Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa
File:                     6ab7033c-f03f-379d-8674-62b7f45c2811.roa (raw, json)
Hash identifier:          efFqj1hvEtESVG7tjruTlnxy77QYBuR6mAaMpiLBGl8=
Subject key identifier:   82:9F:4B:AD:03:A3:1A:80:84:1D:10:36:13:6C:87:6C:49:3E:14:65
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F853394FBC9F8356C300
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     53793
IP address blocks:        209.249.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f8:53:39:4f:bc:9f:83:56:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=c6a0625a-7826-4894-8125-099abf645255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:67:a2:d0:2a:50:4e:68:84:c7:fd:f9:4b:04:
                    f3:44:c1:cb:04:c5:5d:cb:53:45:66:e1:71:35:1a:
                    92:98:64:aa:0c:67:8f:e1:b4:55:b6:d5:8f:28:15:
                    f0:36:fa:ff:dc:ba:57:27:f1:10:a5:53:72:e1:3e:
                    22:ac:d1:43:2e:e5:27:6d:ce:84:ea:bb:a6:5f:4f:
                    db:b0:56:91:4e:14:2d:49:81:ac:79:89:f1:77:74:
                    bc:dd:f6:3e:88:18:fd:bc:b5:1a:5b:87:dc:96:1f:
                    70:b3:0c:ca:28:41:c8:26:b3:0a:19:8b:d8:be:fc:
                    1c:39:ad:6b:d7:a3:05:ce:f3:7f:70:3e:a3:85:73:
                    bb:1b:c3:a2:f7:66:f7:f3:e0:9d:3c:b1:6c:2f:b2:
                    63:62:5f:ce:a9:78:1f:d6:36:56:f9:c8:eb:d4:5f:
                    4e:96:29:54:1d:57:4a:17:e6:2e:a2:1e:0f:af:48:
                    f6:cb:ae:17:a7:cf:20:ab:20:63:bd:ca:5f:b8:80:
                    00:27:01:8e:6f:2e:3a:e9:f4:eb:2d:9d:5e:e2:f4:
                    69:7e:56:cf:7c:55:0e:38:31:99:73:66:93:ae:60:
                    16:34:8b:04:13:83:31:c2:7d:33:c4:38:92:cf:45:
                    1c:71:b6:74:83:28:78:a6:ad:9d:e2:55:2c:1b:23:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9F:4B:AD:03:A3:1A:80:84:1D:10:36:13:6C:87:6C:49:3E:14:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/6ab7033c-f03f-379d-8674-62b7f45c2811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:e0:81:64:66:22:23:3d:b5:22:0e:64:9c:c0:11:cf:65:7e:
         78:05:3d:50:ae:fd:db:1d:f4:27:10:54:ec:6c:24:1a:66:40:
         c2:d5:83:ec:8e:19:d0:cd:3d:44:73:58:44:30:44:e8:ea:c0:
         59:70:ba:f7:4e:0c:bf:4f:88:62:50:e4:19:c4:30:f3:63:37:
         bd:19:39:d5:c6:49:3e:81:3d:70:7f:c3:0f:a8:b8:1e:10:64:
         39:6c:3f:01:29:90:7e:d7:01:af:6c:ad:2f:d4:0d:90:b6:da:
         47:b6:eb:8f:d3:b8:57:49:68:4a:7b:44:ad:62:d1:76:ec:bb:
         e3:73:66:9b:0b:ee:39:e5:6d:6b:b9:ed:b7:88:a6:76:1a:6b:
         51:61:cc:ca:83:3d:0d:67:47:e8:18:30:fa:f4:46:7c:4d:80:
         fe:46:7b:96:00:60:0a:ff:39:63:43:63:64:21:a8:cd:0c:f9:
         83:72:6b:91:c6:b3:70:6c:34:ab:ce:aa:99:1b:b7:56:67:61:
         8d:00:8e:c9:80:9e:eb:a5:65:1d:b6:94:f6:da:aa:47:2b:a4:
         e6:f9:07:1a:9b:7b:79:df:1b:81:e2:57:6c:c4:05:a4:11:c9:
         5c:6a:39:a3:eb:3f:9d:5e:02:27:29:ea:69:13:f0:da:fb:85:
         00:00:89:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:57:40 2025 by rpki-client