Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f5e9fc5-5036-3c26-87e4-7ad2a49ccd3c.roa
File:                     8f5e9fc5-5036-3c26-87e4-7ad2a49ccd3c.roa (raw, json)
Hash identifier:          iCaMx3YxyQli+7XHoBM+Kg4fvaFFnowGrZ5exTfr8ZM=
Subject key identifier:   1B:C2:1E:BE:5E:01:C6:CF:15:D9:F7:1E:C5:22:4F:6E:BF:DA:B4:A2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA1047E52CE30A9C328BE600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f5e9fc5-5036-3c26-87e4-7ad2a49ccd3c.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     23492
IP address blocks:        66.62.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:47:e5:2c:e3:0a:9c:32:8b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=4c1cb1d8-0631-4bd9-839c-8f172c06d249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:47:85:4d:b6:eb:e8:bf:4c:6b:05:b2:da:e9:
                    f8:92:34:5f:2a:43:75:32:39:c1:f4:8f:29:9b:79:
                    55:85:31:01:5d:f5:c7:a9:1c:d4:62:5c:7e:0c:45:
                    3b:4b:43:61:2e:59:97:62:ad:0d:94:de:76:48:db:
                    58:9a:80:9e:28:02:47:0b:39:ef:7b:1d:13:7e:78:
                    b4:ce:04:c9:09:c1:57:40:72:23:7c:eb:f3:e6:1f:
                    e9:c4:15:3f:2e:54:e9:4e:cb:e8:12:3f:62:37:61:
                    6a:9e:f2:1c:a1:a3:31:52:d8:f8:cd:38:38:68:8b:
                    a0:08:87:7d:a8:75:fe:fe:ad:7d:ea:29:d1:f0:8a:
                    e7:e0:d6:39:b9:6e:98:b5:03:af:cb:77:7c:34:5d:
                    81:44:19:f4:89:cb:e0:83:e7:6a:f9:38:27:bd:9e:
                    c0:03:7c:a6:29:53:ce:80:c6:2b:b7:55:a6:e1:28:
                    8f:5a:3f:ae:54:a1:33:37:25:31:c0:77:2c:56:ed:
                    f3:22:80:c6:46:ef:1b:4e:17:04:2d:75:d6:fd:74:
                    a9:f4:55:01:21:bd:7a:69:b2:e3:ff:84:0f:cf:ea:
                    7b:a4:a0:23:91:c0:4f:d8:07:23:55:1c:59:b4:8c:
                    91:10:1b:6e:4f:06:c8:40:9f:3d:cf:7c:36:cc:79:
                    b6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C2:1E:BE:5E:01:C6:CF:15:D9:F7:1E:C5:22:4F:6E:BF:DA:B4:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8f5e9fc5-5036-3c26-87e4-7ad2a49ccd3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.62.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:05:9b:7c:65:bf:24:98:61:2c:bd:4c:53:b3:ad:c4:37:05:
         c0:ac:f9:92:e9:8d:13:0f:3a:eb:3d:bd:c3:da:f4:8a:b3:c6:
         f3:31:1b:51:75:f9:1a:b7:77:e3:d3:5c:12:05:3f:df:35:af:
         28:7f:52:29:53:77:ab:13:28:ca:47:ca:ac:99:bd:80:b8:bd:
         97:fb:82:60:ed:e3:6b:68:1c:1c:fe:1c:2e:93:02:dc:4f:76:
         67:c8:48:4b:dd:62:fb:a6:01:da:11:5c:3f:77:0b:29:8d:b9:
         44:ba:89:ba:e1:67:b9:5c:2a:83:68:0e:24:f9:73:6a:9c:c5:
         12:e8:f4:f4:a0:5a:a9:10:ce:6c:b9:52:df:58:ac:de:9c:32:
         e7:52:99:c0:02:ea:a2:4e:30:c6:00:8d:76:7e:a4:e2:65:0b:
         25:dc:9a:7d:a5:7c:cd:a6:47:f5:25:72:74:da:8b:3f:9d:ef:
         d0:08:1a:e5:1c:42:86:17:a2:b2:78:d5:f0:ae:57:e2:3c:51:
         d0:12:29:2e:62:47:a9:c6:69:04:76:37:08:ed:3c:86:cc:37:
         18:f2:e2:c8:ce:51:01:21:ff:d4:22:14:b7:0c:40:a3:75:ba:
         fe:7f:fc:f5:15:64:0e:bf:14:36:54:a7:e5:12:ab:da:17:c6:
         a9:4b:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:55 2025 by rpki-client