Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa
File:                     293b9a63-68dd-3a71-b379-c7a61017c37f.roa (raw, json)
Hash identifier:          3+Pky2s91Txe/w2h+J2eV1vjJJ6xxlDzTvfnnBv/pM4=
Subject key identifier:   4E:B6:3D:3C:4E:E7:AD:B6:E3:9A:D9:4B:44:B9:F5:4D:C0:CE:AB:1A
Certificate issuer:       /CN=5f5ca213-518b-4ee7-9fb6-854fa2002a11
Certificate serial:       010D0C9F4328584B2496C9C8C01D571B29E08380
Authority key identifier: 6B:CB:1B:C1:65:27:AA:68:53:70:A9:D4:B6:2F:21:84:1E:C7:19:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     36640
IP address blocks:        64.40.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/5f5ca213-518b-4ee7-9fb6-854fa2002a11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/5f5ca213-518b-4ee7-9fb6-854fa2002a11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:c9:c8:c0:1d:57:1b:29:e0:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f5ca213-518b-4ee7-9fb6-854fa2002a11
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=d5588b63-6bfd-4fcb-ae0e-8573dffa3e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:8e:0b:f5:8f:9e:09:b6:1e:eb:47:db:93:
                    df:cd:c2:fc:32:15:66:84:85:bf:1c:74:f9:76:6f:
                    f2:13:73:24:54:0f:cd:17:1c:b9:80:df:61:e7:76:
                    b9:18:03:d8:0a:2c:5b:3a:cb:e2:88:4e:49:fd:ad:
                    d4:f8:bc:41:61:28:14:b0:ab:3e:b1:04:5e:9b:09:
                    06:ed:e8:2f:1f:30:89:4d:cd:d8:25:8f:5c:02:ff:
                    98:f7:75:47:de:3f:e8:e3:68:d2:b2:69:02:e4:ab:
                    78:c4:35:cd:01:db:16:69:ae:51:d7:10:12:7c:1f:
                    82:db:e0:2f:ee:4f:36:ad:90:d1:a0:62:ba:17:3c:
                    fb:d3:08:4d:8a:52:cc:6a:bc:46:65:fb:ed:7a:95:
                    ee:f4:f0:c6:9a:b9:fa:35:98:1d:5c:09:15:5b:80:
                    14:76:48:1b:05:0f:51:5a:2b:c3:48:42:ec:d9:f1:
                    9f:e7:6a:78:b9:83:44:3b:71:80:c0:2a:4c:77:45:
                    59:97:1c:38:64:a7:d7:58:e2:d0:0b:bd:0a:73:a4:
                    5d:1a:81:da:4a:19:f1:c6:4c:0b:4c:6b:53:b9:a7:
                    af:4b:56:f0:46:75:a9:68:64:cd:4f:31:1d:87:4c:
                    3b:e4:ad:65:41:66:5d:c5:74:a6:47:1f:ad:a5:a8:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B6:3D:3C:4E:E7:AD:B6:E3:9A:D9:4B:44:B9:F5:4D:C0:CE:AB:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/293b9a63-68dd-3a71-b379-c7a61017c37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11/5f5ca213-518b-4ee7-9fb6-854fa2002a11.crl

            X509v3 Authority Key Identifier:
                keyid:6B:CB:1B:C1:65:27:AA:68:53:70:A9:D4:B6:2F:21:84:1E:C7:19:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f5ca213-518b-4ee7-9fb6-854fa2002a11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:34:da:4f:b6:ce:82:26:73:99:f7:fc:50:e2:d5:d9:1c:59:
         fb:f5:ce:48:e3:fa:9e:c5:2c:54:61:b9:ad:05:07:39:72:28:
         ba:7f:54:b7:4e:fd:74:27:73:5d:10:95:66:1a:8f:e0:2a:be:
         94:cf:9c:fb:c9:94:ad:c2:c8:83:bc:0a:5a:40:15:e3:ef:d8:
         c7:00:be:a1:39:75:8f:78:46:b6:65:7d:73:4b:71:0d:ae:56:
         15:5f:84:e6:dd:87:af:1b:bd:72:10:59:af:32:7b:13:c4:44:
         b7:78:50:85:a9:d2:16:65:42:10:af:46:9e:f6:c0:95:88:f8:
         70:28:1c:d7:42:ce:38:1b:8e:d7:6e:bc:c1:2e:27:fe:77:a1:
         16:68:15:d9:b3:6f:bd:e2:a0:09:92:de:9c:cb:09:b7:22:e9:
         92:7a:95:8c:5c:ee:29:01:64:29:ec:64:7d:fa:b8:7e:be:b7:
         78:5f:9e:71:a7:ae:27:f6:f9:2e:a4:2f:f4:39:98:7b:cd:d7:
         2d:ab:0a:cb:c9:fa:ab:c5:99:1a:b6:66:21:c5:fd:16:a1:4f:
         f9:f8:8d:bc:4c:a0:d4:0c:65:6a:75:1a:52:49:36:5b:4d:b3:
         46:84:79:e0:88:1d:7e:9a:03:83:d6:8f:e4:3e:31:2a:8b:a1:
         1d:44:c6:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:55 2025 by rpki-client