Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/89527496-2ac7-3318-99f4-cfaaa959191e.roa
File:                     89527496-2ac7-3318-99f4-cfaaa959191e.roa (raw, json)
Hash identifier:          GGQMOAxv1Oz4SUdbxp4XxzfVDQ5IhH07Kk4UEqudHpQ=
Subject key identifier:   C7:10:DD:26:3A:8F:51:7E:17:EC:02:B0:85:C4:FF:1C:99:29:49:E3
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B6FF74C1596770761A19C4880
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/89527496-2ac7-3318-99f4-cfaaa959191e.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     16509
IP address blocks:        64.40.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:4c:15:96:77:07:61:a1:9c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=0d23a2b9-dee0-4e8e-8396-d893c5f44bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:09:05:0b:f9:f8:6b:1b:87:22:33:85:3c:
                    74:84:dd:d9:d2:88:82:f3:0d:e9:4a:4f:65:39:c5:
                    90:64:06:d1:23:b3:0a:8a:8e:9d:b6:6f:18:62:63:
                    01:21:01:6e:d0:6f:78:8d:45:c8:d9:7c:90:ed:c0:
                    0f:46:4c:a8:83:1a:82:ec:02:be:8d:e8:88:7d:b2:
                    e8:55:07:07:78:60:33:d5:ef:72:65:f9:a3:42:7d:
                    a6:6c:c5:fd:bc:48:b7:7f:76:db:69:83:76:c3:cf:
                    22:65:5c:d0:d8:f9:c2:cc:cf:78:a8:dd:be:f5:f2:
                    4f:94:6f:0e:a6:56:e5:40:f2:db:c7:ed:a3:11:61:
                    40:6d:57:0b:0c:7c:0c:fe:58:2a:54:68:d9:80:85:
                    37:ce:db:8c:43:e5:f8:32:57:1c:c1:d9:0f:f5:d0:
                    f3:0d:fe:19:93:5f:fe:c2:ab:e7:c5:8c:ec:0c:21:
                    72:dd:1c:b0:b3:56:52:c9:a0:e8:d2:25:e3:c5:9b:
                    36:46:77:5a:19:3b:f2:a8:ab:2a:81:e9:53:ca:75:
                    15:b5:b2:04:37:bf:1b:6c:cb:4f:ba:00:0c:ab:b8:
                    de:f1:6b:d8:fe:85:0c:53:06:6a:4c:f1:04:01:dd:
                    9b:dd:99:95:f9:74:2c:72:1a:c0:ab:af:ba:f8:07:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:10:DD:26:3A:8F:51:7E:17:EC:02:B0:85:C4:FF:1C:99:29:49:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/89527496-2ac7-3318-99f4-cfaaa959191e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:a1:9b:83:32:f7:44:51:0e:40:68:fc:89:43:3d:23:38:89:
         68:d4:13:79:16:a0:02:f0:3c:62:8a:cd:5d:0d:27:3f:a9:4a:
         85:80:a7:2f:5e:fb:e2:26:60:37:b8:ba:76:93:13:58:4b:15:
         2b:eb:83:d5:61:b0:85:0d:f9:39:66:13:15:9d:a1:50:45:ac:
         76:d7:32:78:f5:32:17:f7:db:66:ba:b1:80:1e:58:e7:67:53:
         22:00:e3:08:ab:a1:58:54:30:ef:eb:4d:67:b0:5e:26:0c:cb:
         d9:86:c9:0e:e9:bf:4a:b2:ad:9d:cf:71:3b:9a:04:4f:7b:16:
         02:a8:cf:11:ca:ce:c3:43:38:70:ab:ff:ae:f1:2c:5a:19:ba:
         9b:59:86:76:dd:db:1a:a3:b5:ab:94:20:26:16:fb:4d:85:2f:
         b4:dc:34:ec:db:e7:a4:20:74:57:96:2f:02:2c:2a:07:15:69:
         89:e6:7e:3b:c5:28:94:bb:6c:e2:a5:99:ce:b7:f5:72:1c:ab:
         2a:f9:de:b1:24:a9:81:14:fb:82:e2:34:f1:53:4a:55:1b:db:
         02:85:cd:c4:70:2a:c4:7e:24:ac:53:ae:56:82:b9:47:4b:d3:
         e0:a1:8e:88:c9:bc:55:86:bd:8a:8e:1a:0c:94:84:e3:a8:b9:
         ed:18:38:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:38:45 2025 by rpki-client