Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa
File:                     c0cb337b-414f-3564-8295-d4fdcb393471.roa (raw, json)
Hash identifier:          p9oszVIOtX8YfkhelKVXN8SQzJVCLhKwDTTZPr0q2G0=
Subject key identifier:   DA:64:8A:DD:32:1A:EE:00:EE:79:A5:6A:ED:10:8E:73:1C:BC:2F:FC
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B2FC1BA481C83E9AA9EBD8AC0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     58212
IP address blocks:        64.22.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:ba:48:1c:83:e9:aa:9e:bd:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=3097033f-6610-4113-bc09-ca5f0bd8ce75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4c:d0:12:59:bc:82:28:3e:2a:c4:67:d5:72:
                    1a:e4:7a:7a:f5:8a:68:a0:a9:c3:9a:c1:8e:f0:11:
                    ca:f9:26:a0:cd:63:ff:12:46:49:61:08:44:37:41:
                    2e:3d:f0:9e:ab:ca:72:ef:35:7f:ad:33:8e:5a:79:
                    0b:eb:94:24:15:a9:b2:0d:91:bb:d2:95:48:2a:33:
                    ef:f0:fe:d1:0d:37:4b:45:a3:ca:8c:16:0b:e1:61:
                    51:cb:ac:90:ec:92:68:62:cd:b6:96:16:b9:6a:96:
                    30:be:d0:7f:ef:5b:5c:ca:ff:ad:9b:5e:c2:97:53:
                    42:1a:ae:5c:1c:7f:56:8e:79:ff:42:c0:ce:3a:1a:
                    a6:5b:43:a8:fe:7c:12:7b:ac:ec:73:c4:90:53:54:
                    b9:27:45:9b:f4:b9:ba:fd:bb:5b:16:e7:13:0b:03:
                    ba:9d:23:29:e2:9c:c7:1c:5b:e5:eb:fa:06:1b:fc:
                    67:09:10:e9:83:54:d0:ac:0d:cb:0d:18:79:7c:69:
                    aa:2f:1e:48:0e:b6:f5:8e:6d:3f:9f:ea:be:ab:93:
                    43:d8:f4:85:e2:7e:d9:bc:09:57:e7:ad:61:5f:d1:
                    7c:a5:bf:64:6c:f8:81:21:a6:20:f7:05:43:8d:ff:
                    ac:a7:ce:7d:c8:e1:a9:90:ee:d2:29:db:40:9c:41:
                    f5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:64:8A:DD:32:1A:EE:00:EE:79:A5:6A:ED:10:8E:73:1C:BC:2F:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c0cb337b-414f-3564-8295-d4fdcb393471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6e:a2:8f:b2:c0:30:df:b1:ac:b6:da:c5:b7:4b:ae:94:2f:
         ac:a1:e0:c9:a3:0a:ff:ca:c6:bf:4c:51:7b:7b:0a:62:fd:6a:
         ba:2f:a5:b8:a1:f2:23:30:b8:b6:d7:e5:4d:b3:fa:e9:b0:93:
         3a:66:50:f8:cc:f7:ae:7d:c9:0f:c5:5f:4a:2d:e2:91:26:b5:
         6e:d5:a0:f3:95:35:72:9a:d4:b1:fa:17:94:0d:4a:58:dc:d2:
         69:60:db:a7:d8:c4:3a:13:23:05:80:2c:a7:58:92:93:b0:6d:
         6f:07:46:6f:f1:19:6d:dc:6a:5a:06:95:a6:b2:90:96:55:2a:
         45:dc:f0:d5:28:e3:5c:b2:dd:2a:b8:36:21:1b:d0:9e:93:37:
         74:b4:ef:56:df:f5:9e:22:ad:6b:b5:d8:a1:47:17:f6:62:60:
         9c:78:81:41:f8:4f:f9:7d:56:20:87:16:96:d9:bf:14:9e:3f:
         0e:37:63:68:03:3d:9e:fe:17:5a:86:4d:8d:45:b9:af:b8:da:
         d4:0c:c8:98:84:50:5b:4d:0d:72:32:c2:aa:a7:4c:66:c2:e1:
         f6:a7:1d:fa:a1:95:3c:40:20:fd:82:8c:64:b0:dc:8c:19:fe:
         a0:63:91:62:0a:f4:05:53:d9:3b:96:a9:dd:85:72:f1:b9:a3:
         93:de:ff:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:56:34 2025 by rpki-client