Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/51c87e92-ae71-36f0-ac3e-1ca91e061e45.roa
File:                     51c87e92-ae71-36f0-ac3e-1ca91e061e45.roa (raw, json)
Hash identifier:          rGlB4wDeI1bubJweG6mT3WhnA6Jd/d1iDRrLKClLGSk=
Subject key identifier:   97:0A:28:C3:62:29:5B:52:24:ED:E1:C5:21:FE:E0:A9:66:7D:0C:9D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCF6A0C074DDA11A916B50
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/51c87e92-ae71-36f0-ac3e-1ca91e061e45.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     19955
IP address blocks:        72.10.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f6:a0:c0:74:dd:a1:1a:91:6b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=afa457c5-7427-4b93-ba31-1e0c04ca3818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e9:1f:04:cd:35:f7:94:7c:f2:77:7d:a3:4f:
                    68:9c:14:77:b7:c1:60:c0:c4:3b:d2:e3:ba:e9:39:
                    45:cc:59:b1:de:ef:cb:8f:ac:38:65:cb:cb:2e:7a:
                    07:a7:20:2d:a9:ee:17:7a:64:e0:37:8e:30:77:c8:
                    14:7b:83:1b:c8:bb:09:9f:8e:7b:ff:ca:f7:9d:9d:
                    a8:86:a4:d2:64:29:46:3d:9c:d7:53:a5:d6:77:8d:
                    e5:f5:e9:4a:30:7b:9a:7c:41:ed:63:9c:4e:ba:29:
                    e4:a2:b2:05:6c:ee:60:84:10:eb:02:7b:32:08:06:
                    88:f3:69:e3:8d:df:56:5f:d4:a1:de:6d:bd:b0:ed:
                    6d:64:65:69:32:d4:d5:fb:12:bb:09:df:b9:77:c8:
                    2e:ac:96:2f:da:c1:2b:b4:17:b2:91:fa:52:14:e1:
                    db:46:f0:81:d3:fd:6b:43:a8:2d:0a:99:50:95:94:
                    7d:df:06:f5:60:4e:64:d3:41:f5:02:d9:e6:59:7b:
                    40:35:53:a1:49:a1:93:47:ff:d1:15:80:5c:f0:1c:
                    0a:4b:79:15:cd:4f:53:f9:ed:90:18:27:80:23:61:
                    24:74:11:d3:ac:f9:e6:08:c5:fd:f8:44:cc:36:09:
                    4c:e7:0b:4f:f1:39:d5:43:85:86:b9:d8:f5:cd:93:
                    9d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0A:28:C3:62:29:5B:52:24:ED:E1:C5:21:FE:E0:A9:66:7D:0C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/51c87e92-ae71-36f0-ac3e-1ca91e061e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:57:c1:ed:b5:0a:ab:f2:f0:8e:0a:6d:56:a7:3a:e3:f9:d0:
         a2:34:89:d6:c7:e9:e0:26:5f:a1:81:0f:e3:dd:e6:7a:98:21:
         a4:e5:69:5c:1f:af:78:34:ac:a3:c2:71:39:e2:15:7e:b7:ac:
         f6:cd:e1:88:a2:bc:8e:8c:a4:3d:e3:5b:f6:ae:3e:f7:3a:22:
         0a:9b:d5:7a:60:09:e4:f3:13:3e:70:49:f1:f1:85:16:c5:48:
         cf:b7:ad:09:b9:10:3f:1c:2d:d5:1c:64:62:0a:13:40:96:fe:
         8d:09:24:7e:df:ad:df:14:9f:23:99:e8:4f:10:18:79:fb:81:
         a3:88:31:2f:76:0c:1e:5a:70:6d:ed:51:5a:6e:ec:de:90:24:
         81:f7:49:61:64:62:db:4d:4b:57:fd:27:a2:e7:ee:05:2b:10:
         cb:e9:a8:a1:59:39:37:ee:08:49:b2:1f:fd:cc:78:e9:8c:6f:
         4a:79:5c:08:d1:82:c0:78:00:13:6c:9e:c0:ec:2c:76:03:90:
         d3:fe:42:92:a9:01:ee:7d:13:68:68:88:03:d1:cf:fa:5e:08:
         e5:7c:e6:aa:cb:e2:6f:b2:c1:66:1b:4a:86:9b:be:9a:5a:92:
         31:45:64:8a:5e:c9:61:21:cb:01:db:f1:98:06:d1:b0:05:15:
         c3:ee:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:18:13 2025 by rpki-client