Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
File:                     f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa (raw, json)
Hash identifier:          nu2bPdDb1l2NB7JKtBSEdW3vRxjf5Wr+mD2sHLkwB1s=
Subject key identifier:   7E:9B:73:F3:E6:ED:1D:97:E4:81:2F:3B:26:14:73:B8:FA:8F:EB:F3
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584B01B1485A3F53E287C0758EC0
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa
Signing time:             Thu 28 Aug 2025 13:00:41 +0000
ROA not before:           Thu 28 Aug 2025 13:00:41 +0000
ROA not after:            Wed 26 Nov 2025 14:00:41 +0000
asID:                     18594
IP address blocks:        64.57.144.0/24 maxlen: 24
                          64.57.145.0/24 maxlen: 24
                          64.57.150.0/24 maxlen: 24
                          64.57.151.0/24 maxlen: 24
                          74.120.156.0/24 maxlen: 24
                          74.120.158.0/24 maxlen: 24
                          199.254.202.0/24 maxlen: 24
                          204.90.2.0/24 maxlen: 24
                          208.70.176.0/24 maxlen: 24
                          208.70.177.0/24 maxlen: 24
                          208.70.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:01:b1:48:5a:3f:53:e2:87:c0:75:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Aug 28 13:00:41 2025 GMT
            Not After : Nov 26 14:00:41 2025 GMT
        Subject: CN=7695dced-a4b1-4c32-b669-fbdc96ded316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:2f:94:06:91:06:dc:76:82:ac:3b:70:87:
                    d5:bc:0d:1c:4d:14:a5:21:59:3a:0e:a9:59:33:8a:
                    ec:07:bd:16:72:7d:1d:f0:74:01:c2:f3:5e:66:98:
                    77:12:0c:68:e7:48:c1:59:10:c6:91:4c:ea:c3:7f:
                    e8:30:cf:e1:11:e5:df:07:b7:8e:df:75:d7:af:4b:
                    44:c5:90:d1:c0:8c:18:e1:7e:e4:d9:8f:43:02:a4:
                    b6:2f:18:c5:8e:03:71:3d:c9:4e:88:65:e2:ef:aa:
                    fd:a7:9b:b5:3d:e3:49:01:f6:19:11:7c:1f:1d:b8:
                    2f:b6:f9:61:2f:e2:b3:21:2a:6b:14:57:ff:78:2e:
                    1c:cb:e5:24:62:4c:0a:11:42:b6:39:a8:8b:d8:e1:
                    dd:f5:0d:df:a1:3f:b0:d0:6c:f3:85:f5:05:77:54:
                    4d:87:ec:ce:ca:80:53:57:74:65:e2:ee:1b:dc:ce:
                    62:04:ef:8b:7f:e7:76:f0:b9:26:37:4d:fe:d6:59:
                    a6:f9:e2:43:71:ed:ce:7c:6c:69:fd:bd:ce:d3:18:
                    72:90:26:05:95:43:36:99:cd:0f:9e:59:9e:d3:71:
                    9b:fb:f4:3d:26:49:81:96:10:65:19:e8:fc:4f:26:
                    a1:b4:62:a6:55:0c:83:59:d1:3b:da:11:c6:19:6d:
                    d9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:9B:73:F3:E6:ED:1D:97:E4:81:2F:3B:26:14:73:B8:FA:8F:EB:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/f8bafa71-b016-3d49-97b6-de6d0e4f4211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.144.0/23
                  64.57.150.0/23
                  74.120.156.0/24
                  74.120.158.0/24
                  199.254.202.0/24
                  204.90.2.0/24
                  208.70.176.0/23
                  208.70.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3d:cb:4d:15:b0:eb:88:7c:b3:47:a9:40:85:3f:df:ce:4c:
         aa:48:ad:6b:7d:da:73:c2:83:a5:ba:a4:f3:11:22:dc:7b:02:
         9e:0d:32:6e:d0:37:2b:76:04:c3:d8:6a:86:89:bb:46:a2:98:
         2d:dc:a1:3a:8f:26:64:b6:39:26:e7:c4:45:86:61:ff:e1:b5:
         bb:2b:ce:cf:4b:6f:8b:a9:d6:02:5d:9c:aa:ed:46:fb:07:4f:
         0c:a0:2d:8b:9e:72:48:78:dd:ac:eb:dd:12:c0:33:24:4c:b0:
         ba:be:90:10:e0:c6:b8:8a:7f:66:e1:3a:61:7d:3f:0a:73:93:
         44:da:2a:19:05:fe:dd:6c:60:c1:0b:e1:78:42:04:a4:65:0a:
         c0:46:0c:b9:8f:f2:77:e4:92:f2:c0:e9:e2:95:3c:58:bd:49:
         a4:69:38:59:3f:14:9b:7a:af:3c:46:e8:f0:9b:77:78:7c:94:
         56:47:f9:1c:28:a4:da:c3:00:23:dd:c0:e9:08:e7:b0:ab:6f:
         20:2a:52:5e:9e:8f:b2:2d:47:d4:7f:10:59:4b:fe:c8:63:ab:
         54:1c:07:ab:f0:4a:bb:c6:73:29:b8:44:d9:cc:9d:30:e2:de:
         8f:24:b3:ae:7e:6c:b2:c0:b6:de:62:f1:9d:2e:63:14:c7:5a:
         2b:18:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:12:59 2025 by rpki-client