Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7544d0a0-0e30-35b0-b458-9af32310922e.roa
File:                     7544d0a0-0e30-35b0-b458-9af32310922e.roa (raw, json)
Hash identifier:          trQ5D3J2EVPTvlLmUsmxzp2iWlhMY4bCs7N79snGteQ=
Subject key identifier:   F2:38:7F:E9:66:5E:64:76:CD:66:83:5B:41:FA:F5:A4:85:1E:B2:21
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B52A750350A7597E491DDA020
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7544d0a0-0e30-35b0-b458-9af32310922e.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     64286
IP address blocks:        64.64.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:50:35:0a:75:97:e4:91:dd:a0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=fb31c661-c269-481c-8262-396eab10a1a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1e:88:65:78:db:55:9b:1c:ee:e9:5b:1d:b9:
                    df:3d:69:af:3f:f7:a7:5b:2e:bb:25:81:66:99:ca:
                    fe:74:93:79:81:06:37:c6:dc:a3:b9:8e:a2:9d:97:
                    72:8d:88:b3:b0:63:09:be:32:d7:d2:52:94:ac:ae:
                    9c:dc:88:c8:1b:aa:34:d9:ab:22:b8:59:a4:36:3c:
                    92:79:b7:da:ed:3f:98:ee:c4:94:f6:67:f7:1a:a2:
                    96:c5:a3:8a:ec:e2:e0:90:97:be:ad:cf:98:16:bb:
                    8c:41:86:b2:34:75:28:bc:fa:8c:0d:aa:98:e5:74:
                    6c:6e:1c:e0:4b:a5:17:77:47:9d:ab:a8:45:97:ed:
                    06:74:7a:79:11:bc:c1:f6:0a:85:8c:80:7d:17:99:
                    e2:69:cc:ce:e0:ea:67:16:04:ae:a5:bd:79:28:eb:
                    8c:3a:b6:86:78:56:f1:2e:b2:17:9f:4a:99:e1:b2:
                    8d:02:0d:88:31:39:81:71:4a:70:52:65:0d:fe:f1:
                    19:a3:40:9b:c5:5e:eb:00:71:47:86:f6:ec:0e:b9:
                    ec:6f:a3:15:51:86:81:9a:77:f4:b8:4c:6b:59:69:
                    48:9b:8f:71:36:12:f4:bd:00:7a:4a:2b:07:12:ce:
                    58:1b:f2:cb:06:bc:f4:8c:a2:4c:a2:ab:38:94:56:
                    c8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:38:7F:E9:66:5E:64:76:CD:66:83:5B:41:FA:F5:A4:85:1E:B2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/7544d0a0-0e30-35b0-b458-9af32310922e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:21:b4:f1:ba:57:e7:35:56:1e:3c:b9:01:db:e7:d2:04:
         e5:7e:b9:9c:fc:fa:7f:44:e6:75:32:c3:2b:23:aa:29:de:91:
         10:7f:2b:a6:1d:f7:e7:03:6f:41:34:b2:12:03:32:ec:dd:a9:
         21:61:97:f1:04:c3:96:30:17:f5:d6:66:aa:34:5c:bf:ec:63:
         08:ce:2a:98:6d:8f:94:c5:57:da:2f:d2:a2:16:f5:8d:f7:cd:
         fb:d8:83:ae:54:15:06:f5:4c:53:e3:8e:e4:6a:ab:c0:40:86:
         58:d7:f0:80:5e:c7:51:d5:27:aa:2d:a5:c6:31:0f:3d:79:57:
         ec:d3:14:e7:aa:4f:4e:6d:11:1d:8e:77:89:31:4f:8e:88:1a:
         db:d1:69:85:67:98:e1:db:3d:38:aa:50:c5:3f:df:ad:08:c0:
         54:0c:b2:b5:a8:8d:30:74:28:98:ce:fb:1e:7a:29:fc:ee:46:
         4d:ad:63:34:ca:a0:0c:17:58:d2:f0:50:fc:19:8d:7e:5a:7f:
         0d:00:2e:09:99:52:4c:30:1f:ef:32:d9:55:b1:5c:0b:ac:08:
         f1:52:9a:00:32:d7:61:40:ce:3b:e1:f3:af:76:88:65:9b:35:
         01:b3:ee:53:9a:ec:1a:a2:2c:8f:e9:5d:d4:0d:bb:7e:bf:ef:
         c8:cc:8d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:16:00 2025 by rpki-client