Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
File:                     603d6a12-edba-37c4-bd67-825034ce3d96.roa (raw, json)
Hash identifier:          OF86RIIQVJCE5ZTxomPN58r2ldIwUo+2Wcf648op6ys=
Subject key identifier:   49:F4:7B:39:C1:7A:97:59:F1:43:07:B6:CF:E5:40:3A:B8:B6:59:0A
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584B153C1B78AC6B259A1DDA5E00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        64.84.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1b:78:ac:6b:25:9a:1d:da:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=86799cb9-d936-41cc-bcf1-72032ea4bcc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:fc:ac:2f:fe:60:e8:34:22:97:9a:ef:63:ff:
                    45:aa:fd:df:67:c9:1a:31:6f:8c:e2:35:dd:10:61:
                    d5:29:0b:fa:41:da:65:45:69:52:30:71:d0:ba:28:
                    4c:4f:55:a1:0c:83:a8:d5:8c:0e:47:0c:06:6c:58:
                    f5:da:2e:11:0d:30:2e:13:8f:bc:64:f6:63:21:d5:
                    4e:12:49:e3:12:81:fc:3f:53:45:8e:34:e9:5c:82:
                    10:f3:25:bd:e9:ab:e8:40:c2:45:a9:65:ad:da:66:
                    6a:d2:42:ee:12:1b:30:87:74:78:1b:7c:15:47:42:
                    1e:21:0a:2c:ca:43:31:85:67:56:49:20:1d:aa:d5:
                    27:45:1d:6e:c5:62:62:03:aa:76:9a:96:76:35:8f:
                    6a:19:e9:5e:e8:76:7a:f1:84:52:37:65:4e:b5:3b:
                    ab:41:38:65:78:50:55:8b:ac:e6:6c:3d:0d:df:f6:
                    f8:7d:10:e2:7a:e3:8f:6f:ec:78:fd:fe:6b:b9:81:
                    89:29:ba:41:0d:8a:d8:e3:4d:61:92:75:fe:8c:73:
                    55:09:b8:a3:d3:65:09:08:be:61:73:67:a5:83:30:
                    22:9f:71:fd:06:9a:af:a5:8d:01:8d:a8:b5:26:2c:
                    82:97:43:96:8d:a1:81:41:69:52:17:37:77:57:44:
                    2a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F4:7B:39:C1:7A:97:59:F1:43:07:B6:CF:E5:40:3A:B8:B6:59:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:7d:a4:a7:ab:1e:18:a6:c8:cd:5c:2a:da:27:25:fa:22:7e:
         02:28:05:30:28:fc:cb:63:6c:26:b4:00:7f:c4:81:a0:9b:8d:
         ff:91:15:42:38:95:c7:09:5e:a9:ed:20:24:dc:3d:8a:2a:4a:
         8f:74:f4:07:20:c2:c7:53:4f:77:ea:05:f1:67:11:4d:c5:75:
         7f:00:eb:fa:02:aa:35:42:58:90:15:32:34:82:e1:36:49:4b:
         8f:24:62:03:09:04:ee:66:83:d9:c7:38:e4:0d:c3:8c:48:61:
         36:a3:6b:9c:be:5f:14:1b:7d:8f:d6:f9:e6:f8:93:c5:00:71:
         7a:1f:69:d8:39:38:78:9d:90:4c:be:21:35:c6:1d:4c:9c:2e:
         20:61:f0:bd:a8:e4:78:47:35:60:be:6c:0e:77:4e:aa:4a:64:
         d9:01:96:8b:3c:e0:1a:ca:1f:2b:37:c5:91:9c:b2:f2:49:d9:
         8f:08:5a:fa:f8:0d:e8:89:9d:3f:58:7f:ed:b1:14:c3:63:29:
         ba:3a:1f:14:fa:cb:0e:ac:26:3a:bd:3c:7e:ab:1a:8d:c3:86:
         f0:f7:e8:0e:ed:3f:12:82:2c:a4:31:01:08:75:00:73:9c:4f:
         16:a2:c0:65:d9:28:4f:13:26:5f:ed:15:6a:d0:a2:35:52:cd:
         6b:09:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:18:28 2025 by rpki-client