Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11c6886a-ec08-3f42-a30b-5bdec3ede589.roa
File:                     11c6886a-ec08-3f42-a30b-5bdec3ede589.roa (raw, json)
Hash identifier:          ggPPnI0HBnXNnirqmM5ROb1VjeC+tPTy9a1w+JzaoSU=
Subject key identifier:   32:0E:BC:E1:C9:1D:EF:CF:C9:E0:2E:82:6D:CD:55:1C:0C:B2:88:06
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD936594D26CB9DBB2D471560
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11c6886a-ec08-3f42-a30b-5bdec3ede589.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     53989
IP address blocks:        69.160.222.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:59:4d:26:cb:9d:bb:2d:47:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=8a798e18-b04d-4403-9640-3e638d08e52a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:74:34:51:a4:ed:0e:86:2e:bb:43:9f:b1:87:
                    d6:f4:ae:95:6e:c9:c6:62:09:ed:29:e6:80:36:e5:
                    fc:41:08:b8:2a:39:18:49:35:e2:d2:35:ec:43:05:
                    a2:3a:72:de:1f:6b:a8:2f:43:b4:4b:6a:cf:0d:86:
                    10:8a:3c:ae:8c:2d:5d:e4:b8:6b:2a:68:0e:c0:8c:
                    58:52:c8:66:94:52:04:cf:a9:43:59:60:f1:e6:4a:
                    a7:d9:32:4d:87:20:f7:b7:19:3d:e1:85:0c:24:7d:
                    ec:d0:4d:2f:bd:6e:78:83:cc:f3:e0:3a:95:c3:00:
                    27:e3:81:72:ee:cb:c2:2b:6c:7b:82:e7:52:6a:a7:
                    45:d3:4e:33:77:84:9b:66:79:f5:0d:a5:a2:99:3a:
                    5d:e3:32:92:99:a7:c6:61:8d:e4:af:c2:d9:a5:ca:
                    26:9d:53:d7:9a:c5:dd:c0:a8:35:e1:ab:1c:ec:d1:
                    fd:38:00:19:11:e4:9b:a9:22:ce:2c:81:8c:4b:9c:
                    fe:ac:fc:41:d3:1f:32:11:71:d7:64:f0:c0:c4:79:
                    0f:e6:93:5f:89:ad:f1:a9:03:19:1d:c3:0c:46:fd:
                    69:63:86:88:51:df:a1:e1:bc:fa:41:46:40:4e:ea:
                    53:01:a3:03:89:c9:ca:55:4b:40:e4:46:54:d4:c2:
                    51:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0E:BC:E1:C9:1D:EF:CF:C9:E0:2E:82:6D:CD:55:1C:0C:B2:88:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/11c6886a-ec08-3f42-a30b-5bdec3ede589.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.160.222.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6f:1b:3c:ae:db:68:7b:04:2c:42:c8:47:cf:c3:3f:3b:c8:
         66:1b:4c:35:c8:93:88:6d:02:52:59:b9:fa:20:b7:af:0b:e9:
         d3:42:74:42:43:d4:41:27:05:48:1f:03:60:de:84:9b:1f:59:
         55:4f:fa:95:dd:da:6a:66:c4:a7:50:d4:80:ed:98:19:ad:53:
         e3:5c:e8:e4:c3:1e:3c:05:66:74:3b:12:2b:90:e6:60:fb:45:
         73:8c:10:ed:40:d8:4a:87:3f:ba:21:2d:b9:e0:af:b5:a7:b1:
         e4:1b:f8:d2:c0:e6:1c:c1:ca:48:ad:96:ef:a4:47:6b:68:d3:
         8c:4a:03:13:71:da:d5:02:9d:ee:7c:18:8c:8c:a2:23:d2:bb:
         ae:bb:e2:90:06:ff:63:36:3a:d0:c2:4d:b8:7f:f2:d7:33:80:
         43:6d:ee:47:e0:64:f0:82:7f:8c:d3:2f:b6:39:9f:f6:49:a1:
         1a:d9:e9:12:4b:1c:02:67:93:1b:95:c8:76:9c:74:95:aa:7f:
         8a:1e:c8:af:7a:af:23:65:6a:e6:84:99:c7:e7:96:a2:1e:db:
         89:f6:e8:42:5b:88:d0:ef:41:64:34:e9:00:91:d3:df:2c:fc:
         3d:a4:4a:e7:70:20:6d:db:c5:a3:13:47:13:b4:04:b8:18:94:
         59:cc:ef:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:56 2025 by rpki-client