Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa
File:                     ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa (raw, json)
Hash identifier:          aDu0jjxXWEAwq2ECM0GbDTzI8nZ3qVJglgTPpWN7ljY=
Subject key identifier:   FE:96:22:BC:9A:67:AB:0E:4A:7C:74:2B:67:96:18:C9:6E:DD:EC:7D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BAF811941A7EA73E3DE00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     17025
IP address blocks:        208.185.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:af:81:19:41:a7:ea:73:e3:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=5f46b723-3cff-49a8-89ab-fbcb565c93c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bb:dd:31:b5:a2:18:a5:ad:a0:fd:e1:7f:f5:
                    1b:e6:94:48:4f:4b:68:65:ad:b2:84:8d:b8:fd:a1:
                    fc:1b:1e:3e:a1:72:2d:70:ee:fb:6c:85:06:8b:b4:
                    8d:29:ce:c9:e6:56:b7:10:82:06:b5:ab:6d:bb:96:
                    93:09:33:df:cc:b1:ee:5e:e6:9e:ea:f6:6b:c7:28:
                    64:a6:94:c2:e0:71:e8:4c:1f:5b:9b:fa:ff:ec:e1:
                    13:a0:f1:30:53:73:49:0c:2e:8c:d0:41:b2:7b:34:
                    c8:f5:86:77:8c:eb:31:fc:8a:12:95:d9:af:1f:93:
                    08:8c:0e:49:3b:40:08:a4:24:4e:f9:79:73:5b:b5:
                    ae:51:1b:dc:5c:d8:dc:c6:c7:4d:0a:c7:1b:53:c8:
                    bf:21:00:b1:48:4e:51:0f:95:dd:b4:5f:2f:64:4b:
                    08:d2:46:77:ce:80:e2:56:56:34:7c:9a:7b:82:78:
                    cc:e4:59:43:03:e8:23:35:8a:f5:a4:4a:45:c9:e0:
                    21:f1:b9:4f:23:0a:a0:8c:39:8f:d7:87:de:5a:01:
                    e9:05:67:0e:f4:e9:1d:ca:e8:27:91:31:90:5e:d6:
                    05:b7:81:16:a8:e5:95:c9:f9:14:98:30:d8:f1:ef:
                    b3:d5:ce:44:ca:94:d4:63:01:5b:17:86:72:e7:66:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:96:22:BC:9A:67:AB:0E:4A:7C:74:2B:67:96:18:C9:6E:DD:EC:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ad15cf77-4989-309f-b5c9-1d8aba9dd07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:c2:78:59:6f:cd:7d:f3:91:74:95:fe:95:6f:c7:f1:b1:df:
         b7:ca:7f:3a:96:9f:c4:14:61:b1:4c:91:88:06:b3:65:1f:98:
         cb:a1:76:ba:1e:05:3a:0e:75:99:e9:1f:8b:ca:83:05:dd:2f:
         13:24:63:2a:0a:f1:62:62:c2:a0:ab:d7:82:b6:66:f3:76:8b:
         86:02:75:f9:03:a7:88:36:07:25:9c:9c:0e:06:cd:1f:11:3a:
         22:63:ff:ef:08:76:86:b2:2f:05:c7:df:28:0c:6c:cd:b2:2d:
         d6:84:8a:1b:20:2a:14:fe:c6:95:bd:b3:e6:a4:26:aa:fb:bf:
         e4:2d:3c:7e:52:a1:64:54:1e:2c:42:48:bb:8b:5a:f1:a6:ae:
         2c:25:f3:f1:9a:b1:8b:08:56:34:b5:8a:9e:b8:e9:5c:14:f4:
         cc:e3:2b:39:a8:09:b0:66:76:5e:ab:b6:7a:e4:88:07:0e:95:
         a6:d5:a6:99:db:98:e7:ca:7d:b8:ff:33:0f:98:5a:ac:48:9c:
         86:15:25:bc:0f:3a:e2:8c:14:6b:dc:2c:89:6d:6d:17:d5:21:
         f3:52:f9:56:0f:e9:7d:8d:ec:8d:b8:85:ea:83:8c:16:3a:3a:
         26:46:da:2d:08:d2:d4:ba:e6:46:c2:9e:fd:b8:40:74:fb:19:
         cf:ee:d8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:40:07 2025 by rpki-client