Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
File:                     7b1246b8-08e3-34f5-922b-40e4a4fad812.roa (raw, json)
Hash identifier:          yTWCnTHJltVc6tYXoKFRKCgWVK04ht1Y9k5ugRs5Otc=
Subject key identifier:   95:0A:2E:E8:04:EE:04:C7:74:4C:44:39:83:74:1E:53:AC:FE:FA:96
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ABBE6327D000666EA1BFCB0C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     17025
IP address blocks:        2001:438:b2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:32:7d:00:06:66:ea:1b:fc:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=26ea475c-e632-4de7-b72e-ca380490e915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:3f:b6:ec:fa:d3:f7:67:30:2f:23:34:b1:
                    da:57:8e:43:8d:ed:f6:85:e7:c2:8b:da:30:54:17:
                    ae:51:2b:e7:d3:ac:b9:12:82:eb:e0:59:66:23:89:
                    b5:27:ad:38:47:7c:b5:f4:e9:04:2a:04:38:eb:6a:
                    ea:19:e4:20:bf:fe:92:85:a9:3e:84:7c:64:56:ce:
                    79:a0:68:e1:eb:1f:ab:c1:39:22:8d:c1:41:e2:89:
                    e6:c0:ee:9b:30:0c:a0:50:59:31:22:6d:e6:af:66:
                    03:f6:3c:f3:78:ca:a8:fb:bd:5f:62:3d:23:86:6a:
                    14:64:85:14:a8:21:7f:d0:00:d7:c3:7f:2e:3d:d4:
                    e5:b6:d1:d0:bc:63:58:a2:b3:49:b6:94:dd:5a:11:
                    73:0a:47:6b:80:12:71:ce:c3:23:f7:b8:0c:4e:3e:
                    4e:67:d8:2e:e5:29:a7:19:ce:42:0c:5d:6d:fb:c9:
                    0d:18:b3:20:3f:04:5a:6d:94:49:67:37:1c:6d:1c:
                    d4:9f:41:1d:a6:5a:b8:fa:2f:b2:35:83:bb:e7:d5:
                    a3:cd:ee:ff:99:35:6e:7d:10:c1:b5:00:3a:00:9b:
                    57:19:f7:22:19:e0:d8:6f:e9:aa:8c:7f:bf:c1:0a:
                    68:bc:30:01:46:e2:b2:d4:ae:55:3b:ad:fe:bb:24:
                    05:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:0A:2E:E8:04:EE:04:C7:74:4C:44:39:83:74:1E:53:AC:FE:FA:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7b1246b8-08e3-34f5-922b-40e4a4fad812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:b2::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:55:e7:5e:14:6d:e1:0d:82:63:6c:51:91:fc:d9:96:d5:
         cb:cc:6f:2e:5a:1e:16:a0:fa:58:dd:46:0e:86:f9:50:13:1c:
         30:23:1f:89:c0:99:b4:31:f2:d7:c7:6e:ba:06:5e:8a:99:9e:
         2c:62:bd:dc:e2:0f:da:fb:c3:f2:01:66:d0:80:a5:86:7f:8a:
         ba:f7:c3:74:a4:49:16:f7:0b:5c:82:76:c5:76:51:7e:74:30:
         bf:f2:47:ce:11:a5:6d:cf:fc:90:15:d0:0f:e9:87:07:77:19:
         f3:9f:25:ed:8e:fa:53:31:d4:3e:1f:be:4f:a7:5f:26:a7:9e:
         25:19:b2:b8:df:80:d9:46:a8:bc:47:9b:85:59:84:1f:e6:61:
         f4:4b:85:20:31:c2:b8:64:33:98:0b:ac:16:4b:33:a3:d4:25:
         f8:85:ef:79:bb:5e:83:84:a7:d8:a0:e6:ae:47:b2:e0:99:19:
         fe:be:7e:7b:a7:c7:3e:63:84:54:49:ba:d7:6e:1d:ad:c9:77:
         e8:9b:ef:de:5f:ea:f3:55:75:49:3f:98:f7:ba:ca:23:15:43:
         87:df:0a:fc:d9:ff:22:ff:91:57:ce:b5:d2:de:38:dd:5a:19:
         9b:8f:2d:6f:58:5c:14:b1:98:35:50:20:e9:c9:4f:27:fb:68:
         ec:44:cc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:17 2025 by rpki-client