Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
File:                     a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa (raw, json)
Hash identifier:          W2Z4pFz3ZM/KRX9GMcQT1kuqRGyfIh5dr2BAwpuBhpE=
Subject key identifier:   BC:D4:C0:03:3E:EB:D2:9C:93:CB:8E:02:A6:52:A8:EB:82:40:55:E8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D7ACA848D080B5C78C5A80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     7767
IP address blocks:        208.185.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ac:a8:48:d0:80:b5:c7:8c:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=096c992b-abfb-4ba3-98f1-4898e46933b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d9:16:5f:4a:55:32:67:af:61:c2:85:80:02:
                    72:2f:5a:ee:08:16:41:8a:ba:15:ff:22:fb:cc:eb:
                    25:5c:ca:3f:4a:2f:6a:1a:69:fb:d6:c2:4c:0d:1a:
                    cd:c7:74:96:df:cf:3f:35:a4:a5:99:ad:bd:1a:47:
                    27:2a:f6:d7:dd:cf:4c:43:9c:20:c7:8b:a2:d1:94:
                    11:b8:5b:44:d9:c9:93:86:1c:d1:01:a8:48:0c:72:
                    a9:9f:58:86:ae:1a:2e:c4:15:38:a9:4f:6b:c6:60:
                    9a:7b:49:cc:40:43:0e:a0:41:73:be:c5:aa:76:05:
                    2e:9b:f7:e8:7e:bc:3c:95:41:be:84:24:9a:4b:00:
                    58:80:81:c5:d6:ee:51:ae:32:d1:12:7e:e4:55:b2:
                    c3:9e:07:76:dc:b3:3e:17:6d:49:c4:de:03:73:95:
                    a6:01:be:1c:67:52:55:16:6d:44:1f:3f:24:59:f1:
                    2a:8c:c8:36:f7:13:81:d3:77:44:d8:91:50:b0:8b:
                    cf:6e:e2:86:0b:19:79:2c:54:5d:07:91:72:58:5d:
                    e8:58:c9:94:e4:90:24:11:e5:6b:32:9f:ae:00:12:
                    99:1c:79:97:43:ac:5d:63:7c:97:12:02:be:45:fb:
                    29:6e:6a:f2:e2:ba:4d:5c:eb:d4:b2:18:2c:97:0f:
                    7e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:C0:03:3E:EB:D2:9C:93:CB:8E:02:A6:52:A8:EB:82:40:55:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:8f:cd:d5:0d:3c:70:bc:63:d8:c0:e4:1c:e8:8e:ac:d4:91:
         da:cc:81:c1:b0:7a:78:9a:77:cf:22:bd:61:22:ae:a9:b2:1e:
         1f:8c:5c:de:cf:c2:1a:2d:2b:0b:98:90:27:13:c2:e7:b6:32:
         42:44:51:de:60:fb:6e:c1:9e:84:fe:42:47:22:d9:ba:b9:11:
         0b:b3:ae:96:04:60:06:10:04:61:ea:25:09:ac:24:2b:e5:37:
         fd:91:10:27:7a:27:4d:94:d8:f0:9c:1a:37:48:53:06:c0:22:
         77:be:89:71:93:01:20:41:7b:22:3e:2a:4a:4e:ed:74:33:90:
         17:9f:80:5d:7f:82:65:15:82:fc:41:93:84:e8:67:1b:ee:11:
         6b:1e:a9:da:d6:f2:60:e2:b0:1f:fc:30:09:0c:57:49:ae:a1:
         ce:1c:e1:b1:f3:74:b6:18:0a:ec:49:c9:d7:72:6e:dc:09:5d:
         8a:dd:5d:0b:69:10:39:d9:03:4d:c6:15:45:d3:4c:1a:7a:ba:
         d9:7e:3f:39:d8:5c:6d:0f:30:d1:15:83:9e:81:2d:fa:64:a9:
         1a:ff:d9:7d:eb:0f:db:eb:0d:45:b2:83:ef:2e:70:e9:42:fc:
         e4:5c:6e:17:97:1a:c1:8c:7d:6e:dc:50:45:5f:82:17:df:d3:
         6d:ab:e4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:41 2025 by rpki-client