Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
File:                     c294e747-976c-3cd0-a78e-8cabab826be3.roa (raw, json)
Hash identifier:          NUkNQGUWgKWs/lhy0Cb208e0Hi87BpYtyxBtf21jJ2U=
Subject key identifier:   BF:0C:0A:84:1B:97:6B:01:8A:56:A0:CD:00:31:4F:4C:D5:70:0B:44
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB91BB0B24B61C9BE9D89F7C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     22311
IP address blocks:        208.185.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:b0:b2:4b:61:c9:be:9d:89:f7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=b3ec354d-dcff-47b1-a94c-eab5f10c2add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ed:c1:4a:de:a3:ba:04:d0:29:ba:27:56:a2:
                    6c:7e:61:d7:06:06:40:77:9f:1c:7f:d9:20:8f:c5:
                    87:e5:dc:d9:b6:b1:90:f3:a0:30:04:d3:63:62:2d:
                    9f:b6:6d:62:8e:94:cb:a3:e6:34:5d:04:6a:79:29:
                    c7:5a:9b:28:ec:4e:5d:c8:26:3b:c0:62:d9:0d:71:
                    86:8a:4a:18:61:2f:78:c1:58:b8:1e:74:93:79:2e:
                    fd:65:8b:95:c3:84:23:b9:c5:cd:ff:c1:2d:f1:c7:
                    bd:28:d4:d1:2b:a8:a9:cd:a8:9b:1e:e9:4f:8a:51:
                    77:ef:2b:9b:b6:df:76:15:0c:83:9b:85:89:29:64:
                    fe:d6:06:f2:ab:8b:70:08:a3:04:e2:40:be:99:b8:
                    09:92:c5:18:72:76:9c:c6:52:0b:c7:2d:2a:c7:a3:
                    b8:43:1d:3e:1f:68:0f:d0:fe:9e:02:06:c4:3c:77:
                    8f:63:02:a1:3d:0b:de:bd:24:35:41:53:ba:c8:84:
                    a9:47:e1:b1:9a:12:4e:87:b7:ef:44:41:cb:48:42:
                    d9:e6:09:a2:95:49:e6:1e:69:31:d6:c9:59:9b:da:
                    01:77:81:d0:95:df:f2:ae:1f:32:cd:8a:8d:26:ea:
                    f6:4b:77:b5:47:01:57:76:69:1b:02:bd:5e:8d:de:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0C:0A:84:1B:97:6B:01:8A:56:A0:CD:00:31:4F:4C:D5:70:0B:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:1c:a6:85:a1:1b:6e:c3:5f:44:fa:27:1a:03:b2:2e:a2:30:
         8f:8d:63:83:be:b8:b9:60:5c:54:30:c6:c2:6a:72:55:f8:3a:
         61:fc:ed:a2:48:de:82:46:7e:de:ca:b3:e8:c8:8d:b1:b3:ed:
         65:f3:75:d6:de:ae:d5:21:aa:9c:b5:1c:73:e5:a2:6d:76:d9:
         c0:a4:f9:52:d2:b7:ec:e7:1a:53:83:59:c9:d2:4a:29:5f:4a:
         0e:c3:37:10:b6:6b:d7:0f:60:b2:56:a0:e0:5e:52:57:50:ed:
         a0:d8:8e:e9:b0:80:dd:f0:c1:21:03:36:a1:3b:4b:63:a0:ee:
         72:73:a2:b4:bc:c0:40:7b:c9:e6:62:b1:47:0f:19:94:10:44:
         5a:a6:db:c2:e7:1e:5c:5f:96:b8:2f:62:35:e3:78:3b:ad:49:
         ad:2b:be:10:eb:81:7f:ef:ab:56:d9:52:1e:80:7f:99:c7:bb:
         9b:64:d5:59:7a:bf:0f:8c:50:74:d8:71:45:c9:12:74:2e:c2:
         b4:c4:f0:a7:c4:b4:32:b1:f0:6c:04:1e:bc:48:1c:36:00:21:
         6e:7b:a2:74:c2:b1:c2:27:bd:3c:38:1f:fe:14:01:2a:5b:8e:
         b4:7a:db:c3:1f:c1:fb:ab:df:b2:27:7f:3b:08:48:5b:a7:78:
         a9:ba:23:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:13 2025 by rpki-client