Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1425412a-58df-30ce-ba59-fad59d7d14bc.roa
File:                     1425412a-58df-30ce-ba59-fad59d7d14bc.roa (raw, json)
Hash identifier:          bPsvcax4kK+bXL54XjN+pjlmEO0oiS7J2pUKMfTHtvA=
Subject key identifier:   1A:74:F8:8C:4B:66:6A:10:87:D9:0B:D4:9B:F7:4D:DF:D2:6B:EA:4B
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B4E770E6E3682ACBEE1ECBE94
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1425412a-58df-30ce-ba59-fad59d7d14bc.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     32133
IP address blocks:        64.98.163.0/24 maxlen: 24
                          64.98.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:0e:6e:36:82:ac:be:e1:ec:be:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=59bd0d3f-c31a-4d79-937a-099799ca51aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:77:18:3a:d7:25:0f:05:ed:02:fd:22:be:
                    44:a6:bb:74:10:8f:ed:b4:43:a4:81:bd:8b:9c:79:
                    3c:ff:47:c0:c0:ed:72:be:a3:2d:c6:3d:fc:18:cf:
                    0a:45:ba:75:75:39:fe:90:c5:75:12:10:41:3b:07:
                    6c:18:cd:42:4c:b2:db:40:fc:bf:91:78:ea:f3:bb:
                    c8:51:a3:74:31:d4:0b:47:00:39:e6:a9:3c:d2:c7:
                    aa:d2:4f:d7:4b:9a:17:8a:18:36:ff:f6:59:ec:47:
                    f9:10:1c:e3:ff:16:de:cc:c1:25:a6:c5:28:44:fe:
                    cd:0d:b2:b0:39:41:de:a6:14:b2:8f:d6:c1:c5:c5:
                    69:ca:1d:dd:4b:d4:fa:18:ca:9a:99:93:ad:a8:22:
                    99:88:40:24:6f:f4:83:c1:9a:0d:f0:9d:37:88:16:
                    ef:3a:b2:45:a9:84:5e:f3:69:da:bd:62:c2:af:b1:
                    96:96:70:08:ea:de:eb:6b:dd:91:ae:24:62:1f:06:
                    b8:19:ec:90:e2:c9:72:34:fc:71:60:e9:43:c5:3c:
                    42:0b:2c:a0:e4:99:c6:20:1b:ab:70:0a:79:28:2f:
                    c1:b9:95:d0:a1:e4:03:15:66:ad:50:48:05:87:8e:
                    6d:d8:58:32:80:56:86:ef:67:4f:28:91:47:1d:ea:
                    42:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:74:F8:8C:4B:66:6A:10:87:D9:0B:D4:9B:F7:4D:DF:D2:6B:EA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/1425412a-58df-30ce-ba59-fad59d7d14bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.163.0-64.98.164.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ff:6f:37:0f:a5:e3:a1:70:97:13:2b:6e:9b:90:80:00:78:
         83:a4:a8:ec:5b:fb:b7:63:ec:1a:9e:30:39:5e:da:79:8a:e7:
         92:5d:45:f1:23:bd:c1:69:1c:9a:c8:18:3d:f5:37:37:3a:32:
         50:4d:87:0b:b8:c3:1a:b9:86:53:58:a8:27:2d:5e:d6:d3:f4:
         a5:ee:ab:90:38:8e:be:a4:0f:7d:b6:0c:90:1a:89:82:fa:40:
         2b:27:0c:6f:62:25:d4:da:3e:dd:5b:61:44:2e:58:fd:35:8f:
         68:fb:b8:54:a6:4c:e5:33:27:c3:c3:8f:86:ae:11:41:09:7d:
         80:55:87:a3:17:5f:46:e0:06:2d:8c:39:e8:be:5b:ba:ee:9d:
         41:7e:f2:24:db:17:9d:9e:1e:8e:3c:fe:4c:00:ad:3e:bb:5d:
         a2:83:4a:47:a1:84:bb:ac:54:8e:4b:1f:e9:51:52:78:f8:8e:
         48:09:cc:b6:38:b3:0e:33:87:a0:f9:c6:cb:e5:4e:f5:d8:0e:
         30:9b:be:f1:40:34:78:df:05:cd:eb:6c:33:36:cb:78:a8:e2:
         15:6c:c0:08:92:f5:0f:b7:13:97:69:88:1e:e9:d2:0a:26:25:
         5c:d9:ce:ea:e4:0f:fa:d3:f7:17:a1:b5:10:05:f1:61:c8:51:
         b4:9d:aa:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:09 2025 by rpki-client