Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa
File:                     2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa (raw, json)
Hash identifier:          x2FJJQjW8FliuvBmVZty1hLRX87ECQoEnk1N/sfZ+1s=
Subject key identifier:   3A:85:89:D9:C9:C9:86:AF:6D:41:82:A4:EB:89:62:3C:6F:A3:E1:86
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F9E7A35AFA32744F6B80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     4474
IP address blocks:        216.166.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f9:e7:a3:5a:fa:32:74:4f:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=2a34af59-a625-4a5e-b287-4487ea375be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d5:9c:b9:43:2a:54:69:73:fa:6a:d7:43:93:
                    85:16:83:09:70:fa:ca:c1:c5:6c:37:73:a6:89:9f:
                    31:7c:c4:57:51:bd:5f:19:ee:da:ef:69:a6:9d:7d:
                    74:78:49:c7:e0:f0:f4:9c:4a:9d:c4:cd:1c:43:83:
                    73:04:23:b9:08:25:6f:74:46:5d:20:67:ef:5c:65:
                    23:bc:eb:cd:56:c4:f8:7a:1d:37:2a:fc:dd:d9:90:
                    59:a9:2e:74:11:0c:3b:ac:df:26:1a:54:c8:ca:72:
                    84:4c:b8:e1:60:70:65:32:be:05:76:7e:11:64:18:
                    3c:09:ab:f6:f6:04:f0:5e:ce:4f:e6:35:b5:ff:3c:
                    f7:25:41:06:fb:ee:1c:91:7a:ce:eb:f5:d5:e3:b2:
                    90:9d:92:d6:b0:1c:d1:e3:e9:dc:c8:81:3c:d9:23:
                    55:a0:2c:b3:98:24:68:b9:d5:6a:60:3b:f3:dc:1f:
                    f5:9d:15:1a:41:90:50:80:db:ad:c4:0e:fc:88:45:
                    1b:26:b6:f7:30:99:d1:ff:0d:00:34:d8:8f:51:95:
                    ed:74:66:9b:b8:e7:9a:dc:d1:f6:0b:ee:b7:47:51:
                    23:e4:a9:cd:e9:69:d6:9c:65:d1:3f:4b:7b:33:3e:
                    91:05:37:fe:5c:5b:99:35:23:a0:d9:2f:97:99:09:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:85:89:D9:C9:C9:86:AF:6D:41:82:A4:EB:89:62:3C:6F:A3:E1:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/2a9d48c4-e74c-34c5-8a72-0826c68fc3f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.166.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:2e:56:e0:d7:91:a1:42:29:fa:c9:6c:3a:ac:ac:37:10:ba:
         5d:52:48:24:2c:07:37:4a:8f:6d:4b:59:2d:22:a8:f7:98:c8:
         16:6d:49:51:ef:31:7a:45:51:34:fb:db:f7:c3:01:39:6a:05:
         79:d3:4f:7c:de:c5:fa:ce:a1:a5:60:fa:91:51:89:da:3c:ce:
         aa:b2:f2:43:0e:d2:29:9d:12:6c:d2:a1:af:76:f0:8e:00:4a:
         eb:c2:05:41:df:97:c1:83:78:36:65:e9:3d:4b:07:a5:fd:41:
         8a:c3:9f:a2:be:7b:e8:d0:77:4d:7e:fa:a6:87:e3:91:d2:a7:
         7e:8b:4e:87:c0:52:87:fc:ee:5c:90:a7:53:44:ea:1d:7c:e5:
         ac:6c:9e:cf:39:a5:40:be:dc:6b:3c:bb:cb:4f:07:5a:d2:41:
         8a:b9:0e:8b:b3:6a:f2:4d:cf:0e:46:dd:ec:05:15:4a:24:27:
         92:fb:dd:ea:8b:8c:0c:1f:da:0f:3f:37:42:a6:e9:2c:71:3d:
         30:c8:a3:fd:1d:75:4b:8b:6a:44:e5:e1:83:77:5f:c5:00:4e:
         8c:01:fe:9b:7b:37:53:dd:1d:2c:93:0f:62:fe:10:b2:f1:7e:
         d1:35:69:e4:20:0a:50:31:02:6c:7c:7b:a3:ff:cc:af:78:11:
         8e:80:10:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:54:30 2025 by rpki-client