Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5fecc96c-b22f-3c15-91cd-0c4a3eda893c.roa
File:                     5fecc96c-b22f-3c15-91cd-0c4a3eda893c.roa (raw, json)
Hash identifier:          +mGgXCBlJFVeQq+aCFqIYIS8kD1lAr2mFV8YRvj80zQ=
Subject key identifier:   16:EB:14:23:CA:6D:C8:1C:93:24:94:04:74:3B:31:76:7D:8D:1D:3C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BA5023770EC190C949E7CE000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5fecc96c-b22f-3c15-91cd-0c4a3eda893c.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     400385
IP address blocks:        69.160.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:37:70:ec:19:0c:94:9e:7c:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=a8affb4d-e2ca-4cd8-8cd3-814af4c35423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b6:3f:da:66:dd:07:72:b4:3f:53:e3:8f:2b:
                    18:22:37:a7:af:5a:1f:b2:03:ff:aa:f0:63:2f:fc:
                    50:3c:3c:64:db:09:66:af:fd:93:f2:76:64:50:49:
                    30:82:75:68:b4:e2:84:84:54:25:dc:4c:d5:6e:36:
                    f2:d0:23:44:ae:ab:98:6e:d0:2e:13:8d:3b:b9:29:
                    5f:11:a6:e3:97:52:fd:6c:11:e5:be:e5:7d:16:4d:
                    88:c9:bc:d5:a9:07:ba:ab:78:a6:2c:24:4e:63:8b:
                    b1:5f:7f:15:49:4f:7a:79:6b:44:9d:9f:e7:c6:ac:
                    06:bc:2f:21:af:a4:e8:be:81:94:3a:9d:cc:29:06:
                    4c:4c:35:f5:4b:52:63:31:5d:04:ca:47:8c:c8:29:
                    70:ae:ae:92:39:f5:5d:10:3a:16:86:e3:ed:be:9a:
                    05:22:b0:55:32:95:b8:13:4d:0f:38:a4:1f:ac:1d:
                    05:a6:78:d4:b7:92:82:3e:94:31:cd:60:47:e4:81:
                    1f:23:9e:22:89:9b:c0:34:ac:12:b5:cb:ba:b9:6f:
                    1a:b4:41:37:5f:73:07:0f:12:cc:e0:ab:6f:e3:0c:
                    90:13:0f:0b:4d:fa:d3:34:33:16:d5:7b:65:cd:ba:
                    01:2e:fc:7f:35:68:86:eb:60:44:66:f1:46:15:c4:
                    cc:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EB:14:23:CA:6D:C8:1C:93:24:94:04:74:3B:31:76:7D:8D:1D:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5fecc96c-b22f-3c15-91cd-0c4a3eda893c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ca:21:04:8c:0f:e3:fc:d9:c1:ff:57:88:f7:5d:82:23:54:
         53:61:c9:84:95:c6:64:86:ff:62:31:c7:88:d4:cb:d0:9c:e2:
         3b:8b:e9:bc:50:bc:ac:b4:d0:8c:69:6c:2a:6c:0c:f1:92:e2:
         50:9a:a4:5c:47:48:0d:fb:9b:4e:b8:cf:aa:53:16:d1:46:ac:
         d7:eb:a6:ae:da:49:84:93:52:73:4e:b2:13:b4:00:d3:09:77:
         8c:a9:32:c1:31:2b:30:45:49:4b:7f:d7:de:6b:8c:1b:42:a8:
         a0:25:3b:90:b0:cc:40:60:8b:a1:31:c1:f1:d5:0b:51:1c:ee:
         4a:a1:78:11:c1:81:8e:ff:a4:70:b3:7f:92:35:69:8d:83:65:
         cd:11:e0:a4:2a:cc:e4:ff:43:26:d5:9f:dc:a8:0f:da:67:2f:
         1b:97:00:88:b7:b2:4b:d9:ad:ba:01:e5:f9:ba:9a:29:38:ce:
         c7:e8:9b:ff:cc:78:63:54:23:8f:8d:55:1d:31:ba:a8:65:02:
         02:1c:84:91:27:ae:e1:aa:fa:b5:39:5b:b1:d9:9d:de:ca:68:
         34:f3:65:7a:7b:09:e6:b6:49:c0:9c:18:7b:b4:40:9a:28:44:
         5e:12:2f:30:b8:0c:69:d9:f0:bd:bc:74:b6:4d:7f:57:48:47:
         a2:58:5e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:55:37 2025 by rpki-client