Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aed6ad05-2057-30b8-ac4b-bfa9f0281b4d.roa
File:                     aed6ad05-2057-30b8-ac4b-bfa9f0281b4d.roa (raw, json)
Hash identifier:          9zxm5uQZy7VgtNpjXV9jTxO3f2VX3CLsRfULW/e5e0w=
Subject key identifier:   09:C1:98:06:EE:2A:74:47:3C:B8:07:98:C3:D3:10:EC:57:3C:00:13
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B339B381E5D28B61037928B00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aed6ad05-2057-30b8-ac4b-bfa9f0281b4d.roa
Signing time:             Mon 15 Sep 2025 10:06:40 +0000
ROA not before:           Mon 15 Sep 2025 10:06:40 +0000
ROA not after:            Sun 14 Dec 2025 11:06:40 +0000
asID:                     5065
IP address blocks:        64.144.17.0/24 maxlen: 24
                          66.95.217.0/24 maxlen: 24
                          66.95.218.0/24 maxlen: 24
                          66.95.219.0/24 maxlen: 24
                          66.95.220.0/24 maxlen: 24
                          66.95.221.0/24 maxlen: 24
                          66.95.222.0/24 maxlen: 24
                          66.95.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:9b:38:1e:5d:28:b6:10:37:92:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 15 10:06:40 2025 GMT
            Not After : Dec 14 11:06:40 2025 GMT
        Subject: CN=58b0f19f-d147-4d42-b2d6-7012cab5cad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:31:54:6d:6a:fd:80:44:4f:d3:52:43:15:89:
                    a7:48:30:fc:1d:0b:b0:3e:7a:92:ce:00:7c:df:9d:
                    c6:35:ae:e5:38:dd:fb:a7:58:19:74:f4:ee:4f:a4:
                    1d:7c:5b:ef:2c:ca:7b:bf:ff:af:0e:84:d6:1f:5b:
                    82:ae:7b:5d:a2:4f:c0:ce:f9:b6:77:a3:bf:13:44:
                    49:5d:70:7c:10:3f:08:6b:3f:e9:e0:ed:9b:c9:84:
                    ab:84:26:7f:cd:42:29:b5:20:8e:f2:f4:95:dc:1a:
                    3a:a1:c7:54:96:bb:41:98:18:fa:d9:a9:af:8f:62:
                    06:7b:48:c1:df:9a:31:57:f7:4e:59:df:8b:90:98:
                    15:f6:c4:98:70:47:06:48:bd:1b:ce:13:9d:28:b6:
                    c0:8e:24:96:7b:8a:8e:cb:f5:c9:4b:46:02:4d:c0:
                    1e:93:9b:e4:1f:ca:89:6a:15:23:ff:37:74:2a:48:
                    0e:d4:f0:1d:86:6d:18:ba:f0:a0:a0:5b:aa:72:77:
                    7e:71:5e:72:24:c9:cb:20:73:7e:7a:ec:8b:0f:e2:
                    d8:70:a6:63:9f:9f:67:e5:a1:b4:d7:94:3a:81:a2:
                    ff:0e:ae:89:3d:c7:6e:67:b0:0b:8b:05:c4:b7:78:
                    a4:e6:3d:b3:fe:0f:43:24:8f:db:2d:12:9d:b0:cb:
                    af:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C1:98:06:EE:2A:74:47:3C:B8:07:98:C3:D3:10:EC:57:3C:00:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/aed6ad05-2057-30b8-ac4b-bfa9f0281b4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.144.17.0/24
                  66.95.217.0-66.95.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:aa:a4:74:fb:18:db:4a:45:40:03:6d:48:bc:71:39:7b:10:
         36:89:d2:a4:60:5e:ff:22:99:70:5a:13:9e:d8:a1:bb:c2:2a:
         c5:90:33:a6:32:42:d9:75:54:59:6e:33:7e:56:89:23:a0:a9:
         e1:e6:dc:a4:7a:3e:4a:77:1d:91:03:60:98:e1:1f:3f:d7:c1:
         24:b1:0b:90:7b:e1:1b:15:9e:bd:54:13:a5:2c:89:f1:a7:58:
         ee:89:4e:86:f5:57:8e:9b:65:64:8b:c7:ef:82:70:9f:07:2b:
         82:20:4d:7b:b5:45:e0:6c:a1:63:c9:c7:20:37:9e:a4:d1:46:
         21:5b:2e:4c:c6:86:e3:65:77:7d:2a:09:7a:c2:8d:35:ba:34:
         e7:60:cb:c4:33:e9:a1:75:41:f3:58:fd:68:25:f6:be:5e:b5:
         83:d7:1a:b9:91:00:5b:ab:c9:41:c0:14:b3:2c:63:e1:4f:3a:
         f4:d2:d8:f3:3f:3e:69:d1:2c:0c:64:f5:6e:88:9c:72:e4:c0:
         09:01:c3:06:a0:7c:3f:55:80:e9:01:29:65:22:2d:f1:2d:40:
         05:5d:65:2a:4f:c0:3f:95:fd:2a:e5:c3:0f:95:76:2c:8c:8c:
         fd:7d:a7:f0:a2:c6:dc:59:5e:b8:b5:4d:08:19:46:33:d4:97:
         7b:05:9e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:01:11 2025 by rpki-client