Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ac38d742-4209-3193-81e4-9609c43d50b4.roa
File:                     ac38d742-4209-3193-81e4-9609c43d50b4.roa (raw, json)
Hash identifier:          yv67PITvr5DQt9eBzEa0BNJbDn0ieTZyl8l/3dOtDmo=
Subject key identifier:   D8:5A:58:5A:56:DA:14:75:1C:B1:2E:2E:83:46:58:F3:93:90:94:93
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B9CA2332BE54445C314B5B000
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ac38d742-4209-3193-81e4-9609c43d50b4.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     19955
IP address blocks:        216.119.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:33:2b:e5:44:45:c3:14:b5:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=22695f05-89c6-49fb-a265-7a06d186a207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fe:43:e6:e9:89:4f:f6:45:0b:1b:1c:91:04:
                    02:17:6b:e2:ba:23:61:60:41:48:89:dd:e2:9d:ce:
                    a0:42:a4:02:f5:58:3b:f4:48:c4:ba:47:62:23:03:
                    bb:79:bb:cc:41:d2:73:be:6d:21:d1:e2:1a:21:68:
                    16:97:78:42:3d:dd:a3:36:d4:2b:7e:a7:87:13:c3:
                    0a:4d:b4:de:a0:b3:85:0a:6b:68:f2:aa:e1:f4:b1:
                    dc:99:9f:e1:88:b7:f2:8a:6e:e5:46:f8:bb:46:d1:
                    da:ab:7f:e2:d0:6d:a3:6f:73:98:28:1a:92:5c:c6:
                    06:7e:67:5d:21:4a:17:fa:e6:46:b7:7b:df:78:df:
                    f8:dc:96:cd:a3:43:48:72:b7:cd:1f:ce:d5:1f:0d:
                    d5:53:0e:b1:dc:2d:27:a1:c7:8f:ed:7a:83:d2:83:
                    48:aa:a7:33:53:76:98:a7:18:08:0d:06:2f:9f:14:
                    1f:cf:07:66:62:78:fe:50:bd:6c:2f:15:4f:ae:b5:
                    ca:33:8b:e0:4c:4a:d5:2b:71:5f:33:de:65:f9:18:
                    7b:ce:45:5b:fe:77:a5:fb:b0:ed:0c:77:ca:2a:10:
                    5a:41:cb:7a:e8:04:39:50:1f:17:da:c5:2f:a2:fe:
                    57:a0:48:b6:d0:44:2b:d8:91:15:b2:e3:4e:3d:e0:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5A:58:5A:56:DA:14:75:1C:B1:2E:2E:83:46:58:F3:93:90:94:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ac38d742-4209-3193-81e4-9609c43d50b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:bd:d4:4b:91:a2:0d:db:d2:d3:d1:9a:03:f5:74:61:d2:
         e8:44:a6:65:78:0b:71:be:3e:ff:1d:05:d7:90:94:c6:24:91:
         af:aa:a8:de:a7:90:bc:d9:0e:3a:89:ff:a1:27:dd:7a:09:cf:
         9a:bf:14:70:28:e4:1e:08:a2:3a:1f:7c:27:1d:7d:f7:32:60:
         a4:fb:21:75:f6:f4:dd:79:8b:40:15:ca:73:83:c8:8e:ed:16:
         34:2b:da:1e:82:0f:0a:51:e7:f8:da:78:b7:49:8d:c8:77:0a:
         42:e1:a8:77:c7:91:9a:b8:75:49:d5:ec:b2:3e:15:ba:d2:2e:
         d6:ba:19:f5:d9:e0:88:bb:b3:15:3e:73:ba:e2:cb:dc:da:a1:
         60:bc:82:8e:c1:78:53:f2:d7:b2:4f:be:37:99:b6:72:64:58:
         2c:a5:a4:b2:ab:3e:17:5e:2c:aa:fe:cc:28:51:b2:c2:94:fb:
         8a:56:c2:ea:1f:0a:e0:22:2d:2a:65:31:08:43:61:4b:28:90:
         20:fe:c2:44:cf:5d:9a:19:25:87:a3:f9:54:9e:f6:be:fb:05:
         6d:cb:31:30:52:b8:7b:83:d3:9a:d0:98:36:cc:da:79:b3:a0:
         c4:0a:3e:7a:d9:bd:f5:0b:40:c3:07:84:cc:0b:a3:fb:cf:25:
         8b:b0:35:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:35:23 2025 by rpki-client