Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa
File:                     f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa (raw, json)
Hash identifier:          KPpvDIGhD2MTy1MuTOgUTQ8P8NpKv4/FdfKrriArDds=
Subject key identifier:   AC:81:48:B9:DD:C0:B3:68:DF:39:89:64:A6:F1:BC:A9:05:53:47:EA
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B4AA3E06B55565619AD0CCE80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa
Signing time:             Tue 23 Sep 2025 16:07:43 +0000
ROA not before:           Tue 23 Sep 2025 16:07:43 +0000
ROA not after:            Mon 22 Dec 2025 17:07:43 +0000
asID:                     7459
IP address blocks:        64.144.96.0/20 maxlen: 24
                          64.144.144.0/20 maxlen: 24
                          64.144.240.0/20 maxlen: 24
                          66.134.96.0/19 maxlen: 24
                          67.102.192.0/19 maxlen: 24
                          68.165.112.0/20 maxlen: 24
                          68.167.80.0/20 maxlen: 24
                          68.167.96.0/19 maxlen: 24
                          68.167.160.0/20 maxlen: 24
                          68.167.208.0/20 maxlen: 24
                          68.167.224.0/20 maxlen: 24
                          207.145.16.0/20 maxlen: 24
                          207.145.112.0/20 maxlen: 24
                          207.145.128.0/20 maxlen: 24
                          207.145.160.0/20 maxlen: 24
                          216.254.32.0/19 maxlen: 24
                          216.254.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:a3:e0:6b:55:56:56:19:ad:0c:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 23 16:07:43 2025 GMT
            Not After : Dec 22 17:07:43 2025 GMT
        Subject: CN=446ac255-5cd7-4386-9d8d-ccb2f91075c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:e4:1b:b5:26:af:72:82:7e:83:26:b5:18:
                    e3:be:4b:d3:48:74:61:1b:a7:08:75:97:c3:70:97:
                    88:47:8d:2b:3e:44:94:35:aa:cb:ed:d3:ab:bf:0c:
                    ab:b3:0f:75:98:35:32:a8:91:d1:e0:68:93:85:d1:
                    79:51:1e:b4:67:de:a0:6b:45:24:ed:31:3a:f0:17:
                    53:09:3c:82:78:30:8b:a4:5e:7e:95:49:6f:82:6b:
                    e7:d5:e9:52:a0:1b:ea:5d:d0:9c:78:1e:33:ce:c8:
                    b2:97:29:5a:06:c1:ee:87:af:0a:c7:21:49:c4:b8:
                    4e:01:b5:a4:9f:83:bb:74:77:d4:75:35:05:aa:ee:
                    de:94:87:cf:a3:df:24:93:4f:50:6e:3d:ee:90:d1:
                    6b:91:b1:b8:71:81:7e:f6:46:93:be:a6:0c:86:f1:
                    99:66:a4:d8:55:89:76:ff:e1:62:27:b5:7a:2c:5e:
                    6e:ef:17:38:04:37:96:e6:44:2c:60:6f:71:34:0f:
                    9f:6b:06:27:27:a6:94:6b:57:ea:67:35:61:a2:87:
                    ad:88:11:49:92:df:9c:7d:a7:3e:d6:44:f1:d0:2e:
                    9e:19:0e:82:a0:8e:72:72:57:fe:b8:d7:cb:17:4a:
                    f4:d3:9b:69:2a:f8:0e:e6:b8:ea:fe:4a:84:d7:49:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:81:48:B9:DD:C0:B3:68:DF:39:89:64:A6:F1:BC:A9:05:53:47:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f590e03b-2ef1-38c0-a232-e14e41e07ad5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.144.96.0/20
                  64.144.144.0/20
                  64.144.240.0/20
                  66.134.96.0/19
                  67.102.192.0/19
                  68.165.112.0/20
                  68.167.80.0-68.167.127.255
                  68.167.160.0/20
                  68.167.208.0-68.167.239.255
                  207.145.16.0/20
                  207.145.112.0-207.145.143.255
                  207.145.160.0/20
                  216.254.32.0/19
                  216.254.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:5b:3f:03:de:bb:26:88:be:99:35:19:4c:13:7d:a9:df:c0:
         7a:f2:51:ea:33:24:54:7f:20:3f:93:bf:56:46:44:5f:f0:fc:
         83:37:f0:13:fb:02:a6:89:c2:f8:4f:bd:95:f3:a3:cd:8f:fe:
         31:e8:95:1d:8e:a6:0e:5a:5a:93:8b:dc:65:6a:e6:e9:ac:f5:
         58:8f:74:3a:8b:cf:69:ff:9e:89:4f:fd:60:c8:ad:2f:af:82:
         ce:c1:51:ff:5a:66:a7:d5:a9:e2:9c:cd:19:a8:02:05:3a:8e:
         40:7d:4e:2b:4d:ea:b7:42:f6:40:35:92:a7:28:ae:5a:60:5f:
         3f:10:8f:7c:75:61:e1:5a:30:53:02:b4:e3:46:29:19:c4:71:
         1c:05:d6:5c:ce:7c:6f:9e:73:7f:4c:47:66:4c:05:74:2d:73:
         5f:c0:7f:12:a3:88:cf:21:4a:80:f6:40:6d:95:13:fe:0b:be:
         0c:9f:21:22:dc:86:b8:9c:1a:9e:0d:e0:b8:f8:67:a3:28:e1:
         99:50:42:a1:73:2d:59:e7:d6:1f:94:3f:03:e3:0e:36:43:ac:
         9e:11:33:8e:f1:ea:8a:e9:8b:72:ef:bf:88:35:95:a4:56:a7:
         18:ed:ad:b2:31:a8:a7:c6:a9:8c:ae:4d:c8:8d:68:c4:41:cb:
         f1:0a:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:47 2025 by rpki-client