Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cad8283c-45d2-31d0-afbb-33f9a1ad212d.roa
File:                     cad8283c-45d2-31d0-afbb-33f9a1ad212d.roa (raw, json)
Hash identifier:          Usnvn1VpbTzjUfoBhmSdLkTYsG8K9KdigEOdg2YT/JQ=
Subject key identifier:   40:2F:F7:9E:7D:B9:EE:29:06:6C:D9:36:3B:88:C1:FB:CC:B6:43:2C
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA103CE5803AFAFD5504FD00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cad8283c-45d2-31d0-afbb-33f9a1ad212d.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     3131
IP address blocks:        64.184.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:3c:e5:80:3a:fa:fd:55:04:fd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=3a7e503d-dfc9-4ff1-9f4f-e608c0d47f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9d:54:fd:b9:5e:37:72:22:45:0b:fb:3e:44:
                    be:f4:d7:1b:0c:5b:76:0f:46:49:12:ce:91:0d:b5:
                    93:33:d3:70:6c:fa:58:72:19:e0:11:db:ea:db:8c:
                    0e:5e:51:69:ba:2a:d4:b9:d6:72:68:42:67:bb:ff:
                    d5:5b:f1:eb:74:8a:41:9b:ad:f4:5c:6c:9f:20:aa:
                    d6:ab:8f:4b:17:d7:d5:3c:03:0d:a6:11:2a:c4:ca:
                    29:18:d4:fc:02:ee:c1:a2:3a:08:22:38:6a:ce:d9:
                    63:d4:00:69:ee:0a:44:66:36:bb:de:18:8e:b8:f2:
                    28:59:c6:c4:87:ce:84:43:9a:de:d2:3c:af:5c:4a:
                    43:b6:dc:bb:2a:25:9f:20:18:cf:79:de:3b:2d:b8:
                    5c:e1:ea:05:ea:49:e0:fb:93:80:92:9e:bc:6f:68:
                    13:7d:47:38:4d:2c:d5:2c:ae:d8:58:21:4a:5b:82:
                    47:af:d9:9a:0b:82:bb:c0:91:59:91:64:6d:b0:32:
                    a8:f5:d9:cb:c2:46:b5:cf:55:f8:c8:8c:d0:96:21:
                    3f:28:19:e1:f2:8a:ce:54:d6:c7:df:04:a0:9d:13:
                    f9:4e:c3:b6:96:eb:2b:44:53:a8:94:80:ba:6a:da:
                    1c:dc:92:40:06:30:48:0b:0d:9e:e2:f1:1d:3e:5f:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2F:F7:9E:7D:B9:EE:29:06:6C:D9:36:3B:88:C1:FB:CC:B6:43:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cad8283c-45d2-31d0-afbb-33f9a1ad212d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:03:de:15:5d:8e:32:30:b4:81:59:98:87:8e:bb:f5:30:27:
         77:1a:5e:27:8f:d2:68:d3:ce:1e:bf:4d:14:5d:66:a8:df:56:
         a8:9c:87:08:60:3b:7b:e9:68:ca:82:59:73:1e:dd:d0:48:1a:
         11:5d:44:35:ab:e9:44:66:f0:d5:3e:bb:d3:ae:7b:c8:51:6a:
         6d:bb:1f:da:7e:29:e6:16:76:84:fd:00:3c:95:85:f9:ad:b6:
         c3:41:22:af:f8:6d:42:80:28:ec:74:a8:2e:d0:dc:de:f0:81:
         79:b2:b9:c8:74:32:6a:92:14:c9:2a:c5:92:3b:44:13:3a:50:
         6f:2a:17:c6:d3:0a:17:46:b7:ff:da:aa:f5:2f:76:60:10:bb:
         25:76:ab:d2:09:48:93:7c:61:48:59:d8:79:4d:3c:f8:2a:ff:
         06:c7:fd:ef:a5:8c:8b:54:ed:3f:a7:92:c2:e6:14:95:30:0f:
         8d:8d:b9:dc:d1:08:e8:05:fa:25:0e:54:c1:82:9c:7f:04:6b:
         64:67:b4:36:27:15:93:a8:0a:e2:8b:f5:34:b2:09:3d:27:c0:
         5f:f8:31:e5:c5:83:1f:cc:a0:f4:e6:fc:e8:6b:d0:82:fe:db:
         c6:a9:d2:35:15:87:ce:cf:1f:cc:ab:49:34:ee:aa:ad:11:8f:
         f0:87:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:54:26 2025 by rpki-client