Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c18bfea5-2640-3b94-b62b-65d863d4601b.roa
File:                     c18bfea5-2640-3b94-b62b-65d863d4601b.roa (raw, json)
Hash identifier:          uvUNaIzd8HxXyC3/ul9sMqwekcoyAz/0FFDp2RMCh4g=
Subject key identifier:   DD:3A:3C:AC:14:AC:49:3C:4E:E5:8D:8B:3D:8A:F6:BF:A3:1F:3C:C2
Certificate issuer:       /CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
Certificate serial:       010D0C9F4328584B16A1701C9006C5596E1839C0
Authority key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c18bfea5-2640-3b94-b62b-65d863d4601b.roa
Signing time:             Fri 05 Sep 2025 01:00:33 +0000
ROA not before:           Fri 05 Sep 2025 01:00:33 +0000
ROA not after:            Thu 04 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        64.40.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:16:a1:70:1c:90:06:c5:59:6e:18:39:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e
        Validity
            Not Before: Sep  5 01:00:33 2025 GMT
            Not After : Dec  4 02:00:33 2025 GMT
        Subject: CN=b51166bc-eeaa-42d8-b317-3a3384daa75d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:91:89:d6:d4:81:81:77:48:67:f1:82:28:
                    76:de:db:4b:75:f1:2a:a0:5e:a3:de:59:05:a5:c5:
                    a3:8d:11:8e:a3:f6:ec:ff:53:8a:b2:07:02:6a:f4:
                    02:e5:fd:c4:de:8b:33:8b:13:e6:50:2c:34:e0:4d:
                    9b:61:c7:64:b7:14:55:7e:de:e7:de:25:02:6c:3a:
                    d9:45:bf:8d:c0:47:87:c8:8f:63:5c:b5:fa:dc:02:
                    b3:4c:11:c4:a0:98:c3:cb:c7:90:b5:25:19:91:a4:
                    dc:b7:86:6c:8e:12:0c:df:05:18:0b:52:bd:5c:65:
                    f4:28:65:92:0b:75:5e:f3:b3:79:db:68:02:06:1a:
                    9c:db:43:00:ba:33:0f:4f:b7:d2:6c:93:24:3b:53:
                    6d:76:c8:b9:6b:93:f0:72:70:93:ad:a6:0b:54:ef:
                    ec:a5:8a:10:d2:49:8e:1e:ef:69:ba:16:c1:f3:fa:
                    d3:1c:c9:a1:97:c8:5d:6e:5f:03:f4:6b:66:21:31:
                    84:25:0d:e4:e9:54:86:c8:e2:0c:5b:18:13:f6:da:
                    d8:b3:9e:72:a8:8d:33:ac:e9:94:8c:03:d9:9a:38:
                    fa:72:b8:96:09:e7:9d:91:62:dd:96:b3:4f:6a:7b:
                    79:77:22:06:51:12:7b:2e:80:07:eb:b2:73:9d:4a:
                    32:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3A:3C:AC:14:AC:49:3C:4E:E5:8D:8B:3D:8A:F6:BF:A3:1F:3C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/c18bfea5-2640-3b94-b62b-65d863d4601b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.crl

            X509v3 Authority Key Identifier:
                keyid:60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:91:51:c7:bc:6b:32:5c:57:a7:13:98:77:37:ea:75:e5:f1:
         19:09:3d:07:db:fe:3b:1f:0c:bb:b6:34:36:c2:8c:6e:24:75:
         a9:31:9f:4f:47:1d:93:e8:b3:e4:99:4e:cf:5c:6f:3d:c8:c2:
         72:b5:0d:27:b9:88:52:66:61:72:5b:9e:c8:e3:86:19:42:f8:
         77:13:ec:21:57:03:9f:2f:95:fe:b3:d4:91:7b:77:bf:a7:58:
         26:e4:ea:50:0e:7a:10:c1:53:0d:ba:3f:70:9d:53:eb:f5:40:
         92:f4:1e:ce:96:e5:45:d7:f9:ea:b2:a5:00:62:a9:52:98:be:
         3c:1a:9b:06:bc:ca:92:e5:a8:2b:8b:fc:f1:18:25:07:92:5e:
         82:0f:e0:17:fa:9c:fe:82:9f:c3:21:8e:4f:c1:be:fb:f6:a1:
         9c:da:58:9e:c1:2a:a0:74:21:de:57:16:00:37:de:27:94:07:
         f1:34:ac:79:12:53:09:36:17:ef:cc:6c:cb:c6:76:5d:3c:62:
         13:81:8e:f3:a0:c5:14:01:49:86:8d:ef:27:ce:ec:a9:0c:b5:
         b2:b5:c5:06:b4:d1:07:85:ae:51:bd:1a:47:dd:97:47:4b:fe:
         c1:2f:e3:c7:b5:1e:04:95:46:00:d5:10:9a:7c:84:f4:2d:fa:
         17:cc:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:37:33 2025 by rpki-client