Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa
File:                     5f609099-d541-3126-8d88-9fd423ed6e25.roa (raw, json)
Hash identifier:          ikjUABs5xlGOf4u7dyIZCTb7AiP8m2Ab0E/WsUPNrXI=
Subject key identifier:   8F:64:72:E2:2A:E7:CE:8B:AE:16:AE:E6:34:14:97:D2:D6:1A:4C:13
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D79849D119AD5AAF5535C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     393544
IP address blocks:        128.177.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:98:49:d1:19:ad:5a:af:55:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=62b0a02f-a74d-46cf-aefd-6f58a292ade0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:1a:d6:91:f7:2b:76:e8:77:59:1f:6d:d4:55:
                    00:f4:ad:5c:34:cd:fe:bb:38:ea:d2:c4:13:b7:c8:
                    89:9e:54:3d:71:b3:62:69:9f:aa:75:43:cc:58:b1:
                    13:e1:06:cc:6a:42:4d:35:df:13:0f:e9:b7:a1:57:
                    fd:83:36:e8:07:21:31:f8:75:14:51:c2:0b:cf:9b:
                    b3:42:82:8e:02:6c:03:03:f2:c1:d9:e6:65:cb:13:
                    2a:4e:3e:0e:e7:bf:5f:cd:4c:1b:75:81:84:8f:af:
                    fe:d8:86:f5:49:14:3e:94:25:64:e0:ff:5a:c9:c1:
                    c6:00:8b:4c:5e:b1:c6:81:51:ee:fa:d1:91:3a:78:
                    6f:7b:07:78:66:66:9e:d0:14:dc:7c:5d:0f:b6:dd:
                    5e:d5:b1:00:87:92:8f:dc:3e:a9:e0:4a:63:82:95:
                    e9:71:71:71:90:77:4f:59:92:8d:3b:08:7d:97:b1:
                    85:41:a0:b0:16:6c:ab:8a:88:2d:49:26:65:cf:40:
                    dc:8b:b9:bd:ab:4c:57:aa:68:b1:ff:75:05:4f:20:
                    9a:34:20:83:66:29:19:59:ec:7a:4c:1b:e3:f9:b5:
                    0a:25:63:4d:0f:85:76:e8:df:ab:0b:e3:6a:17:c7:
                    7e:cd:1d:ff:f4:21:90:a5:a5:c0:d0:e6:12:17:0d:
                    10:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:64:72:E2:2A:E7:CE:8B:AE:16:AE:E6:34:14:97:D2:D6:1A:4C:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5f609099-d541-3126-8d88-9fd423ed6e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:9f:22:95:7a:ca:64:24:7f:b5:c3:3e:92:ed:83:86:dc:57:
         a6:02:81:7f:e3:f7:1d:9d:80:d4:12:8f:6d:da:35:b0:06:93:
         86:b8:12:0f:d7:a9:9f:0f:0a:df:7c:4e:9f:2d:ca:b3:3c:f1:
         51:ab:f2:bb:a5:02:67:ac:4b:39:b6:8f:e3:39:71:97:7c:eb:
         27:97:d7:9d:71:8f:5a:86:e4:91:8a:46:7f:16:78:f4:e4:e4:
         85:9e:39:91:dc:08:80:42:f6:68:98:52:ae:f3:fd:ee:50:b6:
         5f:a0:8e:81:b8:b6:82:ed:60:05:98:dc:6f:90:4f:ba:6b:c7:
         f6:da:69:42:76:65:85:60:5b:58:24:cc:33:2b:10:78:e9:3f:
         0f:03:44:c1:cb:be:9a:ea:1f:7c:c5:55:70:30:de:ff:ad:b9:
         25:cd:43:cb:e8:8a:d0:91:67:54:27:ac:37:b3:38:6e:40:06:
         ed:a6:16:87:52:e9:e6:e5:cf:6e:65:8f:cc:cb:cb:9c:0f:4a:
         55:5b:12:5e:92:a8:26:d4:4e:78:76:4f:f2:7c:80:ba:2f:63:
         5d:40:57:ee:09:73:29:b7:88:54:cc:ac:6b:b7:d6:08:35:e6:
         f7:a5:a4:b4:85:6e:a1:fe:96:0f:ea:f8:43:65:a0:bb:a5:0c:
         4d:1e:ae:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:05:40 2025 by rpki-client