Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9f7b8ad-bdfc-3181-a64b-fa7cde8f9968.roa
File:                     c9f7b8ad-bdfc-3181-a64b-fa7cde8f9968.roa (raw, json)
Hash identifier:          /vdTxfGwymH5opvEMWQQDX6a1OAMUEefvMkqfWrVCa4=
Subject key identifier:   37:2A:E3:43:80:B3:AF:05:54:FE:B7:DE:2E:FF:6F:D4:12:82:E3:1D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AD93655E45B698CBDF07BB400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9f7b8ad-bdfc-3181-a64b-fa7cde8f9968.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     19112
IP address blocks:        64.184.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:55:e4:5b:69:8c:bd:f0:7b:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=27a73b04-83d9-4d16-8a89-2c97ee414047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:0e:9e:4f:e1:c0:88:3e:27:3f:a1:9f:9f:
                    c9:fb:3c:18:39:2b:87:01:e4:37:36:8b:09:06:df:
                    c8:18:d3:16:45:ea:b9:58:cd:48:c0:27:7d:b3:da:
                    1a:09:f4:a2:92:d0:02:1b:88:9f:77:7f:92:eb:ce:
                    35:9e:8d:7b:77:a5:a7:23:12:b8:42:f2:d2:50:a8:
                    24:21:cb:aa:02:7a:75:6f:c8:7d:92:cd:75:b6:ce:
                    40:b3:5f:e4:a1:a4:80:a3:5e:b6:8e:73:e6:0e:76:
                    1b:9d:9a:11:51:91:21:26:9c:c4:20:e4:da:d3:46:
                    2a:67:a2:e8:a5:c6:2d:a9:e3:cc:44:be:1b:a7:7f:
                    91:00:8d:fe:8a:6a:b2:00:d1:09:d8:a6:04:1e:c9:
                    54:69:59:42:fd:61:1f:de:32:7e:f4:2a:6b:6c:fe:
                    c5:a5:c4:05:ec:4d:9d:9c:11:93:db:bf:68:fa:f6:
                    42:24:99:7c:55:09:91:2b:19:62:51:c0:67:2d:e3:
                    13:e8:cc:a8:eb:a2:20:75:b7:fe:e8:fb:ee:b8:bd:
                    8b:c3:9e:1a:f6:06:76:3b:3a:1c:d1:35:31:e6:12:
                    cb:70:01:1c:57:c7:7a:0e:de:15:ea:99:94:ea:8f:
                    2b:98:39:ac:21:64:ba:43:83:67:bd:a4:15:98:d9:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2A:E3:43:80:B3:AF:05:54:FE:B7:DE:2E:FF:6F:D4:12:82:E3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/c9f7b8ad-bdfc-3181-a64b-fa7cde8f9968.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:d4:d1:87:21:d3:d4:6b:d7:4f:87:9f:a2:67:92:74:1e:d5:
         50:65:18:f7:21:a5:ae:f2:10:c7:ab:5b:90:7c:44:e9:ae:36:
         e4:48:7a:53:2f:de:e1:94:b4:0d:b9:5c:a6:5a:7e:f9:ca:70:
         fb:1b:d2:92:97:a0:88:5a:d0:15:4f:2b:8f:4b:12:c5:1c:24:
         bb:c7:20:ab:78:68:e5:c4:c1:55:3b:d6:73:a9:ea:ad:65:a0:
         5a:b9:55:27:74:2d:f5:a2:49:27:3d:8b:ac:0f:81:db:55:75:
         41:01:57:77:08:d4:ad:b8:8c:8e:04:e4:99:27:e6:9b:37:39:
         fb:cb:26:c4:87:22:53:18:36:50:01:8f:d2:3e:7f:83:b3:72:
         0e:9b:78:98:2b:0e:74:1d:4d:25:24:2b:dd:a9:fd:48:65:62:
         41:ad:a9:8e:de:65:2d:16:48:3a:e2:0a:5d:d3:77:81:a9:c9:
         01:9d:59:d4:30:0d:f9:7e:22:46:14:7b:8d:c4:f3:ae:d5:e4:
         bc:f1:37:2b:7d:c9:65:47:eb:c1:94:ab:38:2d:02:a7:54:28:
         59:c5:f3:4c:99:87:b4:d9:f7:11:cc:2e:3b:77:05:76:c3:31:
         ff:17:74:9f:80:3a:ce:95:74:89:b2:f1:fe:57:f6:9a:86:27:
         cd:4c:74:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:02:47 2025 by rpki-client