Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa
File:                     4530c0e5-3983-3099-b3a0-2f99d1650361.roa (raw, json)
Hash identifier:          lBPby8mNp4udBEkHTXjF8h1taOdHf6rihsPEqBEWKys=
Subject key identifier:   C1:7D:7E:51:26:6C:F8:22:5C:53:DE:07:1E:9C:72:DA:10:62:33:41
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCF48FABD5B56A0B8C67E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     53888
IP address blocks:        209.249.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f4:8f:ab:d5:b5:6a:0b:8c:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=85662fd2-1998-47f5-b7dc-d25fa235384a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:d9:6b:42:ad:8f:89:3b:a7:7b:84:50:c7:
                    1b:e8:30:17:d8:37:ee:88:24:f4:74:01:40:7d:67:
                    38:78:54:83:27:60:97:c9:fb:5e:81:c5:7a:eb:38:
                    3f:4e:b1:f6:4f:5e:db:01:49:d1:23:9b:22:b1:ee:
                    06:21:fb:c7:3f:90:2d:ab:56:ec:52:dc:14:00:93:
                    1b:47:a8:52:2d:5b:e3:32:a7:73:19:21:3e:d5:70:
                    b2:09:3e:3f:f5:06:a8:5f:dd:5d:42:a9:28:23:82:
                    f3:de:ff:d0:15:a0:ce:ee:98:f1:0a:30:32:c6:c5:
                    ab:d1:af:37:65:0e:f8:8a:0d:05:96:65:c4:ea:70:
                    73:e6:0d:34:ed:50:07:11:7e:5e:22:53:56:97:6c:
                    2c:6b:a7:6c:c9:c1:98:1b:99:2a:b1:a1:52:d9:c9:
                    8e:06:aa:f0:0a:3b:96:ec:8b:a9:82:d2:76:57:a7:
                    6e:28:14:7d:33:bf:42:1f:b5:19:de:f3:50:28:f6:
                    55:77:8d:5a:e8:53:93:47:02:fb:1c:75:24:85:ac:
                    a8:9b:33:a3:9a:24:d7:a2:11:f0:10:5e:a3:f9:55:
                    f2:24:56:53:be:7b:23:08:e6:b7:fe:75:30:86:a9:
                    2b:7b:02:1d:5c:7f:f2:d0:ee:fc:19:03:4b:cd:32:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7D:7E:51:26:6C:F8:22:5C:53:DE:07:1E:9C:72:DA:10:62:33:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4530c0e5-3983-3099-b3a0-2f99d1650361.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:f3:c4:3b:8d:1e:d7:e4:4b:d1:ba:12:2c:67:23:93:86:45:
         f0:b0:a6:33:19:46:d2:38:5f:65:4c:2e:36:e4:3e:a1:53:29:
         26:91:60:e1:47:df:54:34:a4:a9:61:79:3d:e3:c4:c9:9a:22:
         b9:31:d4:94:b3:9b:24:08:9e:26:5d:bb:17:2c:b8:a7:46:c0:
         f3:09:b2:c1:11:c9:c9:3f:20:fd:fa:64:df:9c:32:f3:33:e0:
         8f:df:f6:4e:d9:6d:c0:7b:6c:b2:3b:d4:ac:fd:ec:cc:14:3f:
         3b:4b:eb:4b:14:76:23:78:02:a2:2d:1b:7d:b8:27:31:52:48:
         8f:a1:6e:ed:71:77:8a:52:8a:97:8f:c7:f5:ca:b0:52:34:ca:
         39:0f:f4:45:f5:10:03:2c:e3:69:28:cc:50:4f:00:0e:fe:6f:
         d8:07:82:34:49:df:6e:dd:e9:0f:02:bd:c3:4c:3c:a4:49:b9:
         b9:11:58:e5:ac:24:12:5c:a7:e0:29:91:56:f9:16:ac:29:fc:
         42:83:6c:5e:23:43:4d:3d:0c:f4:de:52:a8:df:7c:c9:6d:a7:
         16:3a:b4:93:79:39:83:9e:08:39:a6:43:17:46:11:e5:c3:1a:
         0e:e5:06:06:55:84:29:e6:78:87:54:ec:d9:23:f4:52:11:85:
         2e:63:10:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:32:32 2025 by rpki-client