Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa
File:                     5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa (raw, json)
Hash identifier:          LuIk1/ylV7nVuYB/AzR1+SmTtSe5mh9SNtITcxWd8LM=
Subject key identifier:   0B:3F:3B:86:0D:9B:30:A1:DF:CE:54:EE:E8:F8:30:A7:D4:78:13:87
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB220D9D1DB40AB1930548CB0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     394441
IP address blocks:        64.124.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d9:d1:db:40:ab:19:30:54:8c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=2455dc1f-fc9e-4d83-a557-aacabc92e0a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:01:59:c0:95:b5:9b:e6:f2:62:e7:8f:1b:
                    db:bf:b7:1c:42:b9:2f:9a:04:c3:93:5a:dc:a6:9a:
                    69:0a:58:8e:d4:46:38:4e:b7:54:fd:ef:df:74:ce:
                    c6:00:e3:0b:92:e2:5e:d6:b7:b9:35:58:37:72:d5:
                    09:eb:0c:cc:61:af:ab:36:d3:e8:5c:84:ec:40:25:
                    63:0e:e0:5e:6b:66:3a:23:da:a6:88:c1:ea:4b:9e:
                    82:02:f3:d5:1e:ad:d3:5f:d6:dd:a1:78:d1:fb:17:
                    bb:bf:e3:d9:40:4c:73:d5:c0:99:ff:78:a5:8a:b4:
                    5b:68:5b:d2:88:94:95:3f:9b:51:41:f2:7c:16:15:
                    7b:e8:64:68:89:2f:ea:2d:8c:5c:f8:2d:ce:9b:e6:
                    9a:c1:63:34:68:cd:6a:86:84:46:2e:5f:99:3b:a4:
                    39:56:ac:a1:7c:e2:2d:ef:45:11:14:a9:d0:39:26:
                    06:8c:3b:fa:c2:c0:84:b3:b7:99:8a:c8:68:18:4d:
                    03:cf:c1:23:01:4d:38:cc:84:0c:1f:7f:60:a2:08:
                    48:43:68:7e:7a:aa:39:74:31:b9:80:60:5f:78:25:
                    da:f9:cf:38:73:08:64:d8:f8:00:bb:69:22:d4:c2:
                    a5:85:e9:1f:37:e5:96:0d:20:34:6b:57:51:fb:a3:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3F:3B:86:0D:9B:30:A1:DF:CE:54:EE:E8:F8:30:A7:D4:78:13:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5e:28:ed:39:b0:fa:3a:66:ef:02:9f:2d:a5:79:b8:cc:76:
         15:79:43:54:91:08:82:1e:92:a1:d1:22:20:ee:e4:a5:07:ba:
         e4:99:23:92:6f:15:19:a8:f4:bb:fe:5b:fd:6a:03:69:4a:a2:
         38:5a:63:25:cc:ef:90:56:95:1c:cc:bf:1e:ed:3a:76:c8:4d:
         45:5f:79:cc:96:47:be:39:b8:71:e1:e6:8f:1f:be:6e:ad:7d:
         35:34:32:d2:83:1b:a7:6c:41:9e:9f:92:e2:2c:17:a3:84:28:
         60:e2:3a:bc:42:e8:56:b4:15:41:59:eb:35:9b:9c:75:99:9b:
         cb:96:60:84:f7:3c:c5:ed:9f:cc:0a:09:70:5e:92:25:79:b7:
         b7:ff:fe:8e:be:0c:45:e2:f5:ca:3c:81:b2:4c:17:b7:59:1a:
         96:cf:a2:22:a0:10:b6:d7:58:c4:26:fd:5e:3c:33:4d:11:ae:
         09:25:d8:f2:1d:ed:78:74:9f:1a:c2:2f:59:6d:de:94:ec:57:
         2d:92:b9:0c:b9:11:d4:0d:92:8b:c7:f1:fe:c5:be:25:61:d3:
         f0:75:bf:30:21:fa:bf:7b:fb:1d:fc:55:16:3e:f1:16:c9:61:
         9a:64:4d:5b:a4:51:77:69:5f:ab:c8:15:8a:24:d1:7d:92:fb:
         f8:ec:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:05 2025 by rpki-client