Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9cb698f-b110-3a99-a291-0129d8e1b7b8.roa
File:                     c9cb698f-b110-3a99-a291-0129d8e1b7b8.roa (raw, json)
Hash identifier:          inYby/Fv/nLGgrNc6vVY3SZsaW1UyGVguTj4q5xVOzA=
Subject key identifier:   B7:78:FC:2F:B9:91:F9:DE:20:10:AC:0B:14:27:E8:4B:95:70:1E:37
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B9CA23421FB0DBE6697286BCE
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9cb698f-b110-3a99-a291-0129d8e1b7b8.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     19955
IP address blocks:        216.119.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:34:21:fb:0d:be:66:97:28:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=86f1adcd-1cd5-4c4e-bf66-77e81f9c8c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6f:13:51:77:90:91:42:d2:fd:cd:37:5f:77:
                    3e:81:6d:47:45:b3:42:40:04:fb:c3:3d:a6:0d:c8:
                    d6:68:6c:2d:d8:b8:80:38:b2:c9:40:56:44:2a:92:
                    f3:a6:b7:16:34:3a:b0:81:41:9d:2e:1d:86:da:70:
                    a8:28:8f:ad:c1:a0:92:ed:f7:1a:dd:6e:f0:84:ee:
                    78:f1:80:51:6c:cb:01:34:59:b4:cd:80:aa:27:d5:
                    42:90:e6:6c:99:83:19:3c:d8:b8:49:46:2f:64:7f:
                    48:0e:d5:37:16:2a:0a:ca:6d:69:88:2e:1a:06:b1:
                    0e:f2:1f:e9:99:ba:64:98:7d:8b:25:ef:6c:92:5b:
                    33:0d:36:51:5e:f7:87:45:fa:33:d5:62:0b:8d:3a:
                    1b:93:4a:18:02:69:be:c0:75:f0:1f:6a:9d:ca:4e:
                    32:b5:94:57:72:a5:76:9b:57:2b:97:77:64:4a:9f:
                    f7:b9:d8:ba:38:0e:bc:4f:d6:2e:7a:a0:5d:a2:16:
                    f0:cb:12:81:c1:ab:57:13:b6:f7:a1:0e:a6:53:8a:
                    0d:fb:11:8c:da:1f:3f:85:e2:b7:ce:40:8a:ff:16:
                    ea:07:28:a2:ea:d6:05:56:d5:e8:d2:02:23:76:de:
                    b6:47:c4:20:a0:1f:eb:aa:ae:eb:3e:c2:e2:03:f2:
                    62:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:78:FC:2F:B9:91:F9:DE:20:10:AC:0B:14:27:E8:4B:95:70:1E:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9cb698f-b110-3a99-a291-0129d8e1b7b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:e9:ce:35:68:89:2b:c2:c7:cb:4f:6e:2f:ec:eb:8f:18:85:
         51:d4:ff:87:ac:69:51:c4:09:f6:77:62:7d:2c:75:9b:a2:05:
         d5:a5:2c:ab:7a:e6:87:bd:98:84:85:04:5f:10:61:7d:9d:4a:
         87:eb:1e:bb:63:a3:21:08:a6:56:e2:6b:6b:ff:df:4f:a2:51:
         d2:4a:62:e1:4d:f4:3c:ad:8b:05:27:6e:0d:40:5e:e0:c6:bd:
         55:0b:9d:80:02:69:06:c4:91:44:dc:54:b3:2d:89:db:8f:b7:
         40:fe:58:d3:cf:cb:72:c6:f0:a9:6a:d8:a4:7d:23:bf:6a:6c:
         4c:eb:b7:62:7a:4e:13:4f:6c:23:61:c0:76:6d:7c:9b:1c:1c:
         d7:0d:6d:b6:fb:8b:53:c0:52:2c:15:81:2c:fb:65:fb:78:ab:
         62:a7:d0:38:76:d8:a3:62:56:c9:fd:a8:be:ef:bf:55:cf:f4:
         02:7e:2e:41:83:59:2f:ca:c3:4a:8a:d1:af:c0:01:39:75:d1:
         b6:d3:a3:ac:b9:93:3e:9e:39:62:78:c3:b1:c0:d7:59:c9:41:
         d3:ad:0c:84:0f:45:de:42:47:58:c0:60:a3:4b:15:2f:eb:e3:
         a5:fc:0f:67:1c:37:63:84:5a:9a:da:ce:4a:2a:41:0b:26:1d:
         1d:9f:4a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:09:40 2025 by rpki-client