Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
File:                     59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa (raw, json)
Hash identifier:          E1GGlkzbgbMQGZYUnWcdG84yawL65KR4dwtTCJbmx5k=
Subject key identifier:   1F:7E:A2:67:BF:D4:04:A4:FD:65:D4:11:56:D6:64:34:09:CA:B9:63
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA7CCE9EC2DE1E73E410FF600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     394976
IP address blocks:        209.66.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:e9:ec:2d:e1:e7:3e:41:0f:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=a28dab79-208a-4dcc-a71f-1e909572581e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:be:f2:8c:36:5c:f6:94:ed:ea:e8:b9:c7:
                    2b:90:a5:2a:ac:89:2c:bd:41:92:d0:c3:76:2b:aa:
                    5c:bf:6f:68:55:8b:03:d6:21:63:a0:89:ad:26:51:
                    34:b8:6b:1b:28:a9:1b:46:eb:03:43:6e:03:fc:c5:
                    7b:ef:fd:ff:ac:58:17:07:cf:95:84:db:81:f8:0e:
                    35:ab:92:f4:69:2f:73:b0:03:f9:d6:58:a3:e1:b4:
                    81:a6:c2:e7:20:55:73:50:2c:ef:1a:0d:66:04:b8:
                    b9:26:b5:9a:f1:c3:f5:38:f4:c7:7f:f9:9e:75:34:
                    d4:05:16:95:19:16:64:8e:91:1b:de:3e:5e:dc:aa:
                    03:09:a0:9e:01:48:6a:d9:cf:b9:e5:a0:1b:13:4e:
                    24:6a:be:b6:7e:b6:84:6a:00:ff:fb:bc:1c:e7:db:
                    f0:56:c3:e9:b0:23:35:7f:61:87:f9:b3:fe:eb:23:
                    38:88:67:64:59:18:97:f5:21:b8:1b:a3:87:87:6f:
                    d3:96:a3:9b:a5:e7:68:b3:ab:af:07:4d:69:07:5a:
                    be:76:69:5d:68:86:ea:9a:f1:63:a7:30:78:07:d7:
                    66:ec:a3:ae:6d:3b:9c:4c:c8:51:b0:74:23:e5:5f:
                    0f:eb:ce:34:de:e5:43:4d:f7:9c:64:82:7f:72:55:
                    75:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7E:A2:67:BF:D4:04:A4:FD:65:D4:11:56:D6:64:34:09:CA:B9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/59434c4f-2cc1-3fa8-9230-c20bd80e37d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:71:9b:82:22:2a:12:d9:ec:9c:24:24:8c:c7:43:ac:38:e7:
         cf:36:e2:be:b9:60:38:8d:ad:1e:04:40:8a:3b:6b:46:bd:7a:
         c2:a6:22:19:0c:fb:c6:af:70:f7:94:f4:08:7a:a3:b7:15:35:
         73:27:5a:b5:ad:b7:d1:ba:87:96:3b:1b:22:a2:7e:21:e9:b2:
         7f:7d:5d:dc:bf:cd:41:b6:ee:dc:cb:35:de:08:48:7d:72:15:
         4b:f9:e3:17:84:a2:94:6a:35:90:5f:57:c4:89:93:38:1f:e2:
         12:75:7a:dd:11:d8:e8:f9:0b:3e:ab:d2:40:91:77:ee:f6:2f:
         bd:ac:c3:25:8b:69:97:a8:68:e0:55:9a:7f:c4:a5:3b:15:97:
         4a:ea:e3:ac:79:ac:ab:ec:43:86:b2:da:d8:23:7a:84:98:10:
         4e:36:c0:0f:9b:83:08:1c:9e:7b:a1:d8:d0:12:74:c2:85:5c:
         fa:30:a8:6c:d6:bf:e6:de:a9:8d:5e:22:61:e3:f1:da:aa:17:
         a6:0b:ed:e0:fd:47:4b:cb:36:ee:94:7d:61:62:e0:59:1f:02:
         a7:b0:ee:df:da:7d:49:e6:27:ae:51:e3:f9:22:3c:5f:d7:e0:
         e7:c9:0e:4a:f4:9f:44:f0:7d:bf:a7:97:d4:62:35:b9:fe:79:
         6f:e1:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:53 2025 by rpki-client