Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa
File:                     81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa (raw, json)
Hash identifier:          vKohJ/+iZY/WVsPFd0Lgcrcjfr8SdH0Po2ibkNsUCvI=
Subject key identifier:   80:04:DF:2F:79:06:FD:34:75:C8:04:BE:5E:71:5B:26:E5:CA:FB:33
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B92DCED492FB1AAFCADB18780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     13767
IP address blocks:        64.125.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ed:49:2f:b1:aa:fc:ad:b1:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=25115d25-f87e-45b3-8f7f-86ccb79f98cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9e:26:fe:0a:38:59:1a:8c:7c:0f:d4:97:0b:
                    6b:9a:ae:f4:35:47:13:c4:41:a7:71:a1:e0:24:f9:
                    4b:3e:bb:03:25:0f:01:79:9d:e5:e7:ec:6c:0f:2a:
                    d0:75:74:8a:d8:47:a3:d4:ec:7f:04:04:f1:0b:e7:
                    b8:ef:ca:39:be:36:16:a4:45:0d:a3:98:95:e2:05:
                    a3:ed:57:8b:16:5d:ca:f6:42:7c:2a:c1:56:60:df:
                    45:1b:62:bd:d3:c4:a0:70:74:06:3e:a2:54:55:d8:
                    23:79:cd:e7:96:19:07:09:6c:df:80:97:76:5a:90:
                    65:d0:5f:7c:3f:af:81:2f:52:a8:5d:3b:28:8a:5e:
                    e6:c5:37:9c:df:32:94:9e:72:5f:12:88:79:18:07:
                    db:46:c8:82:ab:a7:6a:6e:ad:5a:76:fc:a6:2e:a2:
                    a2:ac:04:2a:d2:e4:17:ac:85:a1:ce:f8:d7:10:69:
                    1c:f8:73:b4:ae:b8:7a:54:c3:91:91:f3:5d:dd:a6:
                    52:e2:c5:0d:71:f5:12:10:a7:27:83:b7:ef:c0:31:
                    24:01:cc:1c:5d:5f:1e:74:b3:63:d8:b5:18:c7:c4:
                    72:40:06:aa:f4:4f:0a:fb:86:f7:7d:d9:14:d3:53:
                    a3:63:1a:35:52:67:e4:18:b0:e7:be:65:72:9e:50:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:04:DF:2F:79:06:FD:34:75:C8:04:BE:5E:71:5B:26:E5:CA:FB:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/81b444a7-e2f8-3532-9231-a3a0dbf76f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:45:1c:68:ce:b0:9b:b8:37:fb:87:81:b4:14:06:6d:39:b8:
         7b:e5:5a:e0:46:92:37:bd:e6:c8:2c:57:9c:57:11:0b:d5:d3:
         13:70:71:59:41:51:ea:70:52:91:f6:4b:86:fa:fb:e2:d5:45:
         5b:d5:48:af:60:7d:a2:ec:a1:dd:f9:5c:7c:d1:f4:e5:30:e1:
         f6:58:36:43:ce:2e:80:f6:41:46:53:79:61:a7:d9:52:03:92:
         26:5c:05:39:63:e6:2c:47:cd:8d:22:8b:eb:3f:e7:c6:4d:c8:
         89:d4:3e:2f:98:6a:84:24:8d:c2:41:97:1f:7d:16:d0:c1:f2:
         c6:06:8f:55:6e:31:fd:13:b7:70:ca:1f:f1:76:a6:94:fb:25:
         8f:6e:4e:ad:d1:ce:b7:86:ac:fd:6a:cd:23:e3:77:2c:71:1d:
         0d:12:72:89:d8:07:2e:e5:91:ab:87:6f:58:28:94:6d:a6:b8:
         ee:8c:3c:91:18:34:1b:76:9c:13:a9:d2:f1:6b:40:7d:6a:da:
         36:85:05:76:c5:25:77:6c:ab:34:47:e5:7a:54:a3:07:86:7b:
         66:cb:db:80:bd:2f:a6:0c:4d:6f:1c:51:68:a9:e8:0e:1a:2f:
         4d:86:fb:36:f0:ac:b9:ec:d2:ca:f9:66:48:57:7e:52:27:86:
         29:77:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:32 2025 by rpki-client