Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
File:                     215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa (raw, json)
Hash identifier:          NkALkLWtbhZxWtE27ACbtz8igUjZBBM0RQcMd+wxYKU=
Subject key identifier:   2D:D8:33:B3:62:6A:E1:2A:33:D6:17:65:B6:12:78:D2:2C:6F:E6:F0
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F4328584B5141BE1B307C0AC151721840
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     33362
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:be:1b:30:7c:0a:c1:51:72:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=40e145a8-1a6e-46f9-88c2-2b60ce5d6533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:a5:ed:35:ea:15:9d:44:98:90:1b:e0:b0:
                    eb:a3:40:2f:9b:cc:39:33:70:90:af:41:da:ef:88:
                    9f:12:c4:07:73:12:6b:64:a9:51:b6:e8:db:2c:6a:
                    d4:1c:ce:74:f1:8e:31:c0:c2:82:e3:e8:04:ee:0c:
                    fe:78:c1:6e:cc:37:0b:44:56:30:11:f1:28:0e:02:
                    0b:c1:65:48:b6:06:ca:ab:70:43:1e:a9:58:ab:a2:
                    cb:74:6a:b3:e6:99:1c:4f:b1:0f:51:8e:55:8d:83:
                    6b:45:6a:40:49:bc:4e:d8:ef:9f:33:c4:78:57:a7:
                    de:14:52:ac:97:b7:28:ea:de:a4:0e:02:12:5d:c8:
                    b2:32:97:b5:4f:b5:e1:7f:fc:15:03:6e:99:fc:cf:
                    7a:85:7d:1c:c1:95:29:cd:36:55:a1:0b:99:c5:c7:
                    e5:45:3b:66:76:81:74:54:5a:4f:28:01:cc:d5:73:
                    99:17:29:6f:cb:41:43:6e:15:80:96:00:92:d6:e9:
                    6c:50:39:ea:de:51:04:92:f5:af:f1:ac:f0:23:65:
                    39:ad:f1:01:74:21:e4:63:2d:f9:31:fe:66:fd:18:
                    db:34:3e:c9:fa:b4:2e:02:d7:84:48:47:f5:1d:5b:
                    f2:eb:c7:26:28:7c:de:3a:27:b9:c5:dd:a8:11:62:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D8:33:B3:62:6A:E1:2A:33:D6:17:65:B6:12:78:D2:2C:6F:E6:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/215c8ebe-db0e-33af-bc37-3ddc421bcdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cd:6c:b8:2b:cf:75:c0:d8:28:db:98:ba:3c:74:37:54:48:
         9b:4f:f7:91:5d:47:0f:8c:d6:10:c1:19:8b:5d:22:d7:a8:c1:
         55:e2:07:f8:86:af:1a:ed:ef:09:bf:01:6b:73:ad:6f:6c:cb:
         b2:8a:0d:bc:f6:a3:e9:ad:10:81:a4:19:9d:d7:fb:24:f2:57:
         cc:7d:af:6a:b6:27:5a:c5:c4:b0:71:26:d5:a8:c5:40:e5:40:
         1e:f4:e0:b6:e8:c4:4d:a9:42:be:a3:03:95:55:f2:e1:16:36:
         7e:fb:6c:9d:b0:9b:f1:fd:df:ee:56:a1:49:b9:c0:c5:6a:02:
         fd:58:88:26:a2:24:fe:f5:a8:cc:a6:22:be:ee:1d:c1:d5:8c:
         1f:a4:96:20:46:f1:37:3a:5f:aa:79:77:c6:0c:a1:89:a0:1f:
         72:72:d1:ab:19:80:a9:da:8e:e3:a2:d6:a5:c1:36:54:a8:a3:
         8c:17:dd:37:0e:e8:a4:47:38:c5:8e:e3:80:bb:e3:78:ce:f9:
         01:67:44:ea:f9:fb:2a:8a:b6:d7:84:b4:45:a9:5e:08:6c:b4:
         73:bf:7f:20:69:3c:5c:23:4e:81:30:10:b4:aa:5c:4d:75:f4:
         54:9e:68:53:69:cc:90:35:5c:01:07:49:90:47:c3:5f:15:b2:
         64:30:1a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:32:51 2025 by rpki-client