Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
File:                     7b1246b8-08e3-34f5-922b-40e4a4fad812.roa (raw, json)
Hash identifier:          vqY+LZCR1TikCW5sCQt7SXUgQRXGU87kOpvHQ8N7gHs=
Subject key identifier:   56:2F:25:35:E1:20:D5:A4:07:BC:E8:9F:3E:F7:AE:F9:CE:C1:9D:F4
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B9CA235C3683F68B1DF6AE6E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     17025
IP address blocks:        2001:438:b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:35:c3:68:3f:68:b1:df:6a:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=781c341e-52bb-43c1-b750-fd4bd7415c8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:67:b9:03:c9:b0:bb:ef:4c:3e:c8:73:be:
                    fd:4e:60:f9:ef:11:f4:0a:66:c0:e7:e9:17:e2:1c:
                    80:f1:36:7f:ff:53:4a:b9:46:a5:38:d7:f3:d4:97:
                    2a:be:72:d3:a8:e2:5e:52:68:4c:35:14:31:1c:49:
                    dd:0f:2e:45:a3:1a:8d:3b:b9:39:51:f8:c5:7a:f7:
                    b7:55:c8:28:a7:f0:fb:eb:eb:cc:89:9c:f6:cf:c1:
                    33:88:8c:db:27:5e:63:5a:8f:0a:77:93:7b:90:a0:
                    5a:54:b9:ae:98:13:de:e6:92:2f:59:af:df:aa:7b:
                    35:24:a6:20:3a:d1:8d:b8:e0:28:7d:14:0d:60:cf:
                    50:a6:e4:f3:0e:f8:a6:40:72:59:7e:af:e6:3e:e6:
                    51:25:13:39:dd:e6:1b:f4:b1:32:65:7a:cf:c0:03:
                    2d:9c:ec:ba:88:c9:c0:78:18:ed:0e:ce:0f:08:4b:
                    84:34:c4:e2:c8:99:e7:89:b1:80:b5:1a:c5:93:df:
                    24:c5:ce:fa:87:22:1d:f6:09:16:22:f1:c3:50:cb:
                    76:48:cc:af:74:14:3d:73:b0:f8:b4:54:83:31:5b:
                    a4:09:cf:49:a5:26:94:4f:8a:7e:58:38:62:ee:73:
                    64:c6:de:50:60:b3:66:a3:fe:55:d2:54:c3:8a:6f:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:2F:25:35:E1:20:D5:A4:07:BC:E8:9F:3E:F7:AE:F9:CE:C1:9D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d9:b9:7f:34:a1:9f:97:94:15:c8:d7:44:fa:d9:4f:bb:82:
         80:36:31:8a:52:da:cd:f5:59:2d:ee:bb:d5:e8:5a:31:a1:62:
         3e:0c:40:32:86:3f:34:8a:89:33:e8:d6:62:a4:d2:21:b5:73:
         f2:40:21:d2:d3:14:29:96:fb:c3:77:de:bc:25:54:1e:2a:8f:
         c4:19:10:ad:f8:7a:4c:be:c3:dd:14:06:b0:00:2d:2e:cf:5d:
         df:8d:b4:9c:52:fe:33:e8:80:9b:56:a1:9e:7f:e5:75:f6:07:
         52:4b:02:66:1b:c6:69:a2:59:de:b3:77:de:f8:b1:77:51:e8:
         2e:26:c2:ab:c8:d9:ce:4e:ba:71:67:79:7d:dc:14:b1:0b:e0:
         6f:ff:98:bc:08:56:cc:2b:54:ce:a0:e9:52:31:f5:f2:00:7a:
         99:94:fe:29:fd:5e:cc:97:de:38:aa:f0:bc:11:84:eb:ff:bb:
         9a:70:f1:8d:45:e9:5a:3c:d4:ec:89:b6:00:46:05:c1:c9:19:
         ea:a9:42:63:27:50:5d:ff:20:b8:c9:43:5d:31:50:3a:56:ca:
         fc:0d:30:cd:2e:4b:3e:2e:4f:8e:01:23:a2:55:d6:f9:ff:a9:
         ef:4b:b3:d8:99:92:e7:c9:92:af:c9:f9:8f:ad:85:d2:98:75:
         71:b5:74:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:01:24 2025 by rpki-client