Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
File:                     af19f07a-7d1c-34b4-afbe-2f477f28969f.roa (raw, json)
Hash identifier:          +AGPLB9wYlPp+9aUJ+u5R0lLwowu64+PdfNmRFfVVLI=
Subject key identifier:   21:F4:57:1B:6D:B4:61:96:5A:1C:F4:DA:10:19:AB:D9:C5:CB:F3:E2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BAC3D2FA73C7B5D8D4280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     399033
IP address blocks:        2001:438:4a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ac:3d:2f:a7:3c:7b:5d:8d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=aebd08a0-3d83-403a-b600-1e5606b35c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c1:7c:5d:3b:ea:5c:e0:60:f7:f3:29:36:57:
                    fb:26:c9:9a:35:d7:d9:a2:5c:61:6b:e8:8b:58:95:
                    1f:60:29:17:88:4a:48:70:64:db:ea:3f:f0:3b:a9:
                    5c:c0:c4:20:fa:7e:03:41:95:f8:41:54:a5:83:2a:
                    60:44:c3:a3:6a:11:44:22:be:89:d5:b1:1a:c1:e0:
                    22:50:a2:e2:17:4e:fb:7c:07:bc:eb:29:88:04:e1:
                    8b:e7:69:3b:a7:f1:fd:7a:f6:1d:8d:6b:8b:37:b5:
                    2b:74:db:a2:76:59:6e:99:76:08:a9:04:1c:60:15:
                    df:14:62:6f:4b:a4:44:59:26:02:36:d1:0d:ec:a6:
                    ce:5b:f2:13:67:d6:d8:4c:93:30:eb:2d:94:de:68:
                    ba:5f:be:f3:48:38:4a:83:34:6d:e6:f7:8a:21:5d:
                    a0:09:cf:af:d8:a4:e3:5e:86:28:b0:ce:0d:7b:be:
                    53:27:03:20:2b:8c:67:13:30:e2:6e:f8:8a:11:83:
                    c7:6c:3a:94:e5:ab:b3:22:72:b2:33:c5:8f:c1:ce:
                    9b:d8:1c:9f:d2:26:f9:dc:81:44:e7:7d:61:d9:44:
                    84:b5:2d:4e:6c:39:63:fb:d4:2c:d2:a4:3b:5d:5a:
                    f0:4d:aa:06:fe:59:19:55:ea:cb:b0:99:43:fc:8c:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F4:57:1B:6D:B4:61:96:5A:1C:F4:DA:10:19:AB:D9:C5:CB:F3:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/af19f07a-7d1c-34b4-afbe-2f477f28969f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:4a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:1e:6e:fd:3c:1f:5c:94:6b:4d:13:3e:ea:bc:20:3a:50:
         e1:c5:f4:6d:d6:b6:e1:cd:8a:0e:93:c0:6c:59:55:8c:c7:87:
         0e:89:e6:b8:33:a3:ba:31:74:f9:1e:9f:74:67:91:51:6b:16:
         52:93:8c:0f:01:c6:75:af:41:26:e2:21:d1:6d:47:a1:39:52:
         b6:f2:f5:42:d0:7a:dc:ef:49:05:ad:9f:c5:41:47:3b:5c:ba:
         dc:d0:f6:ce:11:58:0e:be:91:c4:22:4d:5f:ab:9a:2d:22:a8:
         56:34:07:ac:56:68:30:26:73:22:94:51:ed:e8:71:05:57:fa:
         c0:a8:a6:83:ef:9b:ab:cb:a3:ae:be:17:8c:c8:94:4b:36:7d:
         cb:4c:74:1d:d5:70:a0:08:d1:f1:d5:68:1b:30:45:ac:d6:ce:
         a3:d7:0c:ae:39:5e:df:8c:db:9a:c3:d9:07:e7:5e:f1:c6:07:
         0b:0f:c6:7a:6c:18:47:06:a7:19:d4:ac:df:f4:ec:99:4a:ff:
         58:39:2b:34:93:f2:e0:02:ca:dc:f1:01:f2:58:82:49:75:99:
         49:4c:51:5a:26:bf:6b:79:fc:5f:9b:32:cf:6a:69:eb:c6:b5:
         45:de:96:5f:d7:f3:7b:53:99:18:43:87:d1:70:cc:8d:25:4a:
         17:97:f1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:47:29 2025 by rpki-client