Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/2b2e46fe-4ae6-3cbb-aa47-ad5543fef108.roa
File:                     2b2e46fe-4ae6-3cbb-aa47-ad5543fef108.roa (raw, json)
Hash identifier:          /dd9EO6yW8qo4DSgACthRKG3WXqsdn0DAx+uPkGlYzg=
Subject key identifier:   4C:CC:0F:0B:15:71:E0:D2:AC:BA:58:BB:CF:23:B6:E1:1E:10:AB:F7
Certificate issuer:       /CN=9e246efa-84c5-416a-bc6c-a7163432845f
Certificate serial:       010D0C9F4328584B0CDC29D0B133D3AC8B0E1410
Authority key identifier: 6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/2b2e46fe-4ae6-3cbb-aa47-ad5543fef108.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     6079
IP address blocks:        64.93.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:29:d0:b1:33:d3:ac:8b:0e:14:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e246efa-84c5-416a-bc6c-a7163432845f
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=df5d0ea5-3a69-4e15-b477-7ac86b9aa421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:77:45:94:cf:4c:61:e9:86:75:9a:69:53:b2:
                    d4:b4:2a:af:f5:b2:4c:c4:5f:b6:26:11:f0:a9:f4:
                    02:7e:b1:0d:a3:fe:51:53:bc:b1:50:b9:c4:ce:d7:
                    ec:68:52:fb:55:5f:ac:66:30:d8:e8:b0:e5:36:b6:
                    76:66:02:06:86:3b:bd:93:f7:da:2c:09:c6:5e:4b:
                    fb:5c:4b:45:94:dd:71:8b:47:ff:58:59:66:ee:f9:
                    c7:7b:f6:b3:1e:14:a8:cc:58:b4:c4:ad:4c:0d:f1:
                    44:93:4e:f1:a1:7e:69:50:e4:31:d2:a3:a6:0c:7e:
                    6e:a4:91:30:59:39:f5:27:fd:97:a8:e8:57:e5:7d:
                    65:a9:82:46:2b:6c:52:c4:5c:f5:b8:f5:1c:f1:f0:
                    e9:95:5c:0d:ca:07:2b:d5:40:fd:ea:56:70:f8:3d:
                    aa:db:c0:d4:b6:b9:ae:08:cf:8e:a5:f8:8b:91:fe:
                    fa:77:82:0b:48:a4:72:84:86:2c:75:b5:95:1f:01:
                    1e:4c:92:20:58:2a:dc:a1:20:1b:fc:44:a5:bd:9e:
                    13:04:33:29:60:0e:2c:43:7c:da:8b:fa:4b:50:42:
                    df:d9:a9:0f:ff:19:f2:d8:d6:c7:88:c5:54:dc:e8:
                    9b:68:ea:b8:09:0d:33:2b:bf:37:52:45:78:b4:58:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CC:0F:0B:15:71:E0:D2:AC:BA:58:BB:CF:23:B6:E1:1E:10:AB:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/2b2e46fe-4ae6-3cbb-aa47-ad5543fef108.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f/9e246efa-84c5-416a-bc6c-a7163432845f.crl

            X509v3 Authority Key Identifier:
                keyid:6B:E9:1F:52:86:51:E2:D9:F9:B4:5B:F1:F1:8F:72:43:69:85:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9e246efa-84c5-416a-bc6c-a7163432845f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:67:d8:d9:1b:64:82:42:79:82:0d:70:18:0e:cc:84:43:
         c3:19:8f:1c:2e:2b:99:16:59:f6:7a:35:56:69:43:4b:d2:2a:
         e9:47:24:81:72:f3:7c:46:77:6c:f0:e6:b6:e5:f4:44:31:18:
         47:e5:9c:11:5f:16:1c:4f:fb:6c:a3:eb:02:5b:3c:53:22:96:
         51:48:d5:ea:5d:23:d5:27:a7:aa:bb:e6:1e:8e:72:4d:a3:c4:
         8c:bc:33:59:c5:68:1c:7d:16:61:a7:dd:bc:25:21:55:aa:f6:
         ef:de:10:fc:85:55:eb:84:ee:b7:4d:3d:49:ea:9a:f5:92:1a:
         a0:35:ea:57:40:51:a5:2d:79:f2:e4:fd:a5:7a:6a:e2:41:36:
         32:5b:13:b4:95:47:68:8a:1d:81:36:08:a2:f5:c7:0a:1f:e4:
         75:a8:16:a1:77:0b:43:4f:fa:29:51:12:d8:27:4e:fb:de:0d:
         df:4d:d9:52:fc:46:88:98:23:9a:66:e3:35:12:c0:ec:33:99:
         a9:7d:0e:ea:21:8a:35:e8:0f:a2:5d:00:49:25:3f:48:be:48:
         15:62:3e:94:d5:e1:aa:c6:d2:dd:7b:b0:f2:ec:f9:8d:2f:05:
         07:92:ef:ef:d2:a0:0d:40:41:d5:ba:32:7d:8c:85:f9:e0:b3:
         2a:9c:28:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 19:59:11 2025 by rpki-client