Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa
File:                     d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa (raw, json)
Hash identifier:          vUbBcojyA7qlgHnUW5GUlt4HLgCzOCdRUVLZqkaGBdE=
Subject key identifier:   F8:39:52:CD:32:71:23:6E:19:A9:6F:FD:47:2D:39:19:8D:9D:BC:5E
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584BBA10421151676C9B53A75980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     11359
IP address blocks:        216.222.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:42:11:51:67:6c:9b:53:a7:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=7337e6b2-3a0b-4520-8c09-8b396743c840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:39:c7:ee:28:d3:b0:4e:29:b0:29:17:36:65:
                    db:42:de:80:22:26:da:fc:5d:b8:7d:a1:2a:76:e2:
                    0e:4c:25:20:45:da:c7:1a:c4:7b:c6:b7:8d:8b:8a:
                    54:9c:f6:07:49:d3:7e:fa:21:04:d8:73:07:9d:fa:
                    3b:64:6b:72:c8:5b:41:03:9d:8d:84:bc:57:d6:25:
                    da:3e:54:5a:12:64:60:4b:d2:03:6b:3d:05:37:a9:
                    91:f7:71:ed:9b:99:b8:c5:60:06:17:71:a6:81:78:
                    ba:c5:12:66:16:4e:d0:42:6d:6b:0d:27:df:d3:8d:
                    d5:33:85:d6:1d:4e:26:35:33:43:3d:e8:8e:75:12:
                    c4:53:62:e3:69:fc:94:08:08:bf:67:3b:f9:60:0a:
                    ea:90:13:9c:38:fd:0f:2f:e9:47:c6:61:16:9c:b0:
                    c5:35:34:07:ce:76:05:fe:f3:b3:8d:40:4a:a6:e8:
                    1e:2f:16:9a:5a:10:ba:6e:b2:6c:42:ae:9b:9a:d3:
                    96:2a:6d:f3:ce:40:30:b6:ef:ae:7b:08:59:fe:c8:
                    70:48:b2:f2:6a:d1:e3:b1:0b:c1:41:af:50:63:4f:
                    a5:da:53:73:38:f8:8c:64:15:8d:ec:b0:18:10:50:
                    b9:1c:e2:28:91:c0:f1:67:dd:9e:e3:14:94:9d:47:
                    33:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:52:CD:32:71:23:6E:19:A9:6F:FD:47:2D:39:19:8D:9D:BC:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d920f883-a40d-3c1b-87c7-2a51d6408eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:1c:5b:ae:0f:c7:5a:c6:af:9e:d9:a4:6b:c2:21:15:ef:5d:
         65:50:90:e8:a9:84:c6:98:ae:99:6c:37:16:8f:93:ef:1f:65:
         68:e1:a5:2b:44:bf:4e:10:0c:7e:d5:69:1b:ee:2a:14:43:6b:
         f6:3f:59:0d:5a:16:55:f4:4d:62:18:bd:06:4b:c4:e8:1f:97:
         c2:87:06:a4:f3:5f:67:69:f0:27:2e:89:be:61:48:d3:a4:d8:
         ef:48:5e:d0:f6:cd:0a:34:a0:3b:95:5b:07:e1:45:0b:57:4f:
         77:28:41:d5:71:ec:6c:a2:0e:80:43:6e:9f:1f:82:bb:bc:b8:
         64:40:f4:66:65:0f:bc:47:64:67:8f:96:e8:89:9c:68:6b:9e:
         11:46:56:da:2e:c4:f9:7b:e1:4d:71:ff:0d:eb:3f:47:b4:c1:
         23:df:0e:71:05:73:48:a3:a2:36:f8:b8:68:34:6f:a5:b5:3b:
         91:b0:7b:04:dd:4b:18:55:7e:32:ea:12:d2:06:a6:4e:14:60:
         7e:fa:2b:21:02:61:90:c8:8f:44:98:12:75:ca:b5:2a:39:fa:
         56:50:7b:fb:ff:03:db:2a:86:24:bf:6c:6f:0d:30:da:fb:65:
         ef:cb:6d:26:e5:f5:87:6c:26:6f:0c:32:a9:85:6f:df:04:a8:
         ac:21:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:37 2025 by rpki-client