Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5ac711b-6372-3f96-98e8-4c5ed0105d87.roa
File:                     b5ac711b-6372-3f96-98e8-4c5ed0105d87.roa (raw, json)
Hash identifier:          L+4t5id8pL980DR3OqXcJvduw9HWOrJQ4oF3vgYvYGw=
Subject key identifier:   DF:30:C0:6A:40:B6:87:13:56:F3:94:6B:67:B3:D3:7E:5C:37:78:25
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584B6BC753CF0F9C67B9BF4F8C00
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5ac711b-6372-3f96-98e8-4c5ed0105d87.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     64286
IP address blocks:        64.64.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:53:cf:0f:9c:67:b9:bf:4f:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=10514b79-5031-46ca-b890-b58dda8e5ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:25:e5:99:95:e8:81:26:cd:79:07:e4:03:
                    e0:ac:f3:54:d5:33:74:ee:82:4e:2f:b6:4b:0d:dd:
                    c4:fe:80:f4:40:0b:5b:59:c2:1d:2f:97:89:2c:9f:
                    7e:35:44:27:69:60:b9:ff:17:a5:b9:e8:8a:4c:88:
                    f5:60:98:9f:77:0c:3f:3c:11:2e:c3:0c:20:63:8f:
                    cb:da:b9:4e:34:51:57:39:d6:11:e2:98:17:32:ed:
                    3b:1c:cf:dc:d6:ae:81:33:2b:f3:b4:d4:53:47:01:
                    30:9d:5b:69:1a:b1:eb:ad:63:1b:d5:74:1d:8d:67:
                    e6:83:ce:d8:68:ab:a1:58:44:14:69:ee:09:72:fe:
                    97:48:be:e0:1c:08:de:3f:6a:5c:19:17:31:cd:6a:
                    d0:d6:a9:19:0a:f2:34:23:7b:4b:b4:33:01:df:d1:
                    40:28:fe:e4:ff:06:9a:9b:88:54:03:46:73:7c:00:
                    b6:1a:39:4a:27:e8:a3:ab:18:e9:26:ff:1d:f5:fa:
                    90:23:67:dc:6f:4f:e9:07:28:78:f2:bd:f6:d0:1a:
                    aa:11:24:c3:ae:35:6e:94:d7:41:5b:ce:90:b1:d5:
                    ba:72:b3:e9:c9:96:5b:43:31:46:41:03:8c:82:78:
                    d3:47:48:54:44:3d:9f:10:7c:b3:3b:13:eb:a5:3c:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:30:C0:6A:40:B6:87:13:56:F3:94:6B:67:B3:D3:7E:5C:37:78:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/b5ac711b-6372-3f96-98e8-4c5ed0105d87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:07:57:31:5b:77:a1:71:40:eb:58:dc:ac:47:af:73:74:8e:
         5d:32:e0:ab:7e:3d:c4:94:5e:a6:d6:ed:3e:dd:31:42:8d:3a:
         7f:ad:eb:1b:cb:ee:33:ba:88:8f:14:87:0b:3f:23:b4:61:08:
         1a:5c:db:ad:65:7f:9b:a3:a4:7d:92:b9:9e:e2:59:57:d9:47:
         11:e8:ef:34:81:04:5a:df:86:d1:12:29:31:cd:ba:4b:93:e8:
         2e:08:8a:30:f0:dd:02:22:4b:37:1e:9a:7e:53:2f:d3:f3:a4:
         64:b2:98:bb:4e:f1:0e:ef:52:a0:4e:44:2e:6c:ce:9e:53:87:
         40:5d:d0:ed:7c:52:2b:12:5e:8b:77:df:a7:69:f2:15:97:bf:
         43:36:0a:ec:0e:f1:a1:86:10:7e:b9:de:2f:2e:8f:d8:e3:e4:
         1a:74:81:db:21:88:fe:f8:5f:a6:00:74:7c:3e:d2:79:66:97:
         ad:bc:f9:49:37:5e:dc:23:c2:c0:65:07:2d:27:a0:1c:74:f4:
         30:da:53:07:e0:0d:ff:a4:f8:f9:8c:bd:2d:48:aa:63:0d:03:
         b5:5b:a6:12:a0:19:74:8f:b6:b7:3d:3e:a9:07:c5:cc:28:07:
         fc:d3:b0:f2:15:23:15:8c:1f:ed:11:c5:7e:f2:ce:2c:4c:00:
         89:2a:f3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:15:59 2025 by rpki-client