Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/d6cd333f-6142-3e9a-8cfd-4aeba551a121.roa
File:                     d6cd333f-6142-3e9a-8cfd-4aeba551a121.roa (raw, json)
Hash identifier:          /egWw29HZ9UYUQDdw9ZgARiFA5CKPwOz7tuT6dcQOis=
Subject key identifier:   01:B2:31:50:F7:96:1D:86:DD:74:F5:BF:8B:37:00:C4:44:AC:E8:A1
Certificate issuer:       /CN=926b4ddf-17df-417e-972b-c86cc410fed2
Certificate serial:       010D0C9F4328584B1806C65BF529702B7E0E8B00
Authority key identifier: 10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/d6cd333f-6142-3e9a-8cfd-4aeba551a121.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        64.56.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c6:5b:f5:29:70:2b:7e:0e:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=926b4ddf-17df-417e-972b-c86cc410fed2
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=2f189b33-9845-4a53-a7da-f06ab29e2cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:1c:95:a5:f3:56:81:13:47:03:f4:81:12:
                    7f:d0:c8:1e:05:55:38:8d:c2:49:e8:33:4f:63:b9:
                    70:8c:8a:2c:fa:03:a8:b5:57:ac:b8:a2:bd:14:bf:
                    9c:69:14:bc:0e:e6:e0:fd:6b:53:dd:d0:f4:59:52:
                    df:cb:cc:7a:6d:0b:9a:7f:17:4a:d6:52:37:33:3b:
                    21:93:69:85:9a:ca:ed:60:fd:6b:83:f9:2f:4d:f2:
                    a4:4e:87:73:cb:f3:4d:fe:99:25:a1:61:b5:e0:88:
                    fe:ae:0e:bc:9b:7c:5f:88:68:c6:91:45:9a:5c:bb:
                    26:a6:83:a0:48:98:7a:2e:7d:99:01:b0:2c:82:8e:
                    54:dd:64:fa:87:07:a3:91:e9:50:11:01:ee:26:0d:
                    10:6c:2c:22:09:30:26:02:84:2c:dd:5f:90:4e:ba:
                    62:c7:a9:c7:90:6a:7d:6d:93:60:a7:fe:2e:6b:c7:
                    c4:73:54:35:0d:0c:19:d4:4c:2b:7a:b7:f6:3a:e6:
                    f3:41:54:51:c0:10:24:89:7a:36:0b:18:46:39:39:
                    5b:48:20:43:0b:b3:2e:49:71:58:8f:e4:77:cc:0a:
                    d2:5a:5b:5d:70:5f:e5:cf:1d:b3:49:9b:b7:9f:be:
                    13:02:9c:16:da:65:36:2f:ff:b1:2d:2d:cc:b5:fa:
                    db:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:31:50:F7:96:1D:86:DD:74:F5:BF:8B:37:00:C4:44:AC:E8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/d6cd333f-6142-3e9a-8cfd-4aeba551a121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2/926b4ddf-17df-417e-972b-c86cc410fed2.crl

            X509v3 Authority Key Identifier:
                keyid:10:57:31:6E:07:F8:5A:4F:36:73:23:D3:F2:37:89:9E:36:C0:BE:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/926b4ddf-17df-417e-972b-c86cc410fed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.56.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:e2:7d:67:9c:1d:a3:b3:f8:21:b6:04:23:c4:68:f3:f0:
         31:67:14:a3:ca:ee:4e:f9:82:dd:a8:fd:bc:a4:50:b3:ae:c1:
         d0:90:f2:a1:72:ee:ee:fd:db:b8:8b:3b:7c:32:3d:5d:53:66:
         fa:df:1c:66:a9:e9:1a:e5:2b:01:9e:09:ee:70:d1:5a:f1:0f:
         4f:e8:cd:bb:31:af:e8:70:1e:7e:c7:69:b6:06:5d:c5:82:05:
         4e:2f:8b:8f:7c:3f:95:be:c6:92:f4:d9:f0:6a:5c:d4:71:58:
         24:e2:34:ef:92:82:78:e9:c1:ef:60:5a:b0:8a:77:1e:87:43:
         09:1a:b2:17:39:a3:63:cb:c0:3c:34:66:0a:75:ba:08:47:ed:
         a8:a1:4c:93:ac:cc:b8:0f:a7:0b:40:07:dc:50:fd:04:4b:44:
         90:f5:27:d1:bd:eb:e0:1d:c9:99:95:5c:9a:35:ca:f5:cc:be:
         d5:6b:4d:c6:6c:eb:6b:ac:1b:54:0e:8d:93:4f:c8:2b:1e:0e:
         7b:53:ed:1f:0b:9c:43:fd:b5:a0:c6:c3:5b:2c:8f:e2:1b:eb:
         05:fc:f5:cd:c2:49:1e:ca:19:43:d9:0e:06:b5:94:c8:58:e6:
         21:3e:8c:a5:4c:dd:ee:54:b7:b3:ae:d4:b6:93:79:fa:7d:fb:
         9e:03:78:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:44:50 2025 by rpki-client