Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/48ebe96b-4e63-3ae7-b9d2-4dbb164873c8.roa
File:                     48ebe96b-4e63-3ae7-b9d2-4dbb164873c8.roa (raw, json)
Hash identifier:          iWPqJkM3HmmFb0yvuK9Lyx/uqEgne/T5OMMfynPsRjQ=
Subject key identifier:   2E:D6:6F:22:74:9A:12:30:D9:13:DC:52:57:28:1E:FE:27:88:FB:81
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103E17C275346BA4097510
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/48ebe96b-4e63-3ae7-b9d2-4dbb164873c8.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     32203
IP address blocks:        66.62.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3e:17:c2:75:34:6b:a4:09:75:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=eb2e69e8-ff8d-4388-a6a4-43ce2d36b826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:b7:bb:2d:47:c6:71:5d:12:b1:61:84:db:
                    99:34:a5:28:51:d8:1c:0b:ab:4d:b8:65:25:fd:60:
                    a1:c8:68:1a:1d:3c:8e:89:75:62:54:3b:d7:f4:fc:
                    4e:89:17:ad:c8:b3:87:ad:7f:83:25:e5:44:4e:28:
                    2e:6a:ad:99:28:ea:02:c2:04:06:c9:9e:98:cf:56:
                    ba:c4:e4:9d:3c:54:8d:91:eb:70:23:1b:37:14:f9:
                    a0:b7:d1:61:39:f3:dc:a2:81:36:14:1c:55:62:4a:
                    84:ec:9d:e9:11:6a:f7:85:de:13:b2:90:16:77:07:
                    dc:ff:96:0b:19:fb:a8:49:0a:d1:19:99:54:0b:9b:
                    d3:bf:9a:cc:20:d9:01:3c:ea:f2:fc:39:86:c8:f7:
                    65:bc:3c:04:a4:fd:87:fb:de:bd:9c:2e:b2:86:ec:
                    23:45:0e:75:07:42:1b:74:eb:f1:a0:e4:1f:e9:64:
                    35:e5:49:12:eb:28:b1:bf:a3:82:38:ec:46:76:e1:
                    d3:d6:59:35:0d:04:91:00:41:48:e4:ee:8e:e6:ee:
                    00:08:1b:10:d5:6b:cd:68:2b:79:20:2b:0d:ac:de:
                    8d:9b:f7:09:52:f9:5b:02:1f:85:fe:77:8e:c2:a2:
                    76:ff:96:34:13:e0:9c:41:a8:0d:71:21:ee:b0:c9:
                    33:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:6F:22:74:9A:12:30:D9:13:DC:52:57:28:1E:FE:27:88:FB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/48ebe96b-4e63-3ae7-b9d2-4dbb164873c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:d5:b0:d1:64:06:ad:e4:15:00:31:91:44:6d:7a:b0:3c:38:
         7c:50:fa:07:63:4a:3b:ac:5b:c2:90:db:cb:b7:68:c7:0e:73:
         c6:47:c2:98:c6:4b:e1:e6:58:de:2d:57:55:42:10:18:fe:9f:
         44:63:32:42:b5:53:b2:3c:ca:2f:11:83:bf:f1:ee:40:60:14:
         9a:1d:01:ac:fd:ae:17:37:1b:00:03:0c:28:6c:af:a0:23:20:
         5d:e3:a9:91:eb:46:ce:0d:77:5c:78:99:4f:9f:61:97:df:99:
         7a:10:f5:95:99:a2:ae:e5:7c:a1:b6:fd:a2:5d:f4:67:a7:60:
         59:6c:07:ae:8d:bf:a3:67:45:56:6d:96:08:7a:d8:c5:9d:b1:
         8c:e9:57:3a:31:1e:d2:1d:2e:fc:bc:30:36:14:ac:53:08:16:
         79:2a:e6:e2:e2:7c:17:ff:10:f5:9c:5b:e0:15:de:38:91:f9:
         eb:5b:42:cb:f0:65:4f:75:e0:7a:f0:fb:47:8a:b9:94:20:d3:
         00:71:c8:56:d4:2c:74:72:98:a2:42:7a:36:a9:dd:1d:77:88:
         b8:6e:0f:46:ef:0f:c6:bb:98:17:fb:8d:4c:3d:f8:1d:ae:e6:
         0e:9f:11:95:09:89:40:0b:86:1a:d4:a7:b1:01:cf:16:7e:dc:
         40:f9:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:01:11 2025 by rpki-client