Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8709582-ca21-3a2c-b69d-ef8b2deea643.roa
File:                     b8709582-ca21-3a2c-b69d-ef8b2deea643.roa (raw, json)
Hash identifier:          bCvf6jsqqUWJjy3m0Mh+jyAy8Wn+iNCErYORuiy7WJo=
Subject key identifier:   FE:1F:EE:03:5A:02:1B:56:EA:1D:8A:F6:5D:42:45:56:67:0A:6B:3A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710ED482969A839AEC5AE80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8709582-ca21-3a2c-b69d-ef8b2deea643.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     14011
IP address blocks:        209.66.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:ed:48:29:69:a8:39:ae:c5:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=f8ac2dea-6103-48b5-890c-d39ea79d53f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:11:57:2d:1c:11:2f:67:b9:7c:29:2f:10:2c:
                    17:9e:6f:98:77:2a:12:ce:5b:1f:0d:76:7a:ba:b4:
                    ad:18:9d:1f:aa:be:01:54:79:d0:86:b9:f4:4f:8e:
                    ad:f9:fc:39:30:cf:d4:ae:6d:84:cc:24:78:54:1a:
                    d9:31:84:2b:e8:11:c8:2a:44:c2:93:9e:c1:5a:81:
                    44:ae:b5:69:e0:3c:55:52:28:9e:0b:fe:8c:37:a3:
                    c3:c1:36:2b:da:aa:cc:cb:56:59:93:cb:70:5c:11:
                    7c:34:dd:21:29:92:8a:11:c4:83:36:78:4b:31:98:
                    c7:e4:d7:05:4a:58:ac:ac:d2:5a:ce:c3:e7:b3:7d:
                    2f:70:6f:bc:9b:a5:aa:f3:93:b2:28:29:3c:d1:be:
                    bd:3e:1d:78:30:21:78:88:09:4e:6b:bf:62:45:d6:
                    27:48:b4:5e:fe:54:07:69:8e:4d:fd:a8:bd:9e:7f:
                    48:21:c6:a1:7e:54:10:b0:82:8a:51:91:79:3a:32:
                    e1:59:cc:59:68:4f:d1:b2:8d:67:02:53:c1:b0:91:
                    22:00:4a:a9:8a:49:0e:83:bd:d7:8b:cf:3f:f7:c7:
                    42:8d:96:12:e1:e6:24:a6:07:5d:68:4c:ad:05:c9:
                    5c:67:b3:62:ea:62:e4:bf:de:50:0e:7b:a8:1b:37:
                    a2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1F:EE:03:5A:02:1B:56:EA:1D:8A:F6:5D:42:45:56:67:0A:6B:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8709582-ca21-3a2c-b69d-ef8b2deea643.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.66.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:70:4e:8c:5e:9c:23:36:cc:37:85:fb:49:d1:ef:13:1b:e3:
         bf:dd:dc:5f:4e:d7:cb:10:96:5d:c7:f5:ae:b9:48:c4:ec:f7:
         3c:73:5f:d2:b1:f2:b5:0c:c1:e9:ba:d6:e5:da:01:8d:f5:8e:
         7e:51:79:7c:a0:3d:3e:7d:39:cc:97:bd:0f:7b:9a:f6:46:ec:
         8f:2c:13:79:a6:de:2e:8f:33:bd:e1:d7:91:f2:48:52:45:6c:
         ae:57:5d:ad:bc:69:6d:d1:f1:a0:19:0a:46:33:2f:0e:44:4a:
         dc:72:5f:12:d0:19:77:cd:59:7c:40:4d:71:fe:7d:19:6c:1b:
         07:b3:52:9a:cc:02:d9:7d:9c:ff:d8:4d:20:d0:4e:e5:dd:4e:
         01:86:47:06:6f:38:cf:72:70:50:d9:44:65:6d:0a:ac:7f:2d:
         91:5f:bd:b2:1a:95:f1:63:2c:02:d8:3b:51:cb:a1:44:60:de:
         47:01:70:13:87:68:58:72:59:15:54:7b:75:75:b8:19:02:18:
         0d:c5:0f:a9:85:34:d9:05:4a:11:83:29:73:65:59:69:4a:a8:
         90:e9:2d:06:85:19:f2:35:48:f0:44:d6:c9:ce:14:25:fb:61:
         ca:d9:76:c6:a4:46:51:c0:a8:b2:1d:cb:31:dc:f3:2a:e2:cf:
         76:03:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:56:14 2025 by rpki-client