Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c5a34d4-1f56-32b1-ad93-364969d3d622.roa
File:                     8c5a34d4-1f56-32b1-ad93-364969d3d622.roa (raw, json)
Hash identifier:          3slWm0CBAX7EbsQcyx8WGz5JFvfik6e97abSVDq1DCc=
Subject key identifier:   89:DC:01:73:1E:25:7E:FD:AD:0F:77:77:CD:E2:78:0F:37:65:FE:4F
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB220D03DF66B376E1865D800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c5a34d4-1f56-32b1-ad93-364969d3d622.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     398731
IP address blocks:        64.125.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d0:3d:f6:6b:37:6e:18:65:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=1bb3995e-a7fd-4383-860b-4374d4ab21cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:ad:c9:5a:d9:5b:ea:d0:d8:a6:59:be:c1:
                    8b:41:63:4b:49:57:dc:a5:26:f2:b9:7a:8d:3e:34:
                    c8:bb:32:97:ec:2b:6d:80:d1:93:67:6c:4f:35:7b:
                    16:34:79:9e:9b:24:fe:f8:01:6c:ea:d0:d5:b5:09:
                    79:60:74:b0:72:64:b8:1b:2e:14:93:43:77:98:9e:
                    0c:5d:c5:a9:ce:c8:83:4b:5f:dc:cc:64:e5:35:3d:
                    f8:b6:8d:0a:13:88:3c:53:ab:e9:30:0f:ba:a1:a3:
                    71:04:d5:9e:b7:a3:82:5f:17:ed:3a:94:b2:10:c3:
                    72:34:5e:9d:77:9e:e9:80:b6:ee:ec:d2:19:55:f7:
                    0c:69:d3:35:cf:f1:33:ea:07:6b:37:37:13:a1:b4:
                    50:02:5a:17:cd:65:16:cb:64:72:21:31:2d:51:4f:
                    12:a0:5b:9b:7e:c8:e2:d3:7a:3e:9c:28:c8:fd:c2:
                    ac:f5:9e:08:7a:71:e4:46:7f:e5:51:7e:d8:9c:92:
                    f9:9a:e4:b4:55:51:e8:58:c8:0d:b1:05:ab:63:ce:
                    f9:bb:2a:09:12:29:d7:a6:dd:2f:54:e0:2e:9c:e3:
                    77:f8:7c:5a:db:1c:83:f8:d7:17:0c:b3:95:54:15:
                    61:a9:58:8d:42:1d:b4:4c:dd:79:53:48:87:ea:72:
                    bd:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DC:01:73:1E:25:7E:FD:AD:0F:77:77:CD:E2:78:0F:37:65:FE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8c5a34d4-1f56-32b1-ad93-364969d3d622.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:27:a1:e3:6a:8c:b4:c6:a8:d8:a5:62:c8:ff:e4:c6:8d:71:
         95:bd:5e:a8:d5:32:e5:21:c5:03:e3:bf:3b:49:9d:89:0a:aa:
         bc:df:0e:ab:fb:98:e7:17:ec:be:da:aa:a0:8d:cc:c2:f7:f4:
         84:e9:21:93:65:4b:ab:ce:bf:44:49:a6:b3:32:8e:13:1d:55:
         68:c8:de:43:dc:56:a9:79:8d:47:50:89:e7:41:cc:ee:b1:e1:
         77:63:59:3c:c0:7b:2e:08:f2:ef:0b:f1:4b:33:95:bc:03:c8:
         cc:ef:2a:ec:66:71:76:25:70:05:b3:d6:f0:5e:ec:62:13:fe:
         e4:d0:5f:cb:62:e2:5d:3a:d0:1c:67:bb:9b:84:36:79:fd:59:
         38:35:b4:bc:f5:b3:d7:a4:40:b4:1f:21:91:3f:d8:4c:24:ab:
         63:e6:c4:d3:7d:e4:48:77:c0:ab:95:ad:77:74:5e:74:2d:00:
         d5:e3:6d:33:1b:ff:40:f9:66:80:23:be:4e:f1:38:93:41:fd:
         a8:ab:35:c3:3c:f8:41:80:74:01:0e:be:5c:04:e4:d6:9d:8d:
         81:14:d1:61:f9:45:1a:53:58:c5:2d:00:3a:37:48:d6:d0:e0:
         fd:e1:57:09:38:b4:02:2b:67:e6:4d:33:1b:49:f0:6b:35:4f:
         1e:57:81:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:32 2025 by rpki-client