Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8334758e-513b-3b0a-8e42-b0debc434d68.roa
File:                     8334758e-513b-3b0a-8e42-b0debc434d68.roa (raw, json)
Hash identifier:          7MoT+P68BXA64uEp9NZOX/r5tC/kPi3XVebFC+JTqZs=
Subject key identifier:   35:B8:FA:95:CC:34:57:8E:9A:16:2C:B0:09:18:B4:FC:5F:C2:B9:64
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F803888DF0EF36CCCA00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8334758e-513b-3b0a-8e42-b0debc434d68.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     23514
IP address blocks:        209.249.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f8:03:88:8d:f0:ef:36:cc:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=8f49ee23-99a1-4ddd-a30a-1c57bbc466a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:b8:a0:28:0e:16:6c:14:53:c1:c7:41:74:
                    eb:0f:58:40:c4:81:82:44:46:83:af:3e:39:28:70:
                    22:87:88:fc:06:c7:64:8d:e4:1b:b0:9c:8d:03:9f:
                    42:39:d2:5d:6a:5b:81:59:50:c7:0e:50:fb:31:1a:
                    e9:71:02:0e:5f:dd:16:dc:bf:3c:83:3d:02:74:87:
                    ef:82:c1:65:d5:23:d6:53:e4:20:db:ed:6f:15:3d:
                    23:23:bd:4f:81:b9:fb:b4:50:13:d3:00:3d:e8:1e:
                    dd:ae:b2:ec:5f:82:7c:b5:ae:74:7b:f6:7d:d3:27:
                    c2:d8:e1:83:30:e5:be:81:75:c9:ed:47:c8:46:37:
                    8b:04:73:59:98:d7:ac:25:bf:45:df:11:d4:ec:2f:
                    5b:87:6b:f2:f0:97:6f:7b:4c:1d:ed:32:f4:16:68:
                    6e:5b:5d:f2:dc:eb:f6:21:37:ba:4a:d7:57:63:98:
                    38:c0:a4:03:1c:22:c5:5e:6c:69:bf:5a:51:8d:fa:
                    fd:ce:a2:f0:e7:45:50:a8:8b:c0:96:53:d6:49:ad:
                    6a:dc:5d:43:c7:c5:23:24:d6:4e:6a:50:a1:a7:00:
                    b0:8d:c0:c5:29:70:1d:97:4d:6e:87:b3:88:03:1c:
                    0e:66:4b:57:ce:cc:6c:4d:85:50:5e:f5:50:05:04:
                    b9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:FA:95:CC:34:57:8E:9A:16:2C:B0:09:18:B4:FC:5F:C2:B9:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8334758e-513b-3b0a-8e42-b0debc434d68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.249.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:bd:75:f8:52:f7:e2:6c:ea:58:bb:25:e6:25:11:91:ea:c4:
         20:18:4d:51:aa:9d:02:01:84:31:a0:80:b7:e0:21:5c:5e:03:
         16:ec:75:c0:d4:1c:29:5c:66:01:27:fa:ac:09:37:a4:22:7d:
         39:72:9e:cc:4f:c7:23:20:e0:04:28:17:eb:1a:ae:9d:01:72:
         17:64:3c:a9:d5:9b:d6:25:1f:22:20:01:84:68:b5:e4:78:68:
         28:af:cb:70:8d:cd:c9:e9:3c:be:5d:7e:8a:2f:37:ed:6b:4c:
         3d:40:fe:a1:ab:d5:e7:ce:cd:64:76:47:06:24:b5:45:15:26:
         79:c6:e6:1c:ba:5d:98:b0:3a:ae:3c:77:43:ab:d7:b5:e2:d1:
         0e:32:74:8c:b8:32:16:f6:e0:e1:8d:63:3d:9a:6a:00:e4:97:
         bd:6c:f9:32:7c:23:d6:5e:b2:75:aa:c5:e4:ee:3a:88:bc:9f:
         d0:dc:7d:82:3d:5c:35:f4:c2:8f:f0:86:1a:62:d1:a3:0b:59:
         3a:80:50:03:d3:2c:65:26:fa:83:ee:b8:bc:8e:89:a6:21:32:
         85:60:97:23:55:4b:f4:6b:92:ff:1a:82:e9:bf:e9:5a:93:5e:
         27:07:84:93:2b:95:f7:60:14:d8:45:cb:78:65:b9:49:e4:31:
         85:41:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:14 2025 by rpki-client