Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d24f3c6e-ed67-3095-8d24-7ed0affb7fe3.roa
File:                     d24f3c6e-ed67-3095-8d24-7ed0affb7fe3.roa (raw, json)
Hash identifier:          F3XqueTF9cwAMixp+tHK2mZ/JIL3Bm9OR5v+d4kVHVo=
Subject key identifier:   7E:EA:F9:AE:7C:CD:01:76:57:8C:2D:45:EF:38:A6:68:9D:AC:58:01
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F67C2683698AD9B28280
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d24f3c6e-ed67-3095-8d24-7ed0affb7fe3.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     62994
IP address blocks:        209.124.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f6:7c:26:83:69:8a:d9:b2:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=c5b77fb1-060e-4124-90a4-1ea82c38be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:9b:ec:92:ad:61:ed:58:d1:2a:9e:ce:0c:
                    91:11:f4:3f:d0:98:61:bd:85:3e:0a:62:08:a6:60:
                    e8:ee:4a:f5:f5:76:de:11:38:46:49:45:01:81:52:
                    43:32:d1:d1:87:98:68:f6:23:05:10:8c:62:6e:c3:
                    b7:57:01:4a:62:80:31:9c:47:f6:9b:36:70:41:d6:
                    37:98:ef:66:36:54:b4:29:ed:c6:b4:6a:dc:93:7b:
                    53:e6:e1:da:9d:4b:22:3c:04:00:d9:28:62:ae:e9:
                    2c:a6:43:e7:84:48:cb:57:f7:34:38:f0:6f:f8:50:
                    61:ff:4e:3b:24:97:03:e9:95:4b:ca:c4:e0:5d:fd:
                    ee:1d:d8:2f:31:e2:90:8a:07:51:fb:69:66:74:88:
                    c6:65:3f:7d:75:e8:ab:1e:9c:8e:bf:59:6e:a8:60:
                    28:41:4f:55:b3:fa:d9:91:f2:ab:27:da:9c:6a:16:
                    12:29:1a:8c:a5:32:a4:74:0d:73:3e:56:a7:0a:05:
                    c6:cd:ad:87:00:d0:0d:25:21:42:a1:12:b8:b3:4c:
                    75:2f:cb:54:53:28:8f:05:19:dc:54:ff:a0:02:4c:
                    93:65:54:b6:5a:f1:0d:a5:b5:d5:00:2d:d2:2b:35:
                    f8:ce:92:80:7e:5a:17:37:9f:71:ae:bf:5d:8f:a2:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EA:F9:AE:7C:CD:01:76:57:8C:2D:45:EF:38:A6:68:9D:AC:58:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d24f3c6e-ed67-3095-8d24-7ed0affb7fe3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.124.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:07:f1:92:f4:a9:e8:8a:7a:93:fd:47:a3:12:ad:8e:57:64:
         05:3b:39:72:0f:d3:ff:6a:98:99:3a:c9:62:43:02:c3:d9:37:
         3d:28:9b:0a:8a:d9:e8:63:9c:4a:7f:59:5c:06:d8:e0:8d:8a:
         a1:e1:2c:a4:10:38:c4:6a:ac:5a:16:41:5c:41:8a:90:64:58:
         cf:25:8e:52:ae:ba:00:4b:5e:00:3a:c0:dc:0a:55:d5:cc:79:
         99:e8:0a:1a:76:e3:f7:b3:fa:49:88:3c:1e:fb:a3:f3:15:ab:
         e7:d5:67:dc:dd:c3:cd:e0:86:0a:60:7c:cc:2a:2a:00:ba:fb:
         05:86:14:96:ec:de:6c:e3:db:be:d2:1a:68:6f:69:8a:b5:af:
         97:bf:33:65:c4:3c:0a:b7:8e:fe:85:ae:8f:93:96:27:65:2c:
         63:0d:d2:c8:57:ad:a7:c5:84:b7:a6:57:26:3a:6e:f0:6e:44:
         79:29:b8:64:a1:99:f5:95:e6:08:f4:5a:3b:cb:42:4e:a5:f6:
         9a:90:05:c3:ea:ea:1f:80:79:62:f5:f6:40:7a:32:53:3d:09:
         f9:08:6e:91:5e:d7:12:6a:4f:c8:61:81:b2:11:70:0f:09:6c:
         ce:1a:08:c1:6d:2a:ff:ad:45:3c:a7:2b:c3:34:05:f9:9e:f7:
         47:22:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:06:20 2025 by rpki-client