Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa
File:                     e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa (raw, json)
Hash identifier:          +yr56nCBgrVO5Cqf3m1k+cdB3I0/qs9DI+iTw/ni72g=
Subject key identifier:   65:6B:4A:AE:C0:69:2C:9A:BC:3D:D3:98:B3:A5:62:3B:68:DF:91:AF
Certificate issuer:       /CN=3d1c553d-7b57-40d6-a02c-deff888b678d
Certificate serial:       010D0C9F4328584B3556E527AF947C75ABE13E00
Authority key identifier: C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        64.65.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:56:e5:27:af:94:7c:75:ab:e1:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d1c553d-7b57-40d6-a02c-deff888b678d
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=d381236b-1299-4b35-aa61-5913031702a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7e:66:c9:aa:65:3a:f9:96:90:46:df:59:b2:
                    ae:d8:9c:97:61:c5:d1:84:32:2b:13:e9:1f:ec:a6:
                    b6:07:94:02:b5:69:e0:dd:e6:df:ee:90:01:6f:a0:
                    a1:f2:7c:02:00:c7:80:47:f9:12:11:c9:b0:de:fd:
                    08:43:57:9a:b7:f9:dc:8c:8e:e0:f4:94:77:37:3c:
                    37:8f:21:8a:bd:0b:02:26:dc:da:cb:00:65:6e:03:
                    d8:d0:0b:21:b9:a5:af:fc:3a:b0:4c:f0:60:76:c3:
                    19:33:16:44:aa:f4:dd:60:f2:e5:28:23:9a:de:cc:
                    16:78:64:1f:aa:b6:17:a8:62:ef:9e:29:7b:f1:9d:
                    dc:bb:27:5a:22:b2:66:bf:8a:61:7c:42:2b:e3:35:
                    c1:f4:3d:38:ce:88:a2:11:04:d0:dd:c4:30:90:fa:
                    0d:b6:6d:0f:85:ad:88:64:fb:f8:72:d5:6b:c8:68:
                    6d:eb:7e:d2:70:ce:f9:b1:20:d5:ab:45:ff:e9:f8:
                    30:08:03:ac:eb:9c:4f:9c:a4:21:a9:79:4b:9e:e1:
                    e0:99:f8:f8:ac:3b:68:46:a8:81:12:62:85:c2:82:
                    80:67:fc:e7:c3:82:ea:2b:28:a0:12:55:d9:cf:d7:
                    95:78:1a:f5:c5:47:1e:92:8f:2d:fc:c5:97:5a:cc:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6B:4A:AE:C0:69:2C:9A:BC:3D:D3:98:B3:A5:62:3B:68:DF:91:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/e157e3cd-7b83-3aa8-9c11-51a53aa79d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d/3d1c553d-7b57-40d6-a02c-deff888b678d.crl

            X509v3 Authority Key Identifier:
                keyid:C3:50:10:57:56:61:51:2F:FA:51:AD:FB:AC:E7:E9:57:3C:D5:7D:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3d1c553d-7b57-40d6-a02c-deff888b678d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.65.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:d7:54:e4:11:79:90:79:eb:3c:1b:db:57:af:0f:07:bb:ad:
         c1:f7:29:7c:25:c0:3f:71:ee:63:91:5c:65:a4:4e:0d:bc:52:
         f0:b3:2e:df:ce:c8:dd:f2:7e:cb:5b:d8:98:c0:34:f9:a1:f2:
         eb:9c:13:79:89:f2:19:fc:e8:d2:9c:89:4d:6f:9e:b5:cd:28:
         a9:cb:bc:1f:49:1a:9e:fe:4e:54:08:9a:6b:84:8a:92:75:e5:
         cd:80:9a:f0:11:5d:11:17:24:77:02:b9:59:44:c9:b9:0f:93:
         a8:b2:2e:77:6b:51:09:18:4d:e5:d5:32:95:e0:71:fe:f2:b3:
         8f:87:81:92:77:b7:6e:79:4e:d5:f7:5d:a6:75:14:55:c5:b0:
         18:bd:29:60:46:4e:8a:96:d4:99:f5:d4:d6:b6:2d:89:90:80:
         a6:bb:a9:d5:3e:89:d3:02:93:2e:9d:21:e4:80:3b:3f:d7:68:
         8b:02:f5:e9:6f:5e:dc:a2:6c:f2:48:a1:28:0e:d7:54:d3:2b:
         87:6f:e4:68:68:51:4a:3b:b8:4c:66:a2:b5:f6:48:44:05:3f:
         0c:9c:b5:41:f2:d1:e7:bf:c8:1f:f0:c8:f5:5d:8b:33:12:e3:
         03:ac:3b:d5:cf:d6:6f:67:a6:d1:ca:4e:3a:24:2a:27:ca:ca:
         0e:1a:48:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:49:41 2025 by rpki-client