Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7bc20eb5-10a3-3b6e-b436-1f666221cbf9.roa
File:                     7bc20eb5-10a3-3b6e-b436-1f666221cbf9.roa (raw, json)
Hash identifier:          Tjewxu1ywB1WT1Z7UlztHlUa7ImSDwU9iSZYSm3sBqc=
Subject key identifier:   42:3B:02:2D:06:D4:13:CC:3A:95:5C:85:68:3D:8C:EA:22:00:05:53
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B970CECA6190D8A1554BD5440
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7bc20eb5-10a3-3b6e-b436-1f666221cbf9.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     19966
IP address blocks:        216.200.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ec:a6:19:0d:8a:15:54:bd:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=f5f7923f-53ec-4cba-af1e-d138583596f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2e:57:5b:fc:00:0f:11:64:69:e6:fc:f1:f5:
                    18:46:ef:ea:c8:dc:12:fb:89:46:46:14:51:96:a1:
                    bc:90:69:d0:c7:78:10:1d:7b:cd:0d:2a:3f:37:21:
                    2a:d3:c1:bb:74:c0:e8:84:1b:29:41:e6:2c:93:f4:
                    05:50:65:ba:83:0a:b7:8f:a9:de:14:6e:9b:ba:2b:
                    eb:92:7c:5a:ed:ed:1e:da:bc:aa:96:87:03:fb:84:
                    ef:79:02:7f:d9:14:77:43:49:a9:38:b2:e3:82:b7:
                    f8:2e:4a:1d:95:9d:40:31:19:b1:5b:cd:0c:14:ba:
                    50:af:16:96:13:af:9a:2c:d4:71:59:ce:e1:ae:fa:
                    05:02:71:a3:96:46:31:51:13:17:ed:a6:f9:62:e6:
                    08:c8:50:ba:49:fd:96:1b:66:da:1a:85:c0:18:a8:
                    37:17:03:0d:a0:7c:85:af:d8:61:27:24:fd:93:3a:
                    f1:b2:0b:22:6f:5f:bd:17:ea:3a:83:c0:17:93:fa:
                    ec:98:09:43:e1:2e:04:90:11:8a:2f:56:97:b7:59:
                    27:e2:7b:08:ab:6b:28:2f:9a:8e:7b:58:6c:57:f0:
                    f9:fb:19:bd:a6:8a:63:d1:9f:8e:4c:37:3e:ad:52:
                    2c:ce:ce:d1:c2:cf:34:cb:5e:c4:d6:fd:c7:c6:a3:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3B:02:2D:06:D4:13:CC:3A:95:5C:85:68:3D:8C:EA:22:00:05:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7bc20eb5-10a3-3b6e-b436-1f666221cbf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:e9:4e:18:dc:98:8e:f2:7a:97:2a:a0:98:c3:6e:39:97:
         13:9c:b6:e6:c6:0c:5a:dd:1e:49:77:7a:c4:20:6b:de:f9:4a:
         a9:ed:5b:db:cc:f2:44:d0:54:ba:af:4f:90:da:c2:48:41:eb:
         30:09:b4:7e:37:06:8c:59:27:32:d8:4f:c8:1d:54:85:57:e5:
         f7:e0:3e:e8:1a:de:a4:df:7d:8d:35:88:9b:84:4a:54:85:6b:
         5f:66:b4:18:7b:c0:cc:fa:f4:6f:d8:fe:9d:ed:18:e8:b1:40:
         ea:72:a8:01:55:ee:52:84:35:5e:7f:c2:8a:4f:57:c2:dc:46:
         2e:c2:7c:84:73:64:bb:5e:ca:e6:13:e8:1f:7b:cb:b0:e4:ab:
         c1:79:25:94:1a:08:33:88:8c:ac:d8:c4:0d:27:ad:1d:ff:2a:
         02:71:92:f8:72:ed:62:08:d2:81:d0:74:4e:2e:e9:d8:05:a8:
         c7:fd:89:c0:92:a4:ae:20:b9:56:d8:db:4d:dd:ca:7c:e1:8f:
         d1:11:c0:6e:f7:fe:c3:c7:70:ab:dd:d2:e4:79:1d:f1:03:17:
         5e:7b:36:14:90:1f:24:aa:34:21:3c:04:48:06:d1:1c:d6:df:
         9b:a2:98:82:68:c6:73:7f:03:c0:b1:92:0a:dd:ff:c2:1c:80:
         46:63:ab:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:04:08 2025 by rpki-client