Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa
File:                     5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa (raw, json)
Hash identifier:          z91V4KB+vRbGyC6WoNDnKCaeOoXYzopuDwzm9wdGESo=
Subject key identifier:   4B:AA:66:E4:AF:01:BA:F3:52:B1:EB:EC:EF:AE:F5:6F:57:5E:80:8D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B92DCF52D0E3A318C1086D280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     394441
IP address blocks:        64.124.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f5:2d:0e:3a:31:8c:10:86:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=62c46502-4347-4697-a7ba-0a3ddf59fee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:40:0c:19:93:48:62:c8:fe:5b:11:5a:dc:20:
                    dd:bb:8d:67:70:53:21:66:ef:7c:80:9f:0f:3d:a5:
                    00:c1:d3:f3:de:11:44:bb:00:1b:8f:f5:e0:59:32:
                    9e:32:10:2c:af:5d:9a:0c:1b:ba:a2:ea:71:fe:14:
                    01:67:af:3d:b8:61:9c:6a:c0:00:7c:be:2a:d3:7c:
                    fd:8d:35:0f:88:50:f0:c8:90:cb:7d:a6:30:3c:11:
                    15:63:d9:79:68:27:a1:98:67:c9:ba:20:98:e5:b6:
                    ab:82:50:20:8f:d2:4d:1b:e5:24:a7:91:48:e6:16:
                    78:8b:cc:f5:58:69:fe:f2:b8:f1:66:85:7b:e5:ef:
                    7f:dd:a6:33:1a:0b:3b:24:23:73:ee:07:48:1c:0d:
                    b3:88:2b:ec:34:1c:01:08:bf:98:07:fa:cb:7d:d4:
                    43:03:70:57:46:55:7c:96:fa:4e:f4:ef:f0:09:63:
                    14:a5:8e:df:02:d8:58:80:86:f5:46:a7:31:5d:d2:
                    e4:c9:f4:7a:cb:fa:c5:b2:43:41:9a:42:e1:50:85:
                    8c:05:33:a7:27:b4:be:1d:7a:1b:3d:a4:bf:64:7b:
                    7a:41:d0:b2:67:a5:2d:df:d4:00:77:1c:c5:65:81:
                    70:8a:39:26:8f:53:ce:ca:98:60:3f:22:89:d2:61:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AA:66:E4:AF:01:BA:F3:52:B1:EB:EC:EF:AE:F5:6F:57:5E:80:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5bf869bc-6e37-329d-9bb5-69870a4c3d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e4:1a:cb:d1:80:72:b3:9e:a4:fe:8a:a7:3e:7b:d9:63:4a:
         27:81:8c:69:f0:21:e6:50:d7:4f:2c:67:40:5e:c5:23:cd:79:
         b3:4d:d2:47:24:2c:47:12:04:07:db:7b:59:2e:10:c0:00:fe:
         3b:1b:83:2d:bc:80:14:5a:bc:4a:51:7a:8e:9e:75:85:bc:3f:
         68:59:63:25:17:ec:bf:9c:24:76:62:3a:3e:cb:8e:5e:00:6b:
         3c:5e:53:2c:99:11:d3:11:33:95:e2:0c:4a:ed:b7:c0:66:11:
         ec:f7:07:af:d1:71:04:6c:0d:6c:42:7c:f4:0e:b6:be:23:9e:
         04:e7:46:8f:ad:ce:01:e1:c7:b5:07:f3:45:52:5f:92:d0:5f:
         fb:11:cc:f3:3e:aa:c4:18:cd:62:62:36:e1:38:4b:b2:0b:2b:
         70:6c:be:ad:a5:ea:ca:74:12:ae:9c:c3:01:2f:ee:63:16:eb:
         f6:b1:4c:65:de:60:72:09:d6:a6:6f:56:26:5a:0b:52:1a:e3:
         68:fd:bc:51:c6:fe:b3:12:c0:27:5d:77:be:de:70:16:00:bb:
         6b:1f:83:e2:ae:5a:3e:ff:20:a2:77:74:c9:55:d5:dc:27:2b:
         2c:84:c9:3b:b4:71:51:e6:5a:36:b6:b9:e4:3f:00:60:03:50:
         05:14:7b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:13 2025 by rpki-client