Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/7e02ba55-4fa7-3c58-b246-1bdc68f1a1ea.roa
File:                     7e02ba55-4fa7-3c58-b246-1bdc68f1a1ea.roa (raw, json)
Hash identifier:          YDeGHsUGMumD+s45OTAFRUwjNM9m5skwv4d5pMkzQbY=
Subject key identifier:   8C:A4:98:65:A6:21:C9:BA:47:D4:52:2D:E3:47:D6:45:84:B4:C0:8C
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B16A17061FB136D371E6F4100
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/7e02ba55-4fa7-3c58-b246-1bdc68f1a1ea.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     8987
IP address blocks:        64.40.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:70:61:fb:13:6d:37:1e:6f:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=8827e2b5-9717-45a7-8d89-c331f6601204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:88:6f:29:b5:62:b6:b4:d3:d6:9d:48:5c:cf:
                    30:d6:d5:80:15:67:d8:38:61:42:a9:5e:19:66:4d:
                    87:d9:2a:f7:c8:8c:ee:1e:55:df:0f:1f:c8:da:7a:
                    97:ae:50:83:a2:e8:ad:b6:d9:d2:be:0b:89:0b:2a:
                    09:27:30:1b:b2:24:96:0d:cd:00:55:90:75:6d:71:
                    6f:7f:5f:8b:2b:dd:c6:97:05:5b:3b:d8:3f:e4:6f:
                    81:de:e0:a5:4a:4b:bc:85:e4:3c:4a:7f:a1:96:0a:
                    f5:e6:0c:60:a1:a4:61:f8:10:93:f1:5c:6c:db:d2:
                    74:77:8d:0c:10:46:d7:1a:0b:12:0f:d7:01:cb:60:
                    56:36:c0:a9:53:fc:51:9a:2f:00:56:c9:e8:fe:b9:
                    c7:e4:c0:5f:90:e0:6d:cd:80:db:5a:18:a5:b4:55:
                    69:7d:c6:88:f7:0f:32:45:73:53:91:59:db:5d:b1:
                    95:d6:bb:8c:5e:16:87:ed:82:28:48:06:c9:e6:15:
                    b2:84:9a:26:20:fe:36:a5:3e:99:bd:5f:ae:d9:aa:
                    08:2a:4f:ff:af:08:28:19:79:50:59:d3:cd:92:a3:
                    45:e6:b2:f8:4e:e7:6e:f4:be:85:7d:2b:cb:c2:0a:
                    03:08:ef:4d:2e:34:ed:8e:48:e1:50:0b:c7:87:19:
                    57:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:98:65:A6:21:C9:BA:47:D4:52:2D:E3:47:D6:45:84:B4:C0:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/7e02ba55-4fa7-3c58-b246-1bdc68f1a1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:b3:d2:99:e7:6c:63:78:69:9e:13:c9:7d:e0:11:2c:51:
         11:ed:09:7f:2f:a9:7e:ab:37:41:21:49:1d:d3:ff:6b:4f:eb:
         9c:43:53:f6:ad:0a:2a:3d:44:7e:df:37:89:08:fc:b2:4e:a6:
         9d:23:8f:4f:c9:42:77:84:07:f5:5c:23:6e:0f:d2:60:31:b1:
         d0:bb:96:40:a2:3d:f5:81:43:f2:be:da:52:57:e5:41:29:0f:
         6a:ce:4c:04:51:23:f4:2f:5f:4d:0b:a5:32:75:99:a7:4d:3d:
         16:55:d1:b1:0f:0d:8c:06:8a:5c:c3:1e:c9:8a:40:84:71:3e:
         b9:84:58:f1:6a:82:d6:7f:bc:df:4a:f4:ed:dd:49:3e:1e:a5:
         48:b8:1c:de:62:23:05:c8:8c:b2:13:3b:42:0d:51:6b:9d:e0:
         1e:a8:17:9c:1e:83:69:e4:e7:a3:32:63:93:31:89:9d:11:d0:
         79:fd:5e:e4:ff:64:d9:10:98:3f:0a:19:29:9e:80:4c:f3:70:
         1b:5a:56:27:bb:54:0b:bb:82:fe:8e:04:f6:7b:da:e0:47:b9:
         e3:6f:29:81:99:24:e9:36:67:cb:3c:f4:cf:ea:9f:a2:6b:8e:
         f1:08:78:17:94:6e:69:fd:31:29:58:c6:d8:f7:04:c1:42:19:
         b8:bf:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:42:12 2025 by rpki-client