Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa
File:                     1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa (raw, json)
Hash identifier:          QWUXWAnu4u76aaaootxZlkJdCgMzj5NZt3RxoSlfkag=
Subject key identifier:   94:1F:A1:A0:5A:F8:EF:2F:6E:A5:0C:CD:C5:10:0D:B2:A2:1B:2E:43
Certificate issuer:       /CN=ff5006d4-d71a-4b01-bf1d-de487fff7073
Certificate serial:       010D0C9F4328584B25FC32DD8864A71EFE5EADD8
Authority key identifier: D2:06:20:32:B0:69:60:9A:06:F4:1D:2A:65:35:6E:EB:CE:80:8A:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     19740
IP address blocks:        64.110.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:32:dd:88:64:a7:1e:fe:5e:ad:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff5006d4-d71a-4b01-bf1d-de487fff7073
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=8cd9c122-1c4e-4a87-9453-ebcd451d0abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:51:f1:8b:49:6b:c8:e6:57:f2:2b:72:9b:ba:
                    65:b8:25:cf:5c:ce:6b:9c:44:63:09:ad:fd:a7:46:
                    a4:9f:70:02:11:aa:b6:aa:2a:8f:89:fa:fd:b5:92:
                    1f:f4:96:b4:4a:16:49:f7:d7:85:c8:cf:10:10:51:
                    ee:76:75:c8:0e:d4:93:e4:77:da:d6:a5:5b:2b:d4:
                    89:0e:60:16:66:b3:87:d5:54:b7:47:06:4c:96:5f:
                    30:c2:3e:74:f0:3a:90:dd:87:c2:11:aa:2e:9f:4d:
                    14:9c:4d:9c:37:a4:cf:57:7b:13:d1:7f:e8:83:f3:
                    b9:95:52:cf:db:83:6f:f5:5e:7f:88:11:49:96:24:
                    f9:f1:e7:18:9f:46:6c:f6:3c:2d:48:98:ef:89:90:
                    f9:2d:72:0a:a2:ba:0d:06:81:0f:bb:e6:79:0b:1b:
                    a4:bd:a5:cc:e4:f9:52:d3:84:be:1b:81:91:b2:e6:
                    a9:7c:6a:7d:17:01:21:2e:00:44:8f:4b:64:7c:a2:
                    91:5b:4b:9c:a0:7f:a7:82:ec:0b:e1:30:bb:8b:28:
                    e0:08:75:e6:08:da:69:48:35:c3:fe:87:8a:f2:e2:
                    1a:32:01:01:81:5c:5b:98:bd:d8:31:2c:fb:cb:4f:
                    79:82:7e:6a:b1:3b:2e:2d:45:e5:7d:37:e6:da:c1:
                    0b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1F:A1:A0:5A:F8:EF:2F:6E:A5:0C:CD:C5:10:0D:B2:A2:1B:2E:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/1f484117-59c6-3d1d-8eb8-6423a5cf5943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073/ff5006d4-d71a-4b01-bf1d-de487fff7073.crl

            X509v3 Authority Key Identifier:
                keyid:D2:06:20:32:B0:69:60:9A:06:F4:1D:2A:65:35:6E:EB:CE:80:8A:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ff5006d4-d71a-4b01-bf1d-de487fff7073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a3:fc:64:3c:49:c6:48:b3:ab:c8:30:d5:fe:dd:d8:4f:2e:
         d9:af:57:f6:33:be:a1:7c:ca:e1:67:bd:b3:52:07:bf:2a:40:
         32:4f:43:6d:85:b4:d1:cb:a9:43:39:29:f0:29:dd:25:69:34:
         33:68:80:bb:16:87:de:7c:a8:9a:ce:a6:b1:25:61:99:a6:2a:
         1a:0e:06:8d:ae:55:78:0f:fe:c1:99:db:9a:5a:ad:39:5d:25:
         8a:d6:10:1c:3f:3d:48:c3:10:1c:9c:37:f6:e3:44:02:7a:e3:
         cf:17:32:16:64:ee:d2:bb:e6:d0:42:0e:70:4d:0f:33:0f:52:
         db:ac:39:f9:ed:dc:28:86:ad:d2:3e:94:fd:de:33:77:07:88:
         ec:18:af:fd:e3:dc:07:ee:97:00:5e:82:ed:7a:8c:a8:71:0a:
         65:dd:ea:e3:12:2a:82:62:93:b8:17:85:cc:9a:61:a5:dd:45:
         3d:89:ad:d2:71:a0:54:de:aa:5e:9b:14:46:72:f0:70:65:30:
         5d:05:0d:9f:43:fb:45:40:75:bc:58:fa:57:29:fb:82:6f:25:
         ba:b3:0c:7b:32:f1:68:40:12:6a:dc:72:0a:c6:2e:80:89:96:
         ec:43:3e:70:82:62:52:2c:12:02:89:08:25:e5:4b:bc:53:8e:
         8b:dd:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:29:46 2025 by rpki-client