Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1eec2756-6227-307a-b42b-43f1c3cde172.roa
File:                     1eec2756-6227-307a-b42b-43f1c3cde172.roa (raw, json)
Hash identifier:          QaJNdmX7fMixjosxtyZKYj/uKtGqzdwOAZm9JT9PJBw=
Subject key identifier:   96:8D:F4:6C:7D:2D:71:41:03:E2:2C:6B:33:0E:EA:A2:C4:98:A8:CC
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B5C6CB85E2FD6B7B7D7AE35E0
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1eec2756-6227-307a-b42b-43f1c3cde172.roa
Signing time:             Tue 30 Sep 2025 01:00:31 +0000
ROA not before:           Tue 30 Sep 2025 01:00:31 +0000
ROA not after:            Mon 29 Dec 2025 02:00:31 +0000
asID:                     13335
IP address blocks:        64.40.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5c:6c:b8:5e:2f:d6:b7:b7:d7:ae:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep 30 01:00:31 2025 GMT
            Not After : Dec 29 02:00:31 2025 GMT
        Subject: CN=50c26609-b21f-4088-8edf-062fe0baacfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b5:78:0e:17:9a:db:4d:27:14:d8:14:22:fd:
                    e1:cf:2f:3b:6c:30:13:92:ef:91:eb:32:e3:53:c9:
                    4d:32:b4:ff:ed:5b:e4:d2:2a:ec:40:ab:fa:28:77:
                    68:ec:9d:91:73:02:ae:d6:2b:c5:c5:9d:d2:d7:9e:
                    61:75:98:54:98:7c:21:bf:5f:b7:1b:46:bc:09:94:
                    e8:27:e0:a1:5d:50:8b:fc:18:87:e5:4c:3d:eb:e7:
                    e0:25:68:87:4d:11:43:dd:86:54:99:21:c6:0a:64:
                    c6:c2:e4:42:b4:b3:9b:52:d7:db:8a:78:c1:08:ef:
                    a8:90:71:4e:f8:ed:ff:33:31:12:7b:6b:29:a4:73:
                    65:a8:68:20:84:48:74:cc:2d:0c:26:69:0c:80:43:
                    41:25:cb:86:05:e6:57:65:fd:b4:11:7b:c9:e8:a9:
                    34:4b:6e:80:18:91:0b:c4:fe:23:6b:a0:35:de:99:
                    b9:c7:a0:08:78:83:70:35:64:b4:c9:8c:7b:63:43:
                    8f:35:ee:dd:ef:9b:ca:d2:9c:11:6b:92:0d:ac:2f:
                    c7:b9:18:16:4f:61:85:e7:df:d1:f1:c1:87:39:14:
                    4b:aa:10:46:b0:07:61:72:af:6a:e1:a9:65:f0:60:
                    08:9e:88:7e:1d:4d:66:bb:9d:74:e6:6a:19:e3:53:
                    3c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8D:F4:6C:7D:2D:71:41:03:E2:2C:6B:33:0E:EA:A2:C4:98:A8:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/1eec2756-6227-307a-b42b-43f1c3cde172.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a3:8e:e2:b3:ed:63:c1:6f:9e:c3:a4:70:41:62:65:3d:98:
         02:f9:e6:2a:85:06:9c:47:5a:7b:3d:61:f6:40:83:e7:09:de:
         53:ea:40:15:00:df:f7:22:b3:3e:99:e8:39:c8:14:3d:e6:e0:
         1a:d6:2c:b7:58:65:fb:a6:f2:62:2d:4b:58:7d:82:87:36:25:
         46:f9:2e:90:21:74:78:55:10:d0:2c:df:a1:92:25:3e:d7:c4:
         fa:8c:ba:34:24:b5:46:ba:ca:85:15:c3:b7:15:e7:b3:67:3d:
         c8:17:35:83:9c:5a:4c:4b:11:48:ce:57:09:d9:c4:d6:1b:1a:
         4e:de:ee:fc:eb:7c:74:dd:18:8a:f9:60:b1:79:f6:50:a2:dc:
         fe:ba:8a:6b:91:b9:52:ee:e3:eb:df:89:de:0f:2b:23:3d:1e:
         06:e9:a6:76:8b:78:ca:ef:ee:2d:b6:ef:9d:3d:9e:42:72:e3:
         65:d8:6d:a5:ad:d6:68:bf:73:9b:4a:46:6a:0a:b5:60:79:4e:
         40:71:07:c6:91:50:1e:ff:73:86:69:63:1c:39:58:9d:6a:0c:
         3f:33:8b:f5:5e:2e:8f:70:1f:8a:74:b6:76:bc:88:a6:72:6f:
         e5:57:5a:ab:e9:e1:b8:6a:f9:a1:50:38:e3:56:8c:b9:4d:3e:
         ea:2f:07:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:39:15 2025 by rpki-client