Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa
File:                     3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa (raw, json)
Hash identifier:          XrfWz3ajuVcopuu/w62HicttR7RUAWyfK0JENLP9RQo=
Subject key identifier:   38:28:6C:74:A0:85:D7:AF:C9:C3:B1:63:95:32:5F:2E:AE:84:C6:0B
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584ADA9BC9398332EADE1CA09780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     11359
IP address blocks:        216.222.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c9:39:83:32:ea:de:1c:a0:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=1a561b53-8732-4eac-aaea-b2af60c2ef84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:56:e0:eb:73:70:2d:f8:95:73:81:db:cc:
                    43:e7:b2:e0:b2:65:f8:37:42:42:d4:8c:b6:fb:dc:
                    9a:68:75:f9:a3:12:f9:88:ef:98:e8:72:9c:5a:c6:
                    c2:1c:9d:1d:79:7d:f5:6f:9f:f9:85:6d:b9:e8:84:
                    73:a4:7a:3f:f0:4c:f0:74:f5:1f:57:a1:c0:e8:56:
                    23:08:3c:84:fb:cb:ea:73:fb:ba:50:7c:d9:5a:0a:
                    d8:48:89:07:2f:88:59:6c:e2:97:3d:1d:4d:1d:a2:
                    1b:a2:8f:86:2e:21:cf:ea:0e:33:b2:a8:f7:38:bb:
                    b7:b3:c5:31:d1:ea:d5:90:90:25:b9:69:61:2e:a2:
                    db:ab:09:fe:60:49:28:2e:cb:71:69:49:73:2d:fb:
                    67:f2:c7:8d:55:09:b3:8f:f9:40:2c:c5:f8:1b:4f:
                    82:8c:1d:b7:00:ef:f4:ae:c7:b3:1c:04:2a:66:2c:
                    84:54:d5:e5:b1:44:74:e4:25:59:46:7d:38:57:62:
                    c3:ec:1c:18:22:93:f5:df:2d:15:93:41:1f:60:fe:
                    15:c8:c8:78:02:7f:ae:7d:d8:9e:6d:b2:88:0b:d6:
                    9d:a6:30:5b:86:2d:9b:26:c4:80:70:b3:ec:b5:b1:
                    a1:85:ad:50:6d:d0:93:04:62:cf:ac:e5:f1:5b:d9:
                    e5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:6C:74:A0:85:D7:AF:C9:C3:B1:63:95:32:5F:2E:AE:84:C6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3d339b3a-0ee4-3ef7-9752-c5f1ef78f93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:13:2a:e5:a3:41:de:fb:f9:88:87:2d:f7:24:4a:8f:bd:db:
         f8:7c:cd:7b:1e:b1:8a:1f:62:7c:a5:72:78:ac:39:eb:46:92:
         4a:22:fa:04:13:de:c7:a0:6f:61:51:df:22:c1:e6:8d:bf:79:
         04:8a:41:d5:de:71:f8:6e:5a:4f:bd:1e:6f:22:88:96:35:b8:
         83:0f:75:e9:0a:f4:ea:f5:1b:f1:73:de:ab:86:23:72:15:74:
         bd:6e:d8:e4:ca:ef:d5:fe:2d:1b:24:3c:2e:a1:fb:e1:0e:cf:
         4e:03:a4:11:0e:6d:a0:08:23:d7:3a:1c:48:fc:43:9a:cc:4b:
         4d:5e:8d:84:fe:c9:92:2f:de:0e:1a:94:4f:83:d4:92:6d:43:
         c0:66:5b:ae:c1:62:5d:d8:1e:eb:a7:82:19:0e:9e:e7:23:31:
         7f:8e:0c:1d:38:66:80:c2:9b:e2:9f:37:20:59:16:a0:4f:98:
         2b:4a:c2:eb:f5:40:24:80:f4:37:fc:6f:f6:6a:b8:d2:83:ce:
         a5:6e:32:8a:10:2c:c7:7e:3b:3c:ae:6a:05:4e:99:97:30:51:
         12:d0:3d:e1:84:0a:e9:c3:29:1d:f5:91:47:9a:7e:c2:f3:ae:
         c8:54:03:4b:32:5a:0f:45:fa:f8:e7:79:23:ae:fa:71:7e:0e:
         33:17:46:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:54:28 2025 by rpki-client