Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa
File:                     47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa (raw, json)
Hash identifier:          q4nAhMtT8wLMVz9TBqPJxc+G/bBv7aqsTvXlPWEozzo=
Subject key identifier:   3E:16:73:BA:2B:43:00:E3:97:57:9E:58:47:FC:1A:FC:6A:13:28:8E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBCA10532D87760CD47C00
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:ca:10:53:2d:87:76:0c:d4:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=e68c6c4d-7e2d-4c15-bd8c-b93678bad9eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:e9:5f:f4:8e:f4:7a:c5:fa:9e:ea:d4:50:
                    77:86:b7:fe:23:34:75:8a:53:7b:a9:e5:31:37:ac:
                    c9:a2:70:e7:57:c8:0e:8f:4b:f6:66:17:a1:fa:73:
                    fd:60:8b:cd:a6:1c:e5:dc:73:37:dc:d9:ce:c9:a2:
                    cd:e6:cd:9a:94:ec:f5:2e:1f:39:4a:36:b8:f0:00:
                    30:0b:81:a1:f5:cf:5c:7d:0d:4f:41:9e:9e:5d:b8:
                    7d:94:14:27:ff:d0:c3:e0:44:0d:44:b7:37:ff:fd:
                    98:68:88:bd:18:6a:f6:9a:e9:49:c5:25:a3:75:a4:
                    fb:0a:5f:10:d8:d9:ea:69:e2:95:79:9b:6a:3d:aa:
                    9d:7e:a8:b7:a8:d0:96:bb:98:04:12:e7:0f:65:1f:
                    43:ef:83:52:4a:03:62:85:5a:cd:69:96:74:6a:1e:
                    73:91:d0:eb:0e:5f:c5:89:dd:22:f5:a2:33:5a:08:
                    17:30:44:2f:7a:72:7a:a0:3b:b9:9b:a4:64:f7:f8:
                    a5:23:1b:6b:89:09:0c:32:c6:9d:80:21:4b:67:33:
                    76:28:83:d0:d0:a1:68:4f:16:7c:f1:8c:3b:ee:39:
                    9f:45:06:f6:0b:01:e4:24:20:a7:f2:1a:fd:b2:28:
                    de:b8:3a:5a:de:a9:95:99:c1:6f:34:69:58:a1:d2:
                    68:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:16:73:BA:2B:43:00:E3:97:57:9E:58:47:FC:1A:FC:6A:13:28:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/47eb5d5d-c777-3848-b1e5-bbd321e7f74f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:ea:50:48:07:aa:bc:b5:b3:5e:69:ed:e4:e5:bd:95:de:
         02:72:df:55:51:2c:a9:62:c1:23:40:7d:5a:87:e2:40:13:31:
         56:03:fb:24:5c:53:52:b7:6b:93:6a:cd:15:e9:79:63:32:48:
         cf:45:56:b5:93:fb:ed:05:e6:de:90:a0:41:83:64:7a:93:ab:
         e9:63:b5:56:8d:77:47:42:4a:9e:85:dd:b2:2a:41:52:31:d0:
         fc:31:0a:6a:41:7f:08:7b:b8:47:ff:bf:9f:82:c5:80:ed:65:
         19:e2:4a:ce:f4:f0:55:d7:12:f2:93:0f:ad:c5:72:13:1b:7a:
         3b:f7:bb:36:9c:ca:4c:1b:f1:e2:04:bf:e5:f0:f0:52:2f:4e:
         f4:0e:76:7a:f0:17:f8:b4:0d:38:05:7f:b1:a9:41:f2:03:48:
         e7:a3:57:bd:10:92:cc:66:96:c7:84:19:09:99:2c:7d:98:11:
         e9:c9:f5:c9:2b:4f:51:11:d4:55:a7:a9:92:00:11:e4:bc:b5:
         b0:ff:8b:1e:fa:c5:a4:72:6c:19:06:18:3b:dc:2c:4d:b8:47:
         3c:70:b1:54:f1:9c:40:c7:cf:52:b6:cb:ae:02:e1:b7:1a:05:
         fd:35:3f:3c:93:d6:1f:6b:2b:cc:e5:de:fc:5f:08:f2:ff:f5:
         a6:8d:e3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:25:41 2025 by rpki-client