Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa
File:                     c0f2bf6d-f534-3e94-b053-f76db071d83b.roa (raw, json)
Hash identifier:          vOWUTnnufZEFDpR3acHmAGvrDICs9pxa49OZ0LI0/UE=
Subject key identifier:   82:CE:2A:74:91:76:15:9B:7F:7B:D9:30:61:31:BA:10:C1:CF:87:38
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F263B5F631E30B0C8800
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     4997
IP address blocks:        216.222.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f2:63:b5:f6:31:e3:0b:0c:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=37829509-f88d-4d96-b645-80a891cd1492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e6:a4:5f:02:83:21:c9:ea:13:07:85:0e:45:
                    72:6e:44:f2:98:12:f2:19:5e:3f:68:5f:a3:10:97:
                    da:76:6b:07:6f:05:29:d5:cd:7f:26:59:0e:62:0f:
                    e0:e2:71:8b:8d:d3:0b:08:76:64:91:14:9a:81:6e:
                    8c:07:89:11:68:3b:c1:e5:87:fd:81:9d:45:ef:3b:
                    fd:a0:b8:e1:52:74:59:24:cf:65:5f:86:b9:62:b8:
                    a9:f5:1e:e8:9b:cf:6c:1f:da:4e:22:46:63:00:42:
                    12:f9:38:df:fe:a7:dd:6c:43:ef:13:92:1f:8b:b7:
                    3f:66:ba:a3:40:2a:d7:a0:5d:ed:f9:e9:88:25:76:
                    8f:ad:00:cb:c2:30:cc:5d:81:b3:ce:79:a1:1d:8c:
                    34:c6:0d:16:58:1d:b8:bf:3f:ab:02:a8:e0:f5:ef:
                    7b:f2:f3:97:f7:5a:29:69:4e:8c:83:6d:66:f9:30:
                    f2:e9:34:7e:c9:b6:a4:0e:86:d7:e3:7e:2e:fa:c7:
                    b9:cf:26:b4:d3:a8:01:66:7e:7a:08:7e:51:ca:e4:
                    2a:85:31:08:52:5f:74:bf:f3:45:7e:7e:96:b4:57:
                    d4:68:db:e4:08:06:9a:65:f7:34:cc:aa:5c:ee:25:
                    77:75:5b:0a:d2:3d:ad:a3:ad:7a:2e:a8:68:09:22:
                    18:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CE:2A:74:91:76:15:9B:7F:7B:D9:30:61:31:BA:10:C1:CF:87:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c0f2bf6d-f534-3e94-b053-f76db071d83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:82:17:ba:a4:f6:bc:56:70:6a:8b:8d:0c:97:d6:ad:3d:7a:
         69:9d:90:bd:37:75:c0:e4:af:73:67:15:aa:50:53:35:73:83:
         ee:90:c0:44:10:36:06:cd:6a:f7:45:25:da:6b:63:0e:e2:ca:
         29:30:99:56:3c:73:62:37:8c:fe:6a:3d:9d:4a:5a:66:6c:30:
         7b:53:78:24:52:37:89:39:99:86:4c:f2:fc:34:56:7e:f0:36:
         b1:ff:b7:90:48:75:3f:8a:33:ba:54:4f:75:5b:42:ad:20:77:
         a5:bd:44:6e:99:0e:58:d3:74:75:c9:b6:f8:cb:da:da:dd:5e:
         21:d8:67:8b:0e:46:a2:28:f7:22:65:10:0f:10:40:9c:56:48:
         22:65:c6:a2:e1:48:f0:83:08:b0:3c:3c:ba:ca:31:09:1e:d2:
         22:4d:6b:1e:9c:31:75:17:a0:fb:c6:a7:2c:83:e9:26:7a:38:
         dc:87:2c:74:1c:61:7a:57:e1:80:9f:05:1e:92:97:57:05:be:
         2d:b9:12:1b:60:22:4a:43:de:1a:d5:05:2e:ff:1a:d8:78:42:
         5f:25:9e:e4:a2:14:07:17:c9:97:cb:91:0a:b5:77:c2:52:f2:
         97:67:7d:c9:ee:b8:19:2c:85:53:32:50:ec:08:34:9f:2d:9a:
         69:28:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:30:17 2025 by rpki-client