Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/71359d04-cea1-3a65-8613-b61d4ceb67b0.roa
File:                     71359d04-cea1-3a65-8613-b61d4ceb67b0.roa (raw, json)
Hash identifier:          qsNusDI9Vmuebn0EQ5lWYkKTqOV6cOR4YG8Gr9UAmH0=
Subject key identifier:   1F:CA:D6:DC:9E:A9:9A:0D:F4:A4:DF:34:C6:88:7E:19:05:53:0E:AE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA104A751D5E42CCB4466F80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/71359d04-cea1-3a65-8613-b61d4ceb67b0.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     36048
IP address blocks:        208.103.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:4a:75:1d:5e:42:cc:b4:46:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=67aea45c-bb76-4e4a-b9ed-1956821518f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c8:d9:23:c7:66:56:e1:12:42:50:b5:ba:f5:
                    08:3c:41:04:1f:87:00:16:55:ed:86:fa:9c:c3:b7:
                    27:8e:4f:1a:e5:11:e8:d5:31:4c:d1:e4:8e:3c:fd:
                    00:b6:ca:fa:b0:21:c4:5a:d9:a8:2a:38:a5:75:44:
                    5a:53:29:c4:94:cc:62:ff:f0:98:b6:63:13:20:bf:
                    36:1c:3d:57:c6:55:b3:43:30:38:75:d3:b2:06:ae:
                    76:0e:25:d1:4e:8c:43:31:ff:5b:cf:af:93:5c:46:
                    2d:b0:f1:c7:19:80:43:73:16:e0:b7:ae:3b:a6:26:
                    d9:70:aa:99:bc:aa:46:4f:90:ee:da:a1:b2:7b:bd:
                    98:bd:3d:82:cc:08:70:67:71:69:3d:e8:98:82:99:
                    6b:3b:e6:12:d7:51:86:0f:70:8a:cc:a9:a7:80:12:
                    82:8c:ac:19:2b:60:30:97:a4:a8:c9:db:10:39:24:
                    72:4a:8e:09:58:69:bc:7a:cc:54:c9:cf:b1:eb:27:
                    15:5a:0e:d0:ae:13:db:ac:04:2c:a6:c0:ec:d7:6a:
                    9f:b6:27:a9:64:95:a4:b1:ea:fc:5b:2b:4f:ee:f8:
                    2f:be:2c:1a:a8:9d:cf:55:e0:74:10:0f:c1:c3:d2:
                    e0:a2:18:5b:4b:91:ea:45:20:03:9e:0f:18:2f:7f:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:D6:DC:9E:A9:9A:0D:F4:A4:DF:34:C6:88:7E:19:05:53:0E:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/71359d04-cea1-3a65-8613-b61d4ceb67b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:a9:20:52:58:29:0f:49:c4:f9:32:8a:f6:e4:54:fe:b7:2a:
         a9:39:06:a5:a1:03:e2:76:21:2b:d9:49:1e:d9:39:70:4d:c1:
         c7:f8:c3:57:2e:b2:e4:8f:1e:90:10:cc:96:23:40:f7:ac:26:
         49:a8:84:75:d7:30:e0:bb:f9:e7:9d:66:a7:04:d2:01:9f:1c:
         1e:31:8f:5a:08:03:a6:f6:52:94:bc:71:c9:5d:0e:59:73:0b:
         8a:c0:70:c8:8c:67:8f:74:fd:44:c8:44:e6:38:35:ce:51:0d:
         61:a1:e0:bf:80:92:eb:98:d0:48:28:77:50:27:31:cb:d0:16:
         de:e7:5b:34:bc:93:a4:fa:94:28:f7:cc:d4:42:9f:b9:a4:90:
         a6:85:58:b9:08:fa:98:1e:60:d3:f0:8b:f9:b3:5e:09:f2:b1:
         d4:e9:7f:b3:4b:71:83:86:60:52:5c:54:33:fe:be:59:30:a3:
         fa:8c:8e:81:bd:c4:c5:b5:cf:17:33:48:d5:68:ce:e8:af:d8:
         61:0d:18:b7:cf:df:02:26:45:3f:bc:ae:72:ee:76:47:79:6f:
         a3:3d:cc:c8:ad:d0:3d:33:b2:1b:2b:8f:e3:7a:f5:d9:d3:aa:
         52:e5:e2:36:35:39:d3:f3:a6:27:d6:0a:fb:3d:90:82:df:ca:
         92:04:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:47 2025 by rpki-client