Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4162eef5-8ce2-37cc-a6b5-4a6586e5203b.roa
File:                     4162eef5-8ce2-37cc-a6b5-4a6586e5203b.roa (raw, json)
Hash identifier:          ydV0Zd+VCXT8O+2VDE6ZHl81HODO61h6HyFxVzOkLJk=
Subject key identifier:   7E:EE:72:5D:C6:3D:85:A9:34:4F:3D:C3:34:77:0F:1D:B4:AC:FD:D6
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B4EFEA476588ACCB4E56B9D00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4162eef5-8ce2-37cc-a6b5-4a6586e5203b.roa
Signing time:             Thu 25 Sep 2025 05:33:49 +0000
ROA not before:           Thu 25 Sep 2025 05:33:49 +0000
ROA not after:            Wed 24 Dec 2025 06:33:49 +0000
asID:                     399073
IP address blocks:        64.145.1.0/24 maxlen: 24
                          64.145.10.0/24 maxlen: 24
                          207.145.12.0/24 maxlen: 24
                          216.254.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:fe:a4:76:58:8a:cc:b4:e5:6b:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 25 05:33:49 2025 GMT
            Not After : Dec 24 06:33:49 2025 GMT
        Subject: CN=e53a2651-b7af-413b-859f-ef3f23fd3143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2e:ea:e5:47:33:07:b1:0d:93:99:82:c6:80:
                    83:70:9a:82:d4:51:01:a2:8d:2a:29:7f:2c:f8:49:
                    47:e3:2c:21:5b:fe:c3:9e:5a:63:eb:02:e7:1c:5e:
                    43:0b:c5:3e:69:e1:6b:1a:d1:89:15:72:c9:2e:b5:
                    c1:64:e9:1f:f4:ae:1d:29:95:59:b7:41:b4:cc:0d:
                    a0:64:3d:37:b1:cd:c1:f1:8b:da:36:88:90:db:9a:
                    09:57:ec:97:e0:71:61:be:bf:5f:fd:33:66:72:b6:
                    88:40:5d:2e:17:6c:93:54:41:9e:c5:8b:58:d7:90:
                    48:d9:2d:65:d0:55:97:72:3c:b8:b6:74:23:54:71:
                    10:cf:89:83:51:d0:e1:e2:8f:30:09:3a:93:c0:a6:
                    b7:2c:32:91:2a:c6:80:01:45:2e:35:77:d1:38:0e:
                    92:cf:5e:58:fd:37:15:cb:0f:e5:76:7c:b7:ef:3d:
                    4b:1b:96:b9:e6:f5:0d:5f:e3:43:1d:15:ea:ca:42:
                    a7:f6:a0:79:aa:e8:e8:97:e2:f5:63:73:b4:f3:85:
                    af:a0:95:3a:b5:e2:16:bc:3d:2a:3e:9f:94:9b:26:
                    1a:ba:e0:a6:44:c0:cf:8f:0a:dc:4b:59:32:7b:8a:
                    95:ec:96:58:fc:d8:c1:bb:52:e4:38:32:8b:aa:81:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EE:72:5D:C6:3D:85:A9:34:4F:3D:C3:34:77:0F:1D:B4:AC:FD:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4162eef5-8ce2-37cc-a6b5-4a6586e5203b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.1.0/24
                  64.145.10.0/24
                  207.145.12.0/24
                  216.254.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:8d:f6:99:ab:06:81:b2:39:31:2b:92:87:f0:a2:8e:a1:
         14:c9:bf:34:43:6e:0d:1b:cb:12:f8:ee:36:80:c5:f6:b7:d4:
         0f:fb:aa:3e:3a:4e:d1:af:06:f4:b9:fc:ef:e1:6a:91:75:33:
         8a:be:c5:a1:0c:dc:25:b1:7d:7c:7e:87:fd:7c:d1:30:e9:20:
         e6:8d:57:b0:bd:b3:34:4b:22:21:ad:34:78:d4:c9:97:fc:85:
         5c:75:59:08:78:ee:0f:a2:07:38:c9:98:f5:91:15:7e:1a:11:
         e3:56:66:be:7c:a2:8a:dd:c5:dd:aa:2b:f0:98:d3:3a:4f:64:
         80:ff:1c:d5:d8:ee:7b:a8:e4:17:71:c6:42:bb:bd:55:e5:cb:
         3c:64:7d:55:2f:93:5a:15:97:7d:43:b4:15:59:91:17:fe:8a:
         8d:f3:8a:a5:e2:f9:6e:3a:19:f4:02:5c:1b:ef:f3:82:f8:61:
         81:35:7e:16:2c:d4:0e:b6:e6:f2:01:00:39:ca:43:10:c8:81:
         45:d9:0b:a0:d3:66:f9:4e:d3:58:1b:54:df:af:c1:1d:72:62:
         69:75:2d:71:28:22:61:dc:fb:87:6e:21:b9:e9:b5:4e:83:03:
         c8:8b:a5:17:92:04:44:4b:9f:30:d1:e5:dd:c7:4e:88:3b:02:
         98:4c:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:52:29 2025 by rpki-client