Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa
File:                     704873e2-72fd-3f26-b28b-6b22f455cc56.roa (raw, json)
Hash identifier:          SrrZSyvEulIJfjdL94rt9l8cBZXCdQC50U01I7wroxs=
Subject key identifier:   05:4A:47:59:E7:39:59:78:A7:D3:35:94:BA:F1:3A:7C:EA:C1:27:F6
Certificate issuer:       /CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
Certificate serial:       010D0C9F4328584B1AD17B1A297A69E681D92E80
Authority key identifier: 0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     7354
IP address blocks:        64.112.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:7b:1a:29:7a:69:e6:81:d9:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e49b4c6-4d58-42e0-abe2-93754fdcda35
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=5272215b-233f-4d4a-916a-83cc23cab9f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:c6:61:94:ae:67:74:5d:ce:59:01:6c:e4:
                    3f:4b:6c:fe:57:04:17:23:5e:30:48:98:27:8d:04:
                    77:6c:2f:b6:5b:0b:e4:14:f5:6e:d0:9a:9a:11:1d:
                    9a:8a:9e:9a:29:fa:4c:4e:53:fd:d9:61:18:97:85:
                    3f:31:f6:a7:37:b5:a4:60:f9:c1:7e:74:41:89:de:
                    b2:e2:6c:cb:bd:a9:19:99:7d:1f:d9:69:71:42:38:
                    f2:42:2c:5a:44:3a:02:f2:ba:b8:cb:cd:28:4b:ce:
                    27:e7:34:cb:3c:ed:4e:ba:6d:25:f7:71:05:3c:10:
                    c7:1e:13:44:3b:3f:80:02:3f:bb:b6:5a:fe:bd:ff:
                    96:34:bc:78:66:66:b8:5b:1f:fb:11:3c:ea:58:c2:
                    de:e6:fe:a0:52:00:95:03:6f:e4:a2:9d:0e:9f:2f:
                    4e:32:f2:c8:05:98:31:2b:14:fe:0e:f4:81:9c:7d:
                    15:c4:68:b8:6b:58:71:7e:4b:54:0a:25:9c:05:f3:
                    ec:1e:2a:01:a4:15:9d:c6:b3:55:52:0b:6e:67:76:
                    46:68:3a:42:89:b9:e0:5a:9d:34:8e:98:f5:46:40:
                    e2:8f:26:54:dd:29:88:95:90:3a:b0:05:83:77:3d:
                    d5:0b:26:e6:ae:be:d7:bc:4e:3f:50:b3:b8:9e:4e:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4A:47:59:E7:39:59:78:A7:D3:35:94:BA:F1:3A:7C:EA:C1:27:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/704873e2-72fd-3f26-b28b-6b22f455cc56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35/8e49b4c6-4d58-42e0-abe2-93754fdcda35.crl

            X509v3 Authority Key Identifier:
                keyid:0A:49:18:96:98:6F:CF:D4:8D:B3:E6:A2:22:27:C1:26:59:D2:EB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8e49b4c6-4d58-42e0-abe2-93754fdcda35.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:a9:7d:ee:3b:05:50:6d:94:3c:d7:29:9a:be:82:40:ca:31:
         8f:6e:91:8b:d7:b8:6c:d0:54:b0:66:71:91:b9:3d:11:65:86:
         a3:a2:1d:41:bf:14:22:61:0b:15:b2:d7:31:62:1d:e5:f7:8b:
         ce:dc:82:56:38:18:a4:35:21:77:da:12:11:2a:3d:82:90:a4:
         35:08:4f:d2:31:62:2e:6f:6e:fc:00:f5:5e:74:c3:2b:66:b1:
         4d:73:bd:88:8c:89:79:c8:35:9d:b2:96:90:b9:f4:da:1a:9b:
         25:53:a7:c8:52:5a:07:9a:2b:77:ec:6c:ff:c2:77:b3:0c:5d:
         ab:26:e8:d1:cb:18:4d:ca:85:84:e7:46:af:ad:c6:d3:9f:84:
         5f:9a:47:e2:aa:ed:a1:ca:5e:60:7f:7a:2e:39:69:bf:b6:db:
         97:c2:0d:65:85:d2:20:5c:30:fa:7b:cc:8c:3b:9f:56:b5:8f:
         eb:12:4e:81:e2:d4:9f:30:f6:3c:95:d5:a3:ae:3d:4e:c4:cd:
         e2:97:4c:35:2b:a1:9f:43:fb:1e:c3:52:f2:97:71:94:6b:f4:
         d9:b7:c8:cf:13:a7:c9:88:06:61:4e:89:b7:fc:73:8b:50:71:
         a0:98:e3:ce:74:4e:8a:e3:63:6d:06:3c:4b:f7:47:72:0b:ab:
         0b:16:96:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:37:01 2025 by rpki-client