Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
File:                     0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa (raw, json)
Hash identifier:          lRq36UpsfyS9uau8Pt8Wf8WqxAVi3/9GDXhvclmvJR8=
Subject key identifier:   1C:1A:4F:60:88:33:C6:D0:FE:27:E1:E4:70:66:53:CF:CF:3F:22:E9
Certificate issuer:       /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial:       010D0C9F4328584B13D6B2F52A3617B27540FA80
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     395713
IP address blocks:        64.56.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b2:f5:2a:36:17:b2:75:40:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=240919bb-c0ba-4404-9686-910228e889a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:14:de:3d:d7:18:e6:d7:48:68:49:e2:4f:
                    aa:67:6c:03:b7:be:f8:f9:dd:77:03:09:01:9e:77:
                    e7:dd:64:82:bc:5c:20:5b:ad:2e:d3:2f:b8:23:43:
                    bb:1a:0d:bf:76:9e:b9:e9:56:eb:d5:3a:d0:fd:2f:
                    69:8c:29:23:8a:eb:91:f3:0d:ea:77:bd:4a:5c:80:
                    ee:2d:27:c6:6d:f6:9e:5c:72:9e:47:dc:ba:66:79:
                    34:49:ba:63:cd:e7:3e:5e:b9:4f:14:91:c4:3b:4c:
                    8f:45:6f:11:41:8e:89:c4:c2:a3:e1:a9:da:ea:aa:
                    3a:ba:45:ca:e6:56:0a:28:4b:64:c4:e6:50:0e:a1:
                    1e:5a:f2:87:07:f7:a2:b4:7d:df:b9:a9:41:dd:2d:
                    99:58:d5:d6:54:ee:88:c2:0e:da:ed:ad:98:23:ee:
                    12:c4:b1:87:5d:00:5c:26:ab:70:29:88:b5:67:76:
                    da:22:34:86:7a:53:24:5d:7f:26:69:12:f9:f8:ea:
                    32:63:84:b8:2f:a6:a9:23:50:54:e9:3e:a6:71:d2:
                    c1:13:18:13:e2:c7:19:e8:d2:37:74:0e:58:ae:c1:
                    fa:d8:c3:df:b0:a5:53:c1:28:2d:9a:40:25:11:4e:
                    18:f8:82:e5:c2:11:92:b9:37:e0:5a:15:3e:da:e9:
                    2f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1A:4F:60:88:33:C6:D0:FE:27:E1:E4:70:66:53:CF:CF:3F:22:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/0318cf55-47d4-3640-9ddb-6388db5f3fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl

            X509v3 Authority Key Identifier:
                keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:38:e5:69:07:86:f2:de:fa:cd:07:2c:50:b7:ae:3d:05:d8:
         0b:61:04:05:91:75:a1:26:bb:d7:c2:41:49:1e:59:d7:4d:69:
         6c:8f:7b:4b:40:a2:8f:a2:24:c2:38:5d:8a:e2:ce:25:af:dc:
         f4:3a:3e:b3:f3:b4:0c:77:39:0b:09:ee:46:2d:07:34:ef:a2:
         02:f7:28:64:73:71:30:95:ee:36:57:82:13:ba:df:ef:e8:a2:
         08:2d:65:58:4b:46:34:a5:1e:0c:d8:ef:ba:64:05:42:fc:73:
         f3:61:fb:4a:d0:46:09:e9:88:30:eb:66:5a:27:b4:0f:53:73:
         64:20:b5:54:d6:b7:63:4a:94:28:05:99:a6:fe:7a:50:f7:98:
         49:95:23:1f:2a:cf:d3:16:e7:fd:8d:45:10:22:8b:91:c7:4b:
         61:24:6c:b4:f8:18:dd:f2:74:1f:ac:79:51:94:93:51:85:69:
         0f:4f:81:27:d5:c1:f9:58:ed:b5:d7:80:1a:ad:b4:23:17:40:
         04:f2:45:5a:a3:0c:50:95:81:bb:79:91:2d:99:63:32:04:b9:
         92:ce:81:90:a9:b2:fb:32:3d:c7:56:4e:1c:96:5d:e5:91:b7:
         b4:f8:39:c1:b1:37:95:fb:0f:0d:4c:55:c3:dc:74:7e:c6:6a:
         c4:1b:6b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:36:00 2025 by rpki-client