Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa
File:                     aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa (raw, json)
Hash identifier:          BC/yKVdAxo2S1Dc8JevdsqSQ/HlvwX9n31QeXJOvhN8=
Subject key identifier:   F6:09:15:CC:9D:E0:2D:4C:20:B6:B9:40:4F:24:0D:B8:76:D4:69:60
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91B9B8182BA121A34836700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     26878
IP address blocks:        128.177.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:9b:81:82:ba:12:1a:34:83:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=a8f16579-f224-4c6a-a8ed-66d8e5c4edeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:c3:7a:08:88:87:d0:b3:ee:48:bc:1c:f9:
                    f7:b6:d6:24:66:25:e0:b1:2f:fe:40:17:c2:e9:9a:
                    46:a5:bf:b3:98:f4:ad:dd:cb:40:67:e1:b4:81:bc:
                    2b:82:3c:eb:f6:09:cd:c1:91:9f:3f:6c:81:0e:7c:
                    fa:f5:0b:d7:74:6e:a9:f7:76:94:75:48:85:f2:56:
                    04:43:f8:f6:ba:1f:76:d0:73:71:38:f6:ab:aa:e9:
                    a8:c5:bb:2e:6c:22:7d:b6:2d:b7:4d:13:f7:41:96:
                    38:53:da:10:2e:47:da:33:de:b6:d0:1c:89:81:46:
                    2b:cf:cc:ab:88:ae:36:e1:c0:a2:08:1d:90:73:a4:
                    df:2f:67:61:e1:92:5e:c8:56:9f:e0:7a:a6:8f:65:
                    18:3f:74:f8:12:af:f0:c3:08:83:2b:f7:30:69:c6:
                    11:fb:1b:91:57:4e:7d:51:45:17:c2:0d:15:3a:21:
                    27:5a:3a:e7:74:0b:52:e4:3d:36:a6:e7:bb:43:10:
                    39:c2:45:bc:a7:da:4b:6b:cc:be:d9:de:ac:06:cf:
                    17:be:ee:43:84:cd:14:d0:a2:a2:49:42:43:b6:71:
                    29:07:cb:8c:9d:35:09:94:07:31:23:1f:71:cd:35:
                    07:9c:b4:f8:1c:22:24:98:9d:41:61:1c:96:80:4a:
                    7c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:09:15:CC:9D:E0:2D:4C:20:B6:B9:40:4F:24:0D:B8:76:D4:69:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/aa1bbf6d-5c62-369c-9c8d-dfcd0d5d4372.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:f2:88:e6:ab:81:e4:78:3b:37:ed:97:77:c2:f2:e0:a1:
         31:7a:f8:8f:93:9b:5b:6b:18:8b:24:a5:62:c7:d2:29:91:23:
         d3:31:e0:89:e9:d8:19:7d:a8:a5:41:cd:6b:91:d4:13:97:52:
         23:31:50:8f:49:ab:6f:3f:09:f5:81:fa:4b:a0:19:e1:c0:d9:
         70:ef:2e:6e:a0:cc:30:14:74:ee:de:98:b9:70:3e:11:1b:32:
         69:51:98:6c:1c:a8:f8:e1:f6:43:ef:d3:50:20:36:ee:cf:48:
         20:3e:3a:9e:1f:8a:8b:b5:cc:c5:9d:0c:a2:9a:3f:dd:db:2b:
         58:42:4c:9f:15:02:60:da:b8:a5:b5:c1:18:d4:fe:f9:57:94:
         f3:1f:32:4c:e8:16:1d:88:6e:0b:e0:e1:d6:3e:12:b7:0f:d5:
         1a:8c:96:70:8c:14:75:f9:16:f1:ba:72:8d:70:e8:fa:00:28:
         a5:a7:2a:58:9e:2d:87:e8:f1:8e:8b:5f:82:31:82:72:1c:27:
         e7:a4:40:c3:aa:3d:5b:c1:55:39:30:a7:69:d6:09:d2:c8:5a:
         b1:fa:a7:ff:a9:eb:da:57:28:33:49:84:67:e6:8a:c1:64:ee:
         25:0a:fd:3c:e0:b6:75:b7:8b:ff:5e:e9:67:1b:df:70:e2:02:
         57:2d:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 21:37:30 2025 by rpki-client