Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f0b94db-14fe-38d0-8009-7bf50b495189.roa
File:                     1f0b94db-14fe-38d0-8009-7bf50b495189.roa (raw, json)
Hash identifier:          HZCELSZZs47qjkcHofqTKDw/l02MHgRmg/n72amcXlw=
Subject key identifier:   50:B7:D8:33:22:E2:1E:1E:C4:F5:C1:A9:D3:E5:0D:45:7F:0D:FB:43
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B4DAF7FEBD045A21A1454ECC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f0b94db-14fe-38d0-8009-7bf50b495189.roa
Signing time:             Tue 23 Sep 2025 16:06:13 +0000
ROA not before:           Tue 23 Sep 2025 16:06:13 +0000
ROA not after:            Mon 22 Dec 2025 17:06:13 +0000
asID:                     7459
IP address blocks:        64.144.32.0/19 maxlen: 24
                          64.144.64.0/19 maxlen: 24
                          64.145.32.0/19 maxlen: 24
                          66.80.64.0/19 maxlen: 24
                          66.80.192.0/18 maxlen: 24
                          66.95.128.0/18 maxlen: 24
                          66.95.224.0/19 maxlen: 24
                          66.134.0.0/18 maxlen: 24
                          66.134.128.0/17 maxlen: 24
                          69.3.160.0/19 maxlen: 24
                          155.229.128.0/18 maxlen: 24
                          207.145.64.0/19 maxlen: 24
                          207.145.192.0/19 maxlen: 24
                          216.175.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:af:7f:eb:d0:45:a2:1a:14:54:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 23 16:06:13 2025 GMT
            Not After : Dec 22 17:06:13 2025 GMT
        Subject: CN=038a5f6a-904c-40fa-b524-8c7a5799b08b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:53:37:d2:0f:14:09:6f:a5:05:7a:85:81:
                    a7:55:98:15:99:a3:7a:d2:b4:44:41:cd:f2:7c:9f:
                    19:c6:8b:e4:c4:74:ea:18:ad:60:3f:98:da:4e:ef:
                    6d:c6:0a:e1:86:c8:56:9e:e7:04:5a:5d:b3:f9:88:
                    46:d6:44:3d:31:6e:5e:05:c9:3e:3d:8f:b7:17:0c:
                    d5:b7:d2:cb:23:58:25:69:47:e2:7c:ad:94:d0:e0:
                    2c:8e:5e:61:66:98:02:1b:35:a0:ae:70:b6:6a:fe:
                    91:0a:42:11:10:34:18:7c:a5:2d:37:e2:25:95:0d:
                    3c:ed:7e:8b:24:47:a3:1e:14:1c:a2:a9:84:23:a7:
                    7b:b0:9c:51:4a:d5:f4:b4:eb:26:99:f9:74:d6:dd:
                    df:db:7f:36:70:e6:a9:12:07:ef:b1:18:27:a4:45:
                    a2:40:e5:30:f7:fe:cc:d7:51:d0:5d:34:ca:ff:c7:
                    1d:d4:86:95:6e:6e:35:1d:02:0b:72:fb:c3:2e:10:
                    46:d0:ca:53:69:be:bf:03:cb:7e:da:b0:c0:65:f1:
                    30:1e:1a:3b:bb:f6:ae:4f:67:bf:69:dc:59:25:fa:
                    0c:37:1b:02:f9:94:7e:dd:db:b4:10:a0:79:4f:30:
                    d3:e7:80:98:8a:c3:bc:01:f1:1d:6e:7a:0b:8c:b4:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:D8:33:22:E2:1E:1E:C4:F5:C1:A9:D3:E5:0D:45:7F:0D:FB:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1f0b94db-14fe-38d0-8009-7bf50b495189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.144.32.0-64.144.95.255
                  64.145.32.0/19
                  66.80.64.0/19
                  66.80.192.0/18
                  66.95.128.0/18
                  66.95.224.0/19
                  66.134.0.0/18
                  66.134.128.0/17
                  69.3.160.0/19
                  155.229.128.0/18
                  207.145.64.0/19
                  207.145.192.0/19
                  216.175.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:89:d1:c8:9b:de:c1:4e:51:a3:61:71:72:dd:21:4a:71:af:
         b8:a0:1a:40:38:8d:63:de:32:d3:88:d0:e9:9f:c4:2a:e6:c1:
         13:8d:8e:6c:32:c9:cb:e3:c3:72:45:84:b6:fc:a5:e2:d9:88:
         87:bf:ed:f4:71:7e:b5:79:55:3a:69:55:20:0f:98:f6:ca:89:
         59:cd:ad:0d:4d:d8:e3:4e:70:ac:cd:0f:69:d8:fa:0f:d2:6f:
         db:80:19:f2:c9:20:23:1a:46:93:63:72:b2:ec:1f:37:23:0c:
         c9:6c:a7:a3:e4:47:b8:cf:8e:f7:2e:d3:48:16:29:49:8e:9c:
         65:98:77:e0:c4:ff:0b:70:db:0e:75:59:19:70:16:59:99:1d:
         b7:70:a5:e6:08:5f:da:c8:82:b8:ae:4f:1e:d3:ff:31:9f:c5:
         2d:10:22:44:8e:b5:78:a4:15:1e:f1:59:8b:86:a0:97:87:6a:
         95:73:5a:7f:24:fb:13:20:c9:aa:7f:4b:4c:01:1d:53:cc:48:
         28:f1:ba:8e:be:cf:43:36:e8:ad:73:15:d4:33:11:94:41:b6:
         2a:fd:13:ee:c8:a9:ea:f0:50:38:c5:72:3c:3b:c8:94:0d:05:
         14:17:8e:2b:56:e8:d4:d3:1f:21:38:6b:c9:1a:42:e9:bf:18:
         ae:d9:82:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:48 2025 by rpki-client