Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
File:                     c294e747-976c-3cd0-a78e-8cabab826be3.roa (raw, json)
Hash identifier:          AvpEkMrKTAQLTWthrv6FgYp1CgnutRKbg7+a/VBIsik=
Subject key identifier:   BF:6B:3F:E0:D4:C2:F3:37:96:F2:80:62:B4:7F:1F:72:C0:7E:E4:39
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B99D7ABFA4A7FB104440A6580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     22311
IP address blocks:        208.185.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ab:fa:4a:7f:b1:04:44:0a:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=30ec1964-ac6e-4c31-81a7-184c6b390fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:47:d8:44:24:07:3f:a6:af:ff:ed:1d:d9:6a:
                    20:7d:ee:6b:cc:70:58:3e:ee:9a:71:04:39:c3:11:
                    50:b7:68:3c:26:ac:bb:b6:97:50:5a:fc:b6:f3:0b:
                    7e:9d:67:09:d3:fa:6d:6d:2f:9f:56:94:95:43:27:
                    68:b5:3c:77:b9:ec:97:dc:ea:4a:51:e4:38:2b:59:
                    5b:f0:5c:4d:cd:a7:39:42:85:81:d5:1b:3d:12:b0:
                    c7:c2:dc:98:fc:f2:5e:52:3c:a9:25:91:f6:6f:86:
                    c9:78:ef:a5:d9:ba:72:6c:b8:71:7c:08:28:72:eb:
                    3c:22:c5:ba:d5:18:cd:30:1f:7d:39:f0:6f:36:5e:
                    a6:62:ae:37:b3:f4:76:ab:de:54:b9:1d:3f:ea:ce:
                    f4:41:47:c7:01:65:e6:a8:07:9c:5b:5b:39:26:2f:
                    9c:a0:6c:bf:68:5c:d0:ba:aa:53:bc:24:84:66:30:
                    3c:d2:6f:59:3d:dc:68:a7:77:6f:65:38:fb:3c:f3:
                    ac:aa:f7:3c:6e:87:e1:55:57:6c:79:07:c7:12:26:
                    20:c5:43:b2:49:21:24:90:b5:3c:5a:76:04:ce:59:
                    0d:a4:37:d3:be:19:cf:18:a2:4a:65:b6:32:61:eb:
                    d5:5b:2a:03:f7:3a:6d:4b:f0:e3:fd:76:c8:5d:70:
                    9c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:3F:E0:D4:C2:F3:37:96:F2:80:62:B4:7F:1F:72:C0:7E:E4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c294e747-976c-3cd0-a78e-8cabab826be3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.185.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:98:4e:4d:8f:ca:6e:cd:09:66:d4:75:f8:d8:61:f2:dc:
         f9:3e:ff:15:94:d6:f1:96:84:a8:5d:75:e0:02:ca:99:eb:8a:
         c9:e1:cf:8a:05:ac:7f:ea:1d:9b:0b:5c:ee:44:46:52:b3:5f:
         dd:2b:f4:7d:97:d7:e6:f9:60:ab:25:9c:62:61:fc:99:97:46:
         da:d4:df:36:16:08:6e:a5:5a:62:11:32:8d:2d:b1:dd:6f:4c:
         0f:4d:ef:a3:5d:3f:4b:ee:72:cb:24:1a:b5:b7:b7:1d:c2:5a:
         34:06:db:3b:70:c7:eb:fb:f7:99:a1:9c:ce:f9:8d:49:b9:af:
         41:cb:4a:a7:c7:e6:6a:b8:72:c8:60:91:17:93:36:3f:94:19:
         ff:c9:22:b4:48:ae:ea:26:56:96:87:91:9f:db:1f:22:12:da:
         01:0b:c2:84:92:07:e3:1a:5a:6d:74:1d:28:60:52:48:f1:2b:
         4a:00:2a:56:00:2a:e9:0b:87:a7:d8:4f:68:8b:0f:ed:36:64:
         01:bf:83:54:c7:7c:87:b0:f8:38:36:f4:cb:f6:00:48:66:c7:
         a7:4d:b6:bc:af:bf:23:c7:ab:1b:29:e4:c0:3b:25:38:3e:39:
         cb:30:43:ac:79:f7:95:80:9a:7c:49:33:76:e2:a9:ba:83:2c:
         fe:9a:cb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:39:20 2025 by rpki-client