Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/632bf376-bcaf-3afb-ac22-2d665a78fcfa.roa
File:                     632bf376-bcaf-3afb-ac22-2d665a78fcfa.roa (raw, json)
Hash identifier:          hGEcOE4NPzzYKh0uzekEGV76csTFp5ucGf6kbFidZYo=
Subject key identifier:   95:56:D4:47:E6:94:5F:9D:49:91:C4:50:27:11:3A:70:EF:05:39:B8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA1041FDC3A03285EA64BC20
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/632bf376-bcaf-3afb-ac22-2d665a78fcfa.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     11359
IP address blocks:        216.222.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:41:fd:c3:a0:32:85:ea:64:bc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=b376c56d-f996-4be2-947f-5e817d3f2a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:77:d6:9b:ba:1a:67:3d:19:10:a5:ab:bf:
                    47:c7:ba:be:be:6f:ce:9d:76:95:d8:d3:6f:5e:80:
                    69:ff:50:76:38:dc:5d:23:85:17:01:3b:3b:cd:ef:
                    db:ff:ad:4b:6d:90:97:b2:b0:8c:9d:c4:cf:5c:05:
                    d1:97:16:bd:5b:0b:67:f4:c8:6e:8a:bc:39:ec:bb:
                    93:76:26:fa:e1:42:11:a4:84:0d:61:d3:01:6c:cc:
                    fc:ff:34:33:f4:8d:f1:a4:16:78:1f:3e:f6:39:bc:
                    a3:a3:11:02:96:d2:9e:35:e0:6c:8d:27:16:e5:fe:
                    2e:3f:f3:b1:6c:63:30:ea:04:fd:2a:b8:d5:67:16:
                    9a:e8:d8:50:80:0f:29:08:6d:14:ac:86:86:6a:ad:
                    e1:03:1c:b3:93:56:de:dd:6f:bc:3d:a4:ac:bd:f6:
                    06:5a:5c:87:65:7e:cb:f7:31:16:61:2b:e5:d7:fe:
                    4b:16:bc:f7:4b:64:d5:00:ef:4a:bb:cb:e9:df:37:
                    85:47:0a:2f:fc:ec:b3:cc:a4:b1:f5:a8:d4:3d:6c:
                    aa:96:66:f7:56:46:31:8a:63:58:18:f2:e5:0b:6a:
                    ac:b3:cb:5d:0f:ed:2b:4c:eb:3b:e9:66:5c:67:61:
                    93:00:1f:ca:a8:c3:6b:73:65:53:8b:4e:15:f3:0c:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:56:D4:47:E6:94:5F:9D:49:91:C4:50:27:11:3A:70:EF:05:39:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/632bf376-bcaf-3afb-ac22-2d665a78fcfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:a5:fc:65:c6:cc:54:13:9d:dc:87:30:86:72:bc:3e:3f:26:
         8f:c7:fb:af:9c:f3:65:7f:90:01:77:d3:2e:c4:1e:44:5e:a5:
         0b:4b:95:08:00:54:39:40:be:84:09:34:f7:98:71:e4:6d:75:
         ba:44:f5:e4:2b:91:4e:df:c0:15:5e:d7:9c:89:4c:06:a9:8a:
         5a:37:34:11:e7:25:7b:15:09:75:29:53:f6:e6:17:b1:9f:66:
         9e:5c:56:31:22:b2:cf:cb:7b:73:81:a4:9e:02:2e:cf:1f:58:
         0b:86:08:f8:b7:ab:c5:d7:b1:50:87:b0:bc:f0:39:cc:2b:b4:
         40:05:a9:39:d5:37:25:e3:d5:83:e1:bf:2d:60:9a:45:e0:b5:
         2f:de:03:3f:b4:7b:bd:18:d5:73:c6:9e:ca:ee:2d:bf:67:28:
         14:fb:6f:77:b0:aa:0a:f8:24:20:e9:4f:d0:1e:8f:eb:1f:ae:
         e4:de:3c:21:cd:9a:1a:63:14:3c:c7:3a:46:64:8c:4b:8b:41:
         18:7e:3e:be:22:8d:eb:4e:86:aa:ff:73:c7:79:27:6a:94:ca:
         a5:7d:0c:04:6e:55:cc:1b:63:e2:8f:9f:e3:72:6f:9d:fc:60:
         21:00:59:92:95:1a:9c:aa:64:ad:1c:09:e3:63:5e:95:83:5a:
         61:12:d5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:25:22 2025 by rpki-client