Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
File:                     d66336d4-f99d-3fc4-83d2-187c721b004e.roa (raw, json)
Hash identifier:          5qSC1YOdh1hhja7PAvi3tg0uaAWKm0rZ2wnXfNkPxBU=
Subject key identifier:   E4:19:BA:4B:A0:BF:DC:50:79:C0:9E:88:D1:4E:DB:E1:B3:15:86:57
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584B0CDC1966534155EA0691D0F0
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     3464
IP address blocks:        204.29.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:19:66:53:41:55:ea:06:91:d0:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=83006f3e-210e-4d63-85f9-5a05b5069b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:55:b9:71:2e:fe:f3:20:68:e2:64:81:b1:93:
                    70:02:fc:0a:0c:7d:eb:e3:97:0a:0e:70:2d:00:34:
                    1f:46:62:a4:fb:be:f9:9a:c1:50:27:93:b8:c3:95:
                    8e:eb:62:01:00:d1:cf:93:20:84:a7:07:51:c9:5b:
                    98:21:a9:9f:7c:25:c8:bf:27:4c:bf:c4:c3:d3:18:
                    62:d4:3f:dd:eb:09:6d:19:ce:dd:00:90:f7:9f:f2:
                    3c:a3:8c:84:ec:7a:99:1d:d6:b8:ec:4b:06:18:a6:
                    7d:d6:15:0d:ea:66:82:92:7d:5a:87:07:ae:9e:fd:
                    26:cf:8e:cb:f3:e7:77:35:03:4e:65:cd:51:ff:d0:
                    b2:27:3e:4f:99:72:e8:ac:77:15:e1:0a:cd:c0:e1:
                    2e:e7:e3:ef:84:c6:47:68:7c:ce:e3:4d:70:cb:05:
                    b5:8f:f9:5f:43:4f:72:64:36:0f:14:c3:01:d2:df:
                    39:e4:55:fc:84:69:7c:ff:dd:e3:b5:6a:4e:6f:f1:
                    c7:f8:25:40:e7:8e:86:e8:23:f2:54:10:e8:7c:b7:
                    0b:8a:b2:f4:58:79:fe:be:2f:16:d9:85:81:10:4d:
                    ec:e3:80:ac:87:a8:2a:d1:d1:d5:f6:ba:1c:f7:05:
                    f2:e0:cd:74:9c:ce:d3:bd:ae:72:3f:ce:c0:a0:d5:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:19:BA:4B:A0:BF:DC:50:79:C0:9E:88:D1:4E:DB:E1:B3:15:86:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/d66336d4-f99d-3fc4-83d2-187c721b004e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.29.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:14:66:88:11:5f:65:13:82:b3:ec:ff:70:37:d0:be:a0:
         de:1b:d1:bf:db:6d:c8:74:00:f0:96:c4:5e:91:a5:5c:d9:c2:
         9a:5c:aa:0e:c8:66:06:56:47:ab:52:bf:ac:7d:87:32:29:1c:
         f3:0e:42:bb:8e:4b:ad:af:31:55:95:47:1d:c3:8e:03:ad:74:
         c1:71:bf:e0:a4:d0:0d:c8:1d:02:e7:92:20:e9:55:53:b1:8f:
         76:a1:c6:78:ed:e5:52:ed:d8:61:2f:36:3f:14:12:cb:35:d3:
         b8:2a:20:80:08:67:aa:88:0f:4e:cb:f5:a8:09:b7:83:f9:0a:
         03:ab:d6:90:bd:bd:51:0f:93:fe:7e:be:4c:1f:c4:00:91:d3:
         a2:5f:71:bd:60:99:87:7c:0a:45:44:c5:f0:3d:7d:20:5e:71:
         09:bf:1e:a4:30:71:3f:05:96:fe:83:09:93:8e:73:62:5b:1e:
         4b:2b:ff:a3:17:8f:66:34:10:a4:33:c6:de:5b:a4:14:a4:b5:
         8e:3d:04:53:4f:d3:9d:f5:d1:50:26:b3:3b:e1:6e:54:f3:5d:
         ac:22:4f:61:70:95:e8:df:5e:49:df:26:2e:ae:4f:4e:f3:48:
         73:b8:e0:c5:68:d6:9d:dc:a7:df:c6:9a:08:85:e9:17:86:32:
         b3:81:bb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:56 2025 by rpki-client