Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
File:                     2f809b7b-f911-3964-a13f-d283caa3fbbc.roa (raw, json)
Hash identifier:          E7P71t1tC1ZHEXCbJGp1bRpMVFuRGXONp0CIafAGMo0=
Subject key identifier:   4A:18:FF:17:B3:BE:74:57:08:E8:7C:7A:C9:04:10:32:09:91:DE:3D
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584B21CC1DD66728215CE33CF540
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     32133
IP address blocks:        64.98.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:1d:d6:67:28:21:5c:e3:3c:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=936f2a9a-03e1-401a-a64a-210f618156f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:db:b3:99:b5:12:8f:d2:cc:80:63:aa:1d:
                    cc:63:39:72:21:06:f3:e8:45:5b:8e:f4:ba:0d:ed:
                    00:51:2e:d0:eb:9a:b8:68:79:43:73:2e:09:e0:4b:
                    df:4f:e4:73:68:db:34:2c:45:1a:48:18:9c:ff:a9:
                    7f:f2:fb:f8:24:63:33:dd:10:ff:af:d7:81:4d:a3:
                    50:f1:90:f4:6e:1a:94:76:d0:0e:7a:ab:f5:b9:e9:
                    a0:cf:93:48:af:4c:dd:93:28:2c:c4:1d:4a:4a:b2:
                    1d:67:88:8a:45:6d:bc:24:33:ba:e0:a8:89:18:3e:
                    a0:53:ff:04:f0:e0:ab:63:83:fb:6d:8a:f3:c4:12:
                    ea:60:6b:03:d0:e6:0a:8b:d3:17:68:2c:7a:7f:44:
                    23:ec:10:52:a4:63:76:b7:d7:48:8b:5d:d5:a3:50:
                    f5:6d:79:39:fa:8d:2f:69:39:8d:54:f5:59:fe:61:
                    d0:5e:2b:af:14:f1:08:cd:a5:6c:96:1a:13:07:5b:
                    cb:ba:dd:e6:2a:6f:87:19:19:a1:2f:d4:34:c4:02:
                    41:4e:81:26:9d:e8:e6:d0:fb:8e:9d:dc:90:d7:64:
                    0f:8a:0c:40:cd:2c:de:82:1b:05:9a:3a:86:51:5d:
                    7a:a2:87:77:63:0d:33:bb:66:be:7f:1d:c8:ff:0e:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:18:FF:17:B3:BE:74:57:08:E8:7C:7A:C9:04:10:32:09:91:DE:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:f2:8d:46:7a:56:ef:1f:2c:14:e9:4f:4d:36:13:8e:ad:0b:
         09:8b:4f:c0:3d:70:f5:4f:49:5e:02:9e:df:83:2f:18:30:8e:
         51:fb:f4:ab:2b:91:dd:82:25:03:a8:7e:99:c4:16:95:d4:eb:
         8a:f4:26:64:5a:d8:6c:16:fb:27:3c:a7:45:df:1c:b0:fa:ed:
         e1:a1:2c:a6:8f:8e:3e:e0:9d:a2:02:56:e2:ca:2f:4e:93:f9:
         59:58:d7:37:1e:a6:da:5a:45:6f:24:c2:d5:c6:42:33:42:06:
         fc:76:76:44:40:85:f7:cf:53:31:fe:77:c8:59:dd:ba:92:8e:
         35:88:bf:f1:6c:d7:8f:ca:61:2b:51:6a:bc:2a:9c:a0:f2:4d:
         37:8a:1c:d4:c0:b3:04:6f:74:2b:b1:63:da:2d:26:92:6e:ce:
         59:bd:9f:bf:36:de:5c:1f:a6:70:94:4f:c0:ba:c7:e0:a2:85:
         e9:61:21:ed:8a:39:78:f5:f3:25:79:bf:de:bc:a0:0c:d8:8f:
         2d:ee:e0:25:bc:b8:a4:b5:6d:2d:5f:0c:91:85:e9:e6:ad:d1:
         6e:0d:fa:f9:06:f2:09:29:93:2d:89:23:15:f8:ab:23:db:4a:
         3f:44:82:93:e9:7d:bd:f6:1b:ff:34:d6:d1:4e:57:d8:5a:c9:
         d9:04:2a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:27 2025 by rpki-client