Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b301cb2-cd9c-33d5-be04-3048a85b8ffd.roa
File:                     5b301cb2-cd9c-33d5-be04-3048a85b8ffd.roa (raw, json)
Hash identifier:          5b/9NVPAfEUJVC2S74gnCw7eBvwoU8SS8rRGedvJMUM=
Subject key identifier:   C2:29:4D:1D:F3:E9:06:8A:CC:A4:3E:BE:B2:EA:B6:DC:F6:51:EE:2D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B79ABAD96D60EA247A53C9380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b301cb2-cd9c-33d5-be04-3048a85b8ffd.roa
Signing time:             Fri 10 Oct 2025 12:26:25 +0000
ROA not before:           Fri 10 Oct 2025 12:26:25 +0000
ROA not after:            Thu 08 Jan 2026 13:26:25 +0000
asID:                     54252
IP address blocks:        64.81.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ab:ad:96:d6:0e:a2:47:a5:3c:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 10 12:26:25 2025 GMT
            Not After : Jan  8 13:26:25 2026 GMT
        Subject: CN=0bbefbed-edb5-47d6-a8eb-d3f50465767f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:27:17:bd:42:a5:ef:06:ea:fd:83:4f:73:7b:
                    3f:8b:bb:3a:8d:21:b0:83:c3:10:fa:8a:f5:46:01:
                    86:94:96:50:bb:15:8f:d9:ca:5f:32:f0:57:f8:95:
                    ee:a5:cd:4e:2e:2b:b6:83:af:b3:b7:17:23:cb:47:
                    ff:b2:5c:dc:04:d2:50:d3:39:c4:7d:7e:97:a4:b3:
                    0f:a9:cd:f0:a5:04:fb:67:24:f7:8e:83:6a:7f:58:
                    f0:9f:5a:96:1b:98:95:82:d2:cb:c3:c4:95:a2:87:
                    5d:ee:da:1c:ef:fe:02:c9:a0:8c:ab:d4:b1:6c:2d:
                    8a:e6:34:8f:18:d9:54:4f:6b:59:fe:36:76:1d:24:
                    af:0a:f0:3b:3a:9f:76:d1:96:a4:da:57:a4:42:2f:
                    f3:8e:51:4b:69:97:00:d1:7a:77:d3:e7:81:65:07:
                    c1:ca:5b:c4:39:0d:70:39:dc:55:ec:64:fc:3b:01:
                    59:84:9c:80:39:3d:5f:bc:af:7a:37:cd:0c:76:da:
                    bd:f6:3c:99:82:ef:63:74:78:90:f1:c7:9b:e6:ee:
                    b3:5e:de:25:c3:82:ad:ec:e8:fd:e1:53:b7:79:9d:
                    46:0e:0e:17:97:d0:da:c2:7d:f5:38:75:fd:3d:e7:
                    40:4d:98:15:06:3c:51:3e:ef:77:1e:20:a0:79:d3:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:29:4D:1D:F3:E9:06:8A:CC:A4:3E:BE:B2:EA:B6:DC:F6:51:EE:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5b301cb2-cd9c-33d5-be04-3048a85b8ffd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.81.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:0f:f2:5d:c6:8f:44:b6:41:76:31:5d:2a:f2:88:16:9d:a4:
         79:f3:da:ac:d4:d2:d0:c6:a7:5a:43:9d:51:18:eb:66:cb:1c:
         cc:66:4f:c2:01:bc:60:a7:36:0f:81:51:97:59:6c:68:82:6b:
         1e:4f:bd:75:b7:83:56:d5:6f:97:c9:5c:63:e8:b2:f4:03:c3:
         49:a8:ec:df:c8:86:46:4c:b3:0f:44:bd:23:cd:94:3b:96:9d:
         09:6f:17:fc:e5:73:f3:65:74:df:38:6d:ee:64:36:24:32:c3:
         35:16:80:53:c6:09:3d:36:ee:99:9f:f2:b1:66:e4:12:18:f7:
         3e:17:64:67:54:a2:63:93:b8:49:3b:e7:6f:b2:e6:65:0d:18:
         f4:06:1e:b3:a9:5f:e3:47:11:62:dd:9f:af:e8:58:a4:2f:93:
         5f:1f:05:4b:bc:63:49:8a:8d:70:e1:4c:03:bc:9a:45:49:9b:
         6f:d8:76:37:fa:67:fa:64:92:ea:ac:1e:73:a3:fd:d2:f1:6e:
         b6:8f:33:35:c8:e9:4e:ff:dd:67:e7:9e:5e:0c:48:73:21:ba:
         2c:c6:1c:ea:0d:d8:1e:06:86:56:05:c2:a5:51:eb:d8:e8:ee:
         80:a6:29:54:0b:a5:2f:9f:fe:11:c5:81:db:f9:26:88:0b:aa:
         c7:db:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:50 2025 by rpki-client