Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/11dd116f-dfa6-39ef-940b-a6f1f8f7e8bd.roa
File:                     11dd116f-dfa6-39ef-940b-a6f1f8f7e8bd.roa (raw, json)
Hash identifier:          V2+2whlUwGhmHqnaZxFyuxuNBg0rosZpRyluz2bUG2k=
Subject key identifier:   74:E0:9C:73:C3:30:A4:AF:BB:D2:F1:50:DF:A5:15:10:60:4A:BE:53
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC524BBE0EE915C4405F00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/11dd116f-dfa6-39ef-940b-a6f1f8f7e8bd.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        64.239.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:52:4b:be:0e:e9:15:c4:40:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=bf42e16a-41e8-4ef7-ac84-4c28adb3ea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:61:1e:e3:66:c1:78:f7:95:90:da:e4:65:
                    d5:2e:4f:46:ad:fd:c9:98:e4:03:31:f7:a5:42:64:
                    d6:dc:db:ea:0b:9c:ab:4d:28:51:a1:13:a0:08:b0:
                    a3:77:94:1b:a1:8c:fd:16:38:f3:3e:ff:9e:7d:9a:
                    c3:3d:c5:08:fd:99:0c:3f:42:05:95:92:72:b2:ca:
                    65:6e:95:ce:f9:ea:96:96:bc:8f:f1:27:ad:cc:45:
                    44:cf:75:96:aa:cb:7a:ba:dd:f5:db:b0:26:66:58:
                    da:26:5b:f7:f8:05:45:9e:9b:4d:39:ae:92:e8:b5:
                    24:73:d0:4a:b3:f7:93:0f:51:0e:c6:b0:3a:e1:21:
                    75:a0:c5:70:32:c4:c7:d7:b6:63:f9:d8:08:33:e6:
                    bb:5f:03:82:64:64:17:b3:f1:6f:61:f7:a8:e0:10:
                    58:61:63:68:5a:43:6f:bd:49:1c:a1:09:23:2f:44:
                    6b:fa:b5:83:64:ee:99:95:6e:5c:c7:36:59:4c:f0:
                    70:ba:37:fd:7c:13:2f:8e:6e:43:03:b8:77:69:7a:
                    b8:d0:af:dc:1a:5e:c3:1a:3c:3a:07:18:9d:a2:88:
                    50:25:84:cb:df:82:cc:97:30:8b:d0:25:d9:8c:ef:
                    91:e7:6d:e3:ac:93:5a:05:e5:2c:76:5e:80:4f:d3:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E0:9C:73:C3:30:A4:AF:BB:D2:F1:50:DF:A5:15:10:60:4A:BE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/11dd116f-dfa6-39ef-940b-a6f1f8f7e8bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.239.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:77:75:83:ed:19:7d:f4:46:34:3f:39:74:2f:57:ea:b2:87:
         ab:e5:56:28:5f:01:47:56:1f:b2:e8:e7:7a:6a:2d:d3:51:15:
         8c:b3:53:77:fc:8a:ad:e9:e2:9f:e5:5a:c6:2b:86:8e:7d:8a:
         6d:6f:a5:3a:4a:59:5f:96:42:a3:be:f2:2b:d7:3b:59:9b:c4:
         96:47:8d:11:23:89:c6:d0:ca:8d:aa:35:2c:ff:da:1c:e1:d3:
         e4:6c:fe:a4:fc:dd:29:bb:cb:ed:44:02:ce:73:cd:32:be:55:
         b5:c4:be:2f:00:07:f8:88:c1:b8:06:43:6c:7a:5b:eb:76:d7:
         c8:92:15:3e:4d:31:5a:d4:35:b4:3b:e5:62:9c:d6:22:b0:7b:
         07:ad:b9:12:5b:20:dc:33:4b:04:c7:3d:d4:d7:5e:e1:c7:40:
         ea:a1:ab:71:de:9a:2a:01:cd:a2:8e:e4:87:da:cd:4e:2d:11:
         cf:f9:95:85:ad:a7:a5:dc:19:bb:53:cc:0b:b2:b3:c6:1f:12:
         13:c3:d1:da:18:28:f7:1d:47:08:21:a8:c8:f4:c5:d9:47:8c:
         66:a8:77:43:99:75:17:71:79:38:bf:dc:fe:bd:ea:59:46:cb:
         7d:51:43:71:76:ed:8e:4d:52:26:72:93:95:a3:95:89:04:ad:
         0c:8b:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:33:00 2025 by rpki-client