Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa
File:                     d682f096-58fc-3672-b277-594d7971ec15.roa (raw, json)
Hash identifier:          3+l5qf6xNnNIMYEinYryrlQx8cjPTEj6EIhdHlGDgQA=
Subject key identifier:   F1:E5:E1:38:7F:B3:E2:E5:17:BA:6E:42:CF:4D:74:8F:53:09:CB:D1
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584B92DCEC07B6EFA5D1F64B2960
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     394872
IP address blocks:        64.125.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ec:07:b6:ef:a5:d1:f6:4b:29:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0f366d37-f31f-4242-a55b-7084528cb773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:2c:6e:ce:8c:af:80:81:b6:a4:f8:f8:2d:
                    7f:31:9b:cd:35:03:07:55:9d:03:43:21:e1:14:3a:
                    dd:b1:27:fb:70:ea:2b:3d:ac:01:c8:d8:d9:dd:47:
                    e3:1a:21:b4:4c:e5:1f:80:cc:23:f6:0b:e8:e4:02:
                    28:43:30:17:68:4e:ab:55:7d:2f:4a:6f:97:2e:d1:
                    8e:81:66:25:3e:14:19:f4:36:9e:81:25:9d:b1:11:
                    62:57:ec:97:28:1b:66:81:30:43:23:f8:f5:84:00:
                    53:ba:2e:73:bd:b8:f0:57:2e:1f:f6:4c:2b:dc:d7:
                    17:e2:5a:53:91:2d:76:04:5b:a7:5d:a0:25:bd:4e:
                    c1:8f:de:94:22:5f:10:6f:5f:87:3e:7f:49:2a:3f:
                    6c:fb:20:00:4a:13:e0:7d:52:09:dc:2b:1c:90:a5:
                    00:20:03:7c:2d:cb:01:f4:0c:9f:1b:f9:d4:d9:0f:
                    7b:ac:57:3c:cc:26:5b:47:37:82:5f:d9:b0:82:fe:
                    ef:a3:5c:d6:a7:b8:99:c7:66:15:68:ee:43:c6:92:
                    f7:6c:01:1b:99:8e:b8:d0:1d:6c:d3:8c:59:df:83:
                    b9:c6:65:fc:1a:75:3f:0e:30:3d:fb:60:3a:47:6d:
                    ba:3f:b2:04:a4:e2:ad:21:8a:8b:6e:84:46:83:59:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E5:E1:38:7F:B3:E2:E5:17:BA:6E:42:CF:4D:74:8F:53:09:CB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d682f096-58fc-3672-b277-594d7971ec15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.125.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:26:3e:19:a4:ac:5e:c5:72:ba:39:3c:77:ae:83:15:4c:11:
         c4:92:77:a9:eb:15:d9:12:9b:1b:88:0c:15:cd:0d:48:b7:7f:
         6d:8e:2c:24:c5:f9:73:eb:6e:9d:b8:8a:8b:f9:6e:d8:7a:a4:
         27:63:73:99:f5:10:04:db:a7:eb:51:e3:7a:13:4c:44:57:da:
         79:e1:b9:31:67:f8:9f:00:5d:09:bf:05:73:5f:23:fc:a7:c0:
         d9:3e:55:5d:62:58:b0:59:56:52:e1:46:f5:f7:75:c2:0e:38:
         4e:4a:b4:b3:4c:48:69:82:0a:01:1b:07:e1:b2:b9:d8:32:71:
         9a:46:9e:55:16:2c:7a:2a:97:d2:58:1f:54:3a:27:15:52:73:
         fe:82:19:28:1d:2d:58:d8:c5:4c:7a:53:52:cf:a9:83:38:cd:
         2e:ae:f1:20:e4:46:8a:d5:58:32:9e:43:03:9b:5e:3c:ca:8f:
         68:1a:89:7a:af:cf:4e:7b:93:43:08:c1:2b:f8:03:26:a8:92:
         df:18:ac:73:b9:b8:a0:c5:fa:ce:98:a1:e6:a0:49:65:94:13:
         b6:77:ea:da:eb:1f:90:3b:ac:35:8a:f0:a6:cb:47:69:17:de:
         d8:af:18:ca:35:40:b9:00:2e:93:d7:6d:8d:a8:d6:f1:e4:bf:
         1a:52:fd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:59 2025 by rpki-client