Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa
File:                     c54991e2-fbb5-3e7c-b37c-2df342d10447.roa (raw, json)
Hash identifier:          ZHKhqe9n3eZbEKLOc09MQDWebWcFzqgZMT3GAgQ0B5E=
Subject key identifier:   11:11:29:DA:F8:34:C3:26:19:57:62:8D:AD:DE:01:AD:37:FE:83:27
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AB650EE366902505D93308380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     53335
IP address blocks:        216.200.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:ee:36:69:02:50:5d:93:30:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=d3356ea5-72e8-4490-a317-400fffb2d88b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:4d:08:f5:89:e0:c3:53:45:f2:39:89:64:
                    36:84:ea:cb:c2:d6:93:cf:ba:40:d5:64:1a:08:4e:
                    a2:8d:74:70:41:5c:7a:66:5d:f2:ca:14:df:66:73:
                    0e:dd:f4:37:5b:24:89:9a:ee:d1:fa:ee:03:32:7f:
                    0f:c9:75:1a:b5:96:e9:fa:89:d4:32:a6:fa:e0:4a:
                    b7:bd:b9:65:38:ea:72:92:3d:31:97:a3:c0:c2:fe:
                    fe:40:49:85:7a:84:f8:5f:cc:32:11:9c:7e:f4:35:
                    9f:b4:86:af:fb:55:87:11:28:35:6a:e8:9c:3d:2e:
                    79:bb:e4:8d:8d:24:75:3c:1c:fe:94:e8:92:5e:d3:
                    d4:6c:bc:c8:cd:ce:70:18:0b:28:3e:2e:4f:29:ae:
                    14:af:7f:73:36:1c:8c:94:69:67:44:b5:e1:53:1f:
                    ac:33:5c:2e:ed:0b:07:4b:0e:8e:48:6e:a4:ed:6b:
                    59:46:1f:be:72:f0:5b:2f:99:bf:40:aa:db:92:f7:
                    9c:ab:70:e5:49:a4:0d:a0:ef:bd:d2:5d:a0:d8:b3:
                    61:32:ff:d6:0e:c2:bf:ad:a3:35:e0:74:0c:6e:47:
                    e9:67:74:b5:a0:1c:e3:2b:8f:fa:9e:7f:71:f3:18:
                    6f:99:d7:ea:95:e8:a8:c9:5a:c5:3e:58:60:b5:db:
                    08:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:11:29:DA:F8:34:C3:26:19:57:62:8D:AD:DE:01:AD:37:FE:83:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c54991e2-fbb5-3e7c-b37c-2df342d10447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.200.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8d:b8:4d:99:f3:48:8e:43:d6:7f:e2:b1:50:30:4e:d4:8a:
         e0:4e:79:84:a4:91:6a:23:0e:4a:39:7d:c4:ae:8a:99:e0:48:
         66:8e:c8:75:9c:76:7d:69:4a:87:7c:f8:d4:90:e9:bb:7a:bb:
         c7:db:18:fb:b7:a7:3e:da:5a:9d:af:21:83:12:cc:fd:5d:99:
         32:0c:02:2b:de:83:ea:dd:a4:b8:7b:78:04:c6:5b:03:2c:5a:
         e2:2c:a3:d5:dd:9d:3d:e8:f4:c2:11:39:e8:7b:95:13:19:65:
         23:77:5b:9e:c8:05:76:cb:5c:74:4c:04:ae:73:25:13:a3:08:
         e1:67:d0:28:bb:69:fd:0c:8f:9c:79:3c:63:54:14:1e:f7:a8:
         96:b0:66:67:f0:a8:e6:14:b5:1a:56:b4:8b:88:19:2d:ce:ba:
         c6:ad:70:9a:8b:c7:4d:43:86:b9:d7:a5:20:99:f2:68:5d:29:
         9f:af:57:91:a6:53:ec:e0:d2:0f:19:03:1e:5e:f3:04:e2:09:
         bd:34:c9:09:8c:33:11:20:2f:d5:60:7e:e9:bf:66:55:a5:1b:
         be:8f:1f:32:d5:ae:ca:d2:48:5b:16:aa:2e:10:1b:22:88:f8:
         ba:be:f3:1a:7d:d3:85:aa:d0:dc:9e:4e:41:30:95:31:bf:17:
         e7:92:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:39:57 2025 by rpki-client