Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b39b356a-4be1-3139-a820-7c68c8f4365d.roa
File:                     b39b356a-4be1-3139-a820-7c68c8f4365d.roa (raw, json)
Hash identifier:          BaGwjaW+ELu+j8IXzaWUML9BHBapGnrbnTjs2QhCehU=
Subject key identifier:   D1:F5:47:58:33:57:1C:1C:A0:BE:78:FF:67:11:A6:7F:34:5E:C8:20
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BACE7ED6C684D4DBBCCC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b39b356a-4be1-3139-a820-7c68c8f4365d.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     19755
IP address blocks:        208.184.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ac:e7:ed:6c:68:4d:4d:bb:cc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=f8b64500-cc13-4e74-9093-218a6d900ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:17:de:e0:85:3b:a5:ae:bd:3a:0c:3a:db:
                    d7:9c:58:58:5a:93:78:dc:28:e6:60:ba:1e:d2:7e:
                    98:c4:44:31:78:cf:74:ec:3e:77:90:91:9d:d7:9e:
                    36:3d:f5:2f:cd:33:71:2b:d6:9c:d2:c9:40:d7:1d:
                    b3:b8:01:4e:02:db:4c:98:02:a6:5b:5b:c7:82:ce:
                    10:dd:d5:15:66:1e:9f:2a:56:bc:0b:52:f6:5f:d8:
                    7a:93:e5:64:21:e8:4f:18:e4:63:d6:7a:9e:1a:e7:
                    75:50:a7:11:25:7c:3a:79:cf:70:f8:16:ec:af:70:
                    0e:5a:4a:4b:92:51:f6:88:09:c9:0c:56:94:9d:19:
                    a8:b0:ab:93:31:76:58:f0:6c:35:d6:f8:ff:36:c4:
                    1f:00:64:dc:3f:3c:08:b6:92:45:7a:22:7b:35:90:
                    40:da:f5:8c:7f:05:f8:ad:c0:b8:bf:fa:df:b2:29:
                    e1:58:62:91:33:e9:ad:4a:b4:1d:b4:6c:93:d2:28:
                    02:aa:43:ee:63:60:e6:df:5d:d8:bb:9f:f8:27:a6:
                    84:61:12:78:69:e1:e9:a0:6e:af:62:17:21:99:5b:
                    eb:85:d1:1a:6e:b4:fb:6f:32:dc:a6:4a:d5:fd:9c:
                    5d:7a:40:57:49:6c:5a:bb:07:14:4c:9e:4a:13:17:
                    e4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F5:47:58:33:57:1C:1C:A0:BE:78:FF:67:11:A6:7F:34:5E:C8:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b39b356a-4be1-3139-a820-7c68c8f4365d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b2:31:ce:17:e2:23:26:ae:dd:a7:1d:ac:9a:56:59:7c:fc:
         44:cc:35:52:73:32:44:70:e0:61:d0:8b:23:2a:18:27:d1:a1:
         fb:f6:0a:65:63:65:7b:3b:8b:72:6d:80:a7:6e:48:2c:ff:70:
         7b:5c:72:99:2e:bd:f3:39:47:29:91:fc:f6:d9:ae:8d:e2:25:
         d0:d4:e4:dd:fb:5b:8a:9f:34:fc:a1:f8:ac:b2:fc:2f:67:da:
         53:65:d7:6d:16:0c:c3:8c:dd:a8:30:9d:37:b9:d2:6d:cc:6c:
         3a:d6:53:5c:ac:77:27:1d:71:6f:68:dd:33:2a:1d:af:8d:2c:
         48:bc:25:a1:2a:3e:ee:63:55:56:61:d6:0b:63:27:77:9b:71:
         61:6b:d3:b7:86:76:d7:44:90:b5:a2:00:db:09:64:fc:e4:9d:
         bb:24:e3:64:91:b3:96:c9:ab:f1:19:53:a5:10:31:0c:6b:95:
         7a:4b:5e:9a:6c:e9:72:da:e6:20:e7:a9:62:87:24:6e:c0:a4:
         cd:f2:1b:83:45:14:d3:81:70:ed:04:1b:04:b1:df:79:41:27:
         4c:6e:42:fb:83:a0:e6:8b:31:c0:b0:24:01:89:a1:d5:62:92:
         5b:f0:4e:16:fa:a4:13:01:37:20:ad:27:3b:c5:8a:2a:59:50:
         bd:38:39:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:51:11 2025 by rpki-client