Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
File:                     6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa (raw, json)
Hash identifier:          LzVz6FDX7z+8KwCZnqC8oLlwElBdG9wR9oxGpKVWEfc=
Subject key identifier:   57:87:53:1F:F5:38:84:88:D9:34:42:B3:11:20:64:83:F2:92:AC:F7
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B0FA6BB73F6D4DC1E47B62900
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     852
IP address blocks:        64.22.78.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bb:73:f6:d4:dc:1e:47:b6:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=936b819f-db0e-4406-b151-dff34ee9a833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d2:83:3e:58:84:5c:8a:ea:4c:2c:17:4f:15:
                    e4:aa:7a:23:56:9e:c1:af:d1:e9:93:6f:57:11:ce:
                    72:ae:b7:63:e6:7e:2b:3b:84:a3:d2:72:9f:2b:60:
                    c7:d4:3d:a8:dd:cb:60:03:29:68:c5:e9:15:52:6b:
                    42:3e:7e:97:31:bd:28:87:87:d2:2e:49:d2:65:e5:
                    05:32:f5:b3:84:5a:3a:4e:3f:77:17:1f:f3:98:0e:
                    be:4d:8e:ae:f0:46:aa:0f:a7:7e:d8:b5:c7:24:c3:
                    51:db:ab:d8:ff:61:82:73:ec:66:f8:aa:8b:94:33:
                    a7:7e:15:5a:a7:60:4d:87:fe:29:32:7d:db:dc:7a:
                    70:98:15:1f:69:07:36:c3:ec:4b:ab:6a:fb:f8:85:
                    47:ed:64:d5:a7:7e:08:0c:f0:b4:63:57:af:69:4e:
                    93:0a:a3:79:ff:1f:80:c6:b3:3b:7e:d0:ec:6d:84:
                    54:75:2f:76:aa:0a:13:26:a7:00:74:66:d2:49:b8:
                    3d:4a:69:53:8b:16:b1:e8:09:be:05:92:d9:7b:c5:
                    d6:5d:f5:4d:2e:1c:b0:83:e7:97:27:76:e6:d4:d2:
                    65:75:a3:27:e3:74:60:dd:a6:7c:60:a0:8e:81:16:
                    0a:94:36:55:81:56:68:4b:9c:76:07:1d:a7:c2:e0:
                    4e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:87:53:1F:F5:38:84:88:D9:34:42:B3:11:20:64:83:F2:92:AC:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/6ea4b834-de55-38eb-86d5-c8f1c188f44f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.78.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d8:85:2d:8c:7a:fb:49:76:8c:8b:ba:72:ff:e2:bf:57:8b:
         76:1e:e0:7d:f0:b4:86:96:37:89:3f:59:d0:86:25:1e:91:7d:
         76:74:24:f9:03:5c:ca:97:2b:f0:65:e7:a0:cc:eb:07:17:fe:
         e8:7d:01:31:2f:d7:8a:91:0f:40:73:8a:4b:eb:2d:46:ef:2c:
         d7:34:18:d8:96:69:f1:ac:42:0c:25:97:ab:3d:1a:1e:77:a3:
         4c:0a:7a:90:bc:5f:24:ea:31:90:94:3c:04:b3:9a:88:30:9b:
         1f:06:41:f4:bd:7b:53:bd:81:ec:4c:c9:e5:01:2e:04:ec:07:
         ec:df:e3:22:3c:f1:9a:c6:dd:7c:c5:47:fd:4f:0c:3d:a8:56:
         90:69:7b:4c:43:08:f3:7f:2a:42:b7:26:ba:8e:65:2c:3e:e2:
         f6:9f:05:d1:af:4d:80:8c:a6:3e:e4:ae:41:a3:af:d2:72:a4:
         8c:d1:a3:e4:f5:7a:b4:5e:e5:f7:71:78:2b:3f:7a:1f:87:97:
         05:ca:3f:0f:a8:e0:7c:20:58:9d:48:3b:38:00:44:1c:98:7c:
         36:a9:68:83:2b:3e:f9:62:06:b5:8f:1c:32:13:2e:ad:23:63:
         bd:96:f4:32:f5:9b:53:e7:fe:2e:1c:18:ed:ac:01:dc:32:5c:
         8f:56:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:57:08 2025 by rpki-client