Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92acbe93-3b58-3613-a497-03457b0efda7.roa
File:                     92acbe93-3b58-3613-a497-03457b0efda7.roa (raw, json)
Hash identifier:          AE5DSjYwE4MhK6VsEhf8WkUGbBht1kI2CvV1KKiCfUY=
Subject key identifier:   F6:D8:72:2B:D0:A0:D7:47:FE:8B:32:34:EB:9C:E3:12:12:A1:86:2B
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584B1C37515027DE8FC5592F3900
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92acbe93-3b58-3613-a497-03457b0efda7.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        64.17.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:51:50:27:de:8f:c5:59:2f:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=04972505-e660-4758-890e-fe59476eff97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:a9:c5:f3:4d:0a:b7:2b:a1:0a:51:02:95:
                    67:2a:4c:e8:a8:37:fc:52:3e:aa:c5:4c:17:e9:de:
                    12:c4:24:0a:ff:a1:c3:a5:39:68:d4:2f:3a:8a:0c:
                    7e:af:4c:24:05:8c:b5:77:48:c2:ae:2a:2a:83:18:
                    6b:3b:e8:f9:85:54:eb:a9:00:54:11:47:53:87:1b:
                    6c:72:17:dd:66:47:2d:17:11:62:c7:8c:44:12:17:
                    10:60:2b:fc:db:58:e3:94:d3:b8:10:84:e2:8b:2f:
                    8e:1e:85:96:c4:a9:72:94:ed:77:c7:93:20:c7:2c:
                    d2:4c:5a:4a:3d:84:85:2c:50:8d:ec:92:12:c8:16:
                    32:9a:02:a5:82:ed:03:76:78:73:f4:17:3c:cf:a7:
                    1b:3d:c9:4f:5c:18:26:f1:b1:21:60:40:92:94:55:
                    cd:83:ef:44:67:6e:5e:6b:ef:0b:70:3b:cf:46:91:
                    3b:d0:7e:c5:75:98:88:c8:8c:87:a4:d0:62:66:60:
                    94:cf:98:57:90:71:74:6e:e4:6e:0b:bb:69:67:71:
                    a9:f7:20:06:92:a7:25:12:78:80:ce:5a:9d:f1:23:
                    f9:46:51:16:0a:d1:a8:a7:80:ac:11:d6:4f:d8:bd:
                    bb:ca:7d:61:d5:27:c2:26:70:98:e5:8f:ef:06:3f:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D8:72:2B:D0:A0:D7:47:FE:8B:32:34:EB:9C:E3:12:12:A1:86:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/92acbe93-3b58-3613-a497-03457b0efda7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.17.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:5d:6c:47:5f:35:1b:bb:b3:40:90:fc:c2:25:0f:06:6a:
         56:69:df:9f:08:90:6c:5e:bd:c2:de:82:6e:c9:61:9b:f9:09:
         85:f0:bd:de:c6:cb:b4:d0:d1:46:08:ec:c4:5a:33:5f:ca:1f:
         66:ae:e3:13:02:14:88:33:dd:35:39:49:a5:dd:60:2c:24:1a:
         c9:7a:c9:a9:da:65:32:5d:21:44:b0:6e:66:88:b0:c9:81:49:
         6b:0e:89:6c:fa:7e:44:c9:ee:42:1e:73:90:7b:81:01:bf:2a:
         78:4a:81:40:43:c6:ed:d2:15:7a:7e:65:13:dd:31:a5:df:77:
         0c:b3:79:7a:b1:9b:ce:48:0a:b7:f2:f2:8e:1b:91:c0:5a:0e:
         c4:e2:e5:25:a6:6a:b9:84:9c:f8:8f:00:15:d0:e0:e8:f9:eb:
         43:78:d1:15:60:b3:47:4e:07:3d:61:ed:e4:10:da:af:51:74:
         80:dd:d3:84:0b:18:41:e2:30:a5:fc:94:a5:e5:16:91:2e:eb:
         ee:65:f7:ca:3a:ca:64:71:86:f6:7d:db:bd:99:b4:be:86:a7:
         69:89:73:8f:9a:5a:d2:96:aa:ab:36:57:00:e7:5c:39:db:05:
         ad:77:34:1e:6b:ce:bd:c1:94:7c:46:ab:61:be:71:37:88:ee:
         c5:88:d0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:14:34 2025 by rpki-client