Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa
File:                     8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa (raw, json)
Hash identifier:          Wu4dVaFvmzZVRl9nv0e3sMPV7IQ+X1R6cTbiuRRlMhg=
Subject key identifier:   51:9F:4F:5C:B4:16:D1:EE:CB:E9:33:C8:A5:B0:52:FA:A5:D0:97:A7
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F4328584AFC1BEF741F1C6458FF7D2F00
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa
Signing time:             Tue 26 Aug 2025 13:00:41 +0000
ROA not before:           Tue 26 Aug 2025 13:00:41 +0000
ROA not after:            Mon 24 Nov 2025 14:00:41 +0000
asID:                     397373
IP address blocks:        64.29.80.0/23 maxlen: 24
                          66.180.130.0/23 maxlen: 24
                          66.180.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:1b:ef:74:1f:1c:64:58:ff:7d:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Aug 26 13:00:41 2025 GMT
            Not After : Nov 24 14:00:41 2025 GMT
        Subject: CN=ff6a2c42-8cd9-49bb-99b3-97399d3117cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:d5:50:e4:cc:88:2c:73:48:d9:be:c5:c7:
                    5d:20:e5:04:bc:32:80:d3:56:12:04:90:1d:51:b2:
                    23:e2:08:26:3b:2e:59:40:29:e3:86:cd:ba:ae:33:
                    42:b3:3d:a3:4d:c7:da:ff:b3:cb:2d:42:a7:d4:d7:
                    c3:8c:a0:ee:95:95:99:4b:dd:82:0d:a9:52:3e:6d:
                    5a:98:3e:de:11:0f:a2:98:59:2e:a7:cf:fa:1c:54:
                    6a:7c:d9:3d:b8:d7:89:57:6b:85:ea:59:a8:35:93:
                    86:8b:6c:ae:79:2b:18:e6:9d:aa:6c:08:e2:f4:e5:
                    4b:8b:ca:e5:05:82:1f:73:9c:47:03:54:2f:ea:68:
                    62:45:a8:45:a4:f1:aa:08:26:96:5c:29:23:15:4d:
                    6b:99:16:20:b6:b7:0a:48:ed:d1:6c:67:4a:5d:36:
                    96:56:24:90:7f:da:2f:00:0b:9c:12:15:8d:bb:ba:
                    d9:42:63:55:ac:ba:f5:91:c2:5d:9f:71:b8:f4:e3:
                    28:3b:4e:f4:fe:e0:70:86:79:8f:6e:fe:20:b3:1b:
                    5e:83:35:51:f6:c9:6b:01:2a:f6:c3:f7:5b:e4:ea:
                    51:0b:f8:b9:67:85:e6:88:06:75:b5:c6:d1:18:12:
                    f8:69:db:96:0a:76:88:de:6d:7a:2d:50:e8:8f:1b:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:4F:5C:B4:16:D1:EE:CB:E9:33:C8:A5:B0:52:FA:A5:D0:97:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/8f632fa5-1ad1-3706-a558-8ac46d2f2710.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.80.0/23
                  66.180.130.0/23
                  66.180.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:82:f9:dc:78:c3:45:e3:9f:21:3a:ee:af:6e:fd:55:d8:
         31:c3:77:27:47:5b:b3:5a:5e:cb:66:5b:46:1a:31:b7:25:74:
         d4:d7:ee:0c:de:5c:b3:fd:26:7b:c1:50:34:47:20:8b:89:31:
         1a:83:b6:7b:87:80:fa:e8:e6:37:43:b9:74:e2:ec:df:3d:81:
         c7:7c:d9:29:4b:21:ca:94:e7:51:a3:70:9a:b8:82:8b:b7:9f:
         c2:60:33:37:79:d8:63:cd:9a:18:98:74:c3:6f:37:73:e0:be:
         03:be:3a:6d:bb:d9:5b:d7:6c:ce:38:d6:c0:2a:96:17:73:2b:
         86:7e:a8:5f:a8:d6:80:6d:47:da:09:c9:2c:60:30:42:72:94:
         96:06:96:49:a2:cf:2b:63:df:bf:5a:2e:81:70:88:b9:0f:71:
         45:cd:18:61:fc:56:9c:09:cb:44:df:5b:fa:09:30:87:32:ac:
         64:70:84:8e:dc:e3:34:ad:ba:88:2f:92:dd:67:97:f5:c1:14:
         55:62:8f:44:de:7a:71:e0:1a:a5:6b:af:88:f1:d5:68:bd:18:
         65:1a:e6:9f:d4:5d:ea:a3:62:f1:0a:77:c8:6c:10:7a:0c:c8:
         d2:30:95:32:69:91:40:15:8c:8b:d8:24:d0:a0:7a:9e:0e:4a:
         58:dc:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:05:19 2025 by rpki-client