Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa
File:                     f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa (raw, json)
Hash identifier:          yJxeW/Fw3gMbNjjdgKpSroQUPiiJrIRRMIn0ZlyoVdY=
Subject key identifier:   3F:CF:A3:9D:0E:CE:65:BA:77:B2:AD:EB:8B:73:E7:8C:49:96:A1:09
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584AC710F1ED8BCA989107221980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     4997
IP address blocks:        216.222.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:10:f1:ed:8b:ca:98:91:07:22:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=99a30eba-72cd-4bdb-bd78-ad19d89772a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0f:5e:6d:85:22:f7:6e:0d:64:01:27:cd:f4:
                    98:e0:29:71:1e:fd:da:c2:a4:b3:72:19:a1:d1:de:
                    55:d7:6f:02:ac:84:f9:49:2d:6b:93:66:32:a6:dd:
                    99:36:53:46:bf:21:ae:a2:f6:9c:10:b9:da:64:a4:
                    ce:aa:db:64:ba:e8:b9:6d:bf:2c:8d:5f:39:54:c2:
                    d8:4c:72:a7:b9:65:b0:e8:5d:47:a0:40:eb:b0:76:
                    59:bf:be:02:49:67:b9:de:3a:b7:e5:34:65:4c:f2:
                    eb:d1:f7:c9:35:7b:4d:23:0c:61:9a:8d:1d:49:e2:
                    1f:8d:ee:cf:7a:5f:8a:e8:0f:f6:93:e7:e0:b2:fa:
                    bb:3d:75:12:5e:07:03:2b:3a:25:e9:e5:77:c5:e4:
                    66:80:c7:51:86:fe:c2:bb:c9:60:51:d3:cb:0d:e9:
                    02:0d:2e:57:09:45:5f:9f:a2:7a:3f:21:a7:c1:5d:
                    e3:c1:26:1c:1d:a1:04:44:8f:91:fc:61:b7:8b:3c:
                    06:bd:7e:b5:b7:cd:f2:d5:f3:0a:f2:a6:68:50:4a:
                    1e:de:b0:c9:fa:27:b6:9c:fa:4f:78:dd:bf:f3:d8:
                    4b:37:50:73:e2:19:14:d8:07:24:2a:b6:6f:a9:e3:
                    80:bd:8a:25:eb:8d:48:39:dd:14:92:fd:a7:df:65:
                    cc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CF:A3:9D:0E:CE:65:BA:77:B2:AD:EB:8B:73:E7:8C:49:96:A1:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/f4a53b88-f61d-3fb1-9d4b-9b67f74ce5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:fa:9c:f2:23:eb:db:48:42:73:1e:93:43:c8:c2:2e:1f:8a:
         92:1e:ba:21:c2:e7:ab:fb:1d:d9:03:48:fd:2a:2c:6a:dc:22:
         7f:d4:71:84:b8:01:62:67:91:a1:64:b1:26:a8:9a:51:b2:8f:
         d8:09:9a:36:24:7e:38:f9:10:61:94:25:29:9d:74:fa:e9:9b:
         d0:27:0d:18:e9:25:63:f1:d6:c2:df:67:e4:a6:f8:04:14:a1:
         67:cd:4c:e7:cc:a1:f2:f7:02:37:5b:18:bd:8f:27:e0:cc:52:
         c1:fe:53:f4:9f:2f:ed:6a:a8:4f:93:49:4c:48:cf:a0:96:21:
         2f:78:93:03:a6:2d:bc:70:1e:df:a8:c6:85:36:a8:b0:d1:9d:
         db:63:5e:e7:27:1c:a1:7f:4f:23:5a:fc:d1:6e:d9:c4:18:fe:
         47:fd:fd:c3:f7:6f:46:8f:9e:0e:95:40:2a:58:95:48:93:fd:
         68:43:80:ed:c6:6e:8f:26:7b:6a:0e:e6:30:b5:df:fa:25:fd:
         44:d0:52:c4:3c:ff:68:bb:a4:cd:51:c4:22:15:8d:29:2f:cc:
         72:fd:d4:63:c3:73:bb:b3:b1:13:2f:4d:8a:bd:19:70:9d:97:
         a9:c5:0d:ad:c8:f8:a0:83:75:d8:27:62:e0:63:e0:49:a9:c8:
         e1:9b:c4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:17 2025 by rpki-client