F4:9E:49:1B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB220DAD6A3CEFB16B18EA880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     13955
IP address blocks:        64.125.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:da:d6:a3:ce:fb:16:b1:8e:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=00ce139d-2a4a-4911-93a5-5ef230098720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5f:35:56:3c:dd:b2:01:6d:a0:60:55:25:6c:
                    dd:07:36:bb:13:50:e3:74:ce:02:5f:ad:ca:e5:63:
                    80:00:10:84:3d:ce:9f:1c:7f:21:65:5a:5a:ab:45:
                    71:1f:a6:2d:c3:ad:50:7e:50:46:52:ba:6b:2f:64:
                    00:d5:a6:90:0d:26:10:fa:14:2a:a9:db:41:6e:62:
                    de:a7:1d:0a:10:21:3d:95:30:94:44:a3:ce:64:0c:
                    1c:12:f4:a3:1c:6e:b6:d0:11:8e:ee:ca:0d:1d:88:
                    4a:82:6d:32:39:46:33:4e:c7:de:37:35:9b:99:47:
                    1b:c5:9f:18:51:29:e6:99:8d:0c:e0:af:5d:27:c1:
                    ce:83:ca:80:87:62:64:d2:c3:ca:16:4f:cc:94:4d:
                    27:31:12:cc:b8:eb:4d:57:aa:ff:27:13:12:c1:d2:
                    f8:6d:db:e9:ca:67:40:f5:9d:7f:e2:7a:6f:ed:95:
                    be:99:13:d4:b1:85:66:86:0a:40:eb:73:8f:fb:f1:
                    fe:92:71:9b:35:06:c4:73:38:96:80:d6:76:24:45:
                    1a:06:ba:ed:db:dd:08:6c:36:a3:1a:1d:18:7c:51:
                    a1:98:06:dd:02:17:4c:ab:fe:eb:cc:7b:cf:68:84:
                    6b:e3:c9:49:00:17:b0:38:dc:17:e2:46:1f:cf:b5:
                    14:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:FF:3F:42:AF:B2:C4:B9:BB:6C:2F:70:89:68:F7:F4:9E:49:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4447bfed-b16b-39ab-aeee-d53637c2572f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:45:ac:18:d8:92:ba:40:cd:ac:c8:3e:fe:f8:e3:5a:13:64:
         b7:90:6a:11:84:36:f6:2f:43:c7:56:04:99:5f:c5:1f:18:2a:
         86:08:25:1a:5f:4d:d2:7f:16:b0:a7:a8:b8:48:ec:9c:4b:5f:
         76:3f:20:59:47:e5:eb:50:2d:7e:cd:ce:d4:a2:18:2e:21:1a:
         12:45:ba:8e:6b:9f:24:1f:7f:e6:87:84:83:32:64:de:f5:3b:
         aa:da:0f:39:60:98:47:f7:37:e5:01:3c:65:e4:91:a6:dd:2c:
         dd:e7:c6:db:b9:f9:39:43:92:20:56:e2:5a:bb:65:29:ab:55:
         2f:06:15:46:7c:63:c8:13:20:df:02:7f:26:23:8a:d2:81:d4:
         6f:a5:0c:ef:ff:57:57:46:5a:53:50:67:1b:8d:1d:65:f0:dc:
         e0:f9:9d:c5:6f:96:69:48:66:2b:50:35:ca:be:9e:89:04:fa:
         f8:19:c4:1f:cb:45:4e:19:e3:3c:56:76:02:34:c9:d2:0d:20:
         16:fa:6b:be:55:7c:e6:e2:9b:f4:97:7f:49:44:14:1f:60:66:
         f8:7f:b6:1d:e7:fe:ad:7c:4d:ef:fa:29:94:de:8b:6e:d1:c7:
         58:57:97:92:ae:84:d7:f6:69:6d:a5:d4:c5:f2:d3:75:46:72:
         0a:21:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:30 2025 by rpki-client