Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa
File:                     79564ee4-eb18-3835-b2f9-d01b825b8702.roa (raw, json)
Hash identifier:          6QTbFa0TtXx62+JECfzWFVLyW3VQRb2aMBuAtCSNVkM=
Subject key identifier:   45:F6:1A:C1:26:92:38:EB:10:18:CB:26:AF:87:3F:09:B5:A3:22:8E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584A86DBDE1D7D1A3E8509FF6780
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     36492
IP address blocks:        64.9.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:de:1d:7d:1a:3e:85:09:ff:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=4de8b8b0-deb8-4219-8604-2d4ee3f20a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b0:85:26:e8:4f:93:55:25:3f:ff:9b:9a:b4:
                    f9:47:7f:6f:01:68:d9:57:41:e6:9b:84:a0:33:b2:
                    cd:fc:c9:ec:a2:0b:92:86:6c:73:21:ce:db:61:ad:
                    68:c3:81:64:77:ba:df:79:55:75:a7:62:8c:fc:2d:
                    36:f7:e9:21:97:ae:0f:52:d0:22:ab:cb:16:1c:6d:
                    b2:72:cf:cc:de:2b:f3:9f:7f:15:47:13:d8:71:3d:
                    f6:da:6d:3f:1c:ad:54:3d:3b:f5:1a:8b:a3:78:04:
                    60:d1:93:b5:71:94:7c:3d:89:3b:47:75:fb:89:0d:
                    0b:b4:f3:6b:b0:38:70:9e:ef:3f:49:a2:13:ec:25:
                    88:33:e6:c7:1b:2f:78:86:72:97:9e:3a:03:96:e3:
                    ed:fd:72:f0:d2:ca:a2:00:77:c7:b2:67:ff:67:b9:
                    99:d2:6c:19:63:93:de:9c:81:65:e8:84:4f:ac:0e:
                    3f:e4:b4:04:87:bc:06:54:21:34:63:49:bf:6c:1e:
                    b4:83:af:91:6e:10:03:bc:ba:44:ce:06:2d:80:84:
                    98:02:cd:c6:05:c0:a2:7e:6b:2e:8f:ab:fa:fb:d1:
                    a0:78:b0:e5:cf:3d:fe:a5:6c:44:f5:55:5d:aa:c7:
                    c5:c0:36:7d:d4:b9:3e:e1:24:68:29:88:88:0a:f9:
                    e3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F6:1A:C1:26:92:38:EB:10:18:CB:26:AF:87:3F:09:B5:A3:22:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/79564ee4-eb18-3835-b2f9-d01b825b8702.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:8a:19:2f:ad:6e:52:0d:f5:87:5d:8b:af:4c:8d:40:da:
         cc:5e:1c:33:f2:65:fe:13:a7:16:37:42:2c:0c:75:5f:f5:ac:
         3d:f0:ac:1b:1b:90:19:86:78:b1:e2:de:1c:e9:27:5a:79:2a:
         c8:9b:b4:9c:e5:01:de:2a:40:88:7d:7b:07:97:75:66:2e:7b:
         1c:37:33:4d:6d:f4:00:b3:e5:79:a8:88:42:2b:8c:f2:94:81:
         fb:c3:f0:87:06:59:aa:f3:cb:c5:78:45:7b:d8:b5:30:d1:c7:
         22:6c:e1:aa:d8:df:43:c5:5f:5e:30:88:ed:93:54:92:20:9b:
         da:08:b1:cb:ba:92:8f:c9:e6:20:70:07:59:17:b0:50:42:87:
         c5:8d:56:ac:59:61:e5:78:84:bb:b3:30:94:4e:4c:03:61:20:
         c9:20:8e:d3:6b:fd:51:ea:78:83:27:37:86:2d:f3:6d:ee:10:
         b6:3a:eb:ad:5c:30:4c:8f:fb:89:ce:fc:36:dd:c9:7c:78:72:
         5a:84:d2:ef:28:de:50:fe:2c:26:a1:da:93:36:a5:88:e8:3e:
         39:30:1a:d3:61:d3:b9:eb:b2:ce:0f:4a:0a:83:a9:07:94:1c:
         20:00:3b:84:41:36:4a:38:00:f4:da:9a:34:b9:35:05:92:d7:
         ef:0e:10:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:32:12 2025 by rpki-client