Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/1175ec58-d7b6-312d-adbc-1335d827d838.roa
File:                     1175ec58-d7b6-312d-adbc-1335d827d838.roa (raw, json)
Hash identifier:          hrw9AaD5GAtYQpZA7gJ2L3SA6Sc825Cl9A9PZ81oqY4=
Subject key identifier:   BE:19:B6:DD:A8:42:AD:45:66:2E:05:A8:A8:5B:7E:53:FF:8F:93:77
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F4328584B1F0171D684A44EEF9426CF40
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/1175ec58-d7b6-312d-adbc-1335d827d838.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        64.6.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:71:d6:84:a4:4e:ef:94:26:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=3cdd764a-c6ff-448b-aea8-c3bb5cf496ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:94:ce:81:91:35:8c:36:be:34:a4:08:20:
                    ea:99:41:48:41:50:e4:55:9e:ac:d2:eb:a3:9c:4e:
                    2a:cf:ad:07:cd:9d:6e:10:88:15:b8:f0:19:49:9b:
                    6e:da:be:44:ae:b6:18:27:f4:ad:51:2f:c4:2b:75:
                    b9:17:f9:02:8a:9d:81:15:0e:ed:3d:cf:ec:f1:53:
                    51:ef:83:a1:93:e4:7e:b5:51:b5:4c:11:5f:47:67:
                    fa:9d:9c:91:e2:83:7b:3e:7b:e9:c0:ee:db:bd:bb:
                    93:ba:1e:da:98:34:28:38:a1:e4:24:98:8f:fe:f2:
                    ac:30:97:3e:09:a6:4b:b3:4f:54:0e:c9:58:94:5d:
                    06:fb:42:3f:22:ef:cb:f4:ed:b3:1c:bd:a5:12:68:
                    fc:70:66:fd:a4:d1:4e:83:13:35:11:f0:94:9a:fa:
                    a7:75:f7:07:77:58:f8:6b:69:5b:b9:25:c7:4a:7c:
                    29:0c:3c:34:a5:13:55:a0:c4:29:14:8c:4a:7f:a8:
                    18:ae:5f:75:49:2e:30:3d:43:48:63:8a:18:15:09:
                    e4:89:cd:ee:dc:43:67:9a:86:01:3a:10:f1:a7:8e:
                    55:c6:28:44:df:55:38:4b:39:2c:51:72:36:3d:5c:
                    f0:ba:59:ca:51:43:fd:d8:12:b9:ab:1e:21:0d:fc:
                    24:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:19:B6:DD:A8:42:AD:45:66:2E:05:A8:A8:5B:7E:53:FF:8F:93:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/1175ec58-d7b6-312d-adbc-1335d827d838.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6e:f3:3f:c9:e9:93:41:34:ec:f6:21:b1:14:31:8b:0e:33:
         9e:64:f7:77:36:c2:12:20:bf:05:24:5c:e0:40:70:a4:a1:c0:
         8e:c5:6b:21:ff:bb:4f:9f:f8:9a:ba:8c:36:fe:50:38:0a:0e:
         37:05:f9:b3:70:be:86:53:4c:83:3c:0e:e9:c4:64:30:52:78:
         12:30:04:21:0f:1d:93:a2:c2:13:2d:87:28:19:25:ac:64:6f:
         8e:18:43:65:ae:df:26:5b:4d:df:37:e7:7c:66:a5:d7:e5:2c:
         07:14:19:c2:58:18:57:c4:67:2e:15:b7:26:06:38:37:82:57:
         75:33:0b:93:4f:c9:39:b9:50:61:d2:d9:1e:bb:30:d0:16:84:
         bf:ad:cd:2e:81:37:d3:6c:55:9e:b3:46:ff:b1:21:a7:b6:3f:
         c6:ad:12:73:0b:21:75:7b:dd:35:73:68:04:b5:6b:26:aa:05:
         ea:70:86:b2:0c:6a:63:40:1d:14:d7:79:06:e2:8f:f2:57:f3:
         13:a2:e0:53:e3:d1:4e:e6:69:55:19:65:1b:27:45:1b:6f:bd:
         c4:d8:db:22:23:96:f1:80:35:e9:df:af:30:c8:63:38:b2:68:
         aa:ea:d9:d7:11:fc:2c:50:67:f1:88:ec:dc:08:f9:33:4f:0b:
         a4:6d:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:34:38 2025 by rpki-client