Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa
File:                     d11d7e2d-3067-3749-a2e7-fb3533597efa.roa (raw, json)
Hash identifier:          pjLWaq6i/7D9qN/zwsXGa4TzcDu/jptQ8PR9pk1yc+o=
Subject key identifier:   95:14:A8:86:1B:A8:47:C7:19:EB:63:EE:4E:DF:D0:23:40:CB:8B:0B
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584B127163CD4830C8C4245F8800
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa
Signing time:             Wed 03 Sep 2025 13:00:41 +0000
ROA not before:           Wed 03 Sep 2025 13:00:41 +0000
ROA not after:            Tue 02 Dec 2025 14:00:41 +0000
asID:                     21782
IP address blocks:        64.127.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:12:71:63:cd:48:30:c8:c4:24:5f:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Sep  3 13:00:41 2025 GMT
            Not After : Dec  2 14:00:41 2025 GMT
        Subject: CN=04964a1d-fef1-4eb1-a941-ae7be5098ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a6:c9:56:aa:d3:26:76:fd:32:5c:6d:49:b7:
                    cf:ee:6a:19:41:d0:0f:26:56:fe:cd:31:b1:00:4c:
                    03:cd:91:54:8e:40:73:d3:8b:f3:fb:c9:22:d3:94:
                    c3:a5:38:54:4e:d2:7f:5d:27:ed:e3:c8:e9:45:dd:
                    89:00:c4:82:d8:a1:0f:c1:cf:6d:3c:2f:f7:c7:e5:
                    3f:d8:22:0a:66:4d:7c:f3:51:59:37:b0:e4:bd:d7:
                    95:8f:58:2d:91:8a:d4:f2:85:38:b9:e7:7a:fa:d4:
                    b0:04:64:84:72:0c:dd:ba:0c:a4:de:cf:68:d1:03:
                    52:d1:93:cf:be:53:b0:f7:18:ac:8c:be:09:8a:d2:
                    ed:85:20:2c:54:1f:4f:bf:5e:d7:5e:e9:71:30:45:
                    3e:85:cf:c6:5b:e7:37:69:ea:8e:f5:da:75:d6:53:
                    ef:11:10:25:42:10:d2:c1:39:9a:77:74:bb:1d:f3:
                    5f:0c:f1:95:9b:fd:2c:19:ce:94:36:38:18:ec:e1:
                    40:1d:15:07:c6:cc:94:de:7d:dd:ae:f5:ed:50:bf:
                    e3:33:71:1f:0f:33:30:b3:98:07:11:21:b8:69:23:
                    7f:52:3e:a8:96:30:c3:f1:67:8c:1a:cc:ee:a5:a2:
                    f0:6d:29:be:39:b5:ed:99:4d:d2:cf:85:c8:7a:f9:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:14:A8:86:1B:A8:47:C7:19:EB:63:EE:4E:DF:D0:23:40:CB:8B:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d11d7e2d-3067-3749-a2e7-fb3533597efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f5:01:f3:1f:21:bc:f8:71:26:60:c0:a8:5e:14:b8:86:23:
         84:25:a3:f7:df:89:8a:60:41:ea:25:06:ce:f7:a2:43:43:df:
         d7:81:be:1c:3e:38:20:65:e5:1c:8a:f2:60:b3:ea:78:5a:70:
         d3:24:33:bd:6c:1c:cb:18:cc:14:4a:46:5c:8b:6d:e5:d3:15:
         c3:e5:be:be:7b:4e:9a:03:1a:cd:59:25:0c:d4:b0:06:f0:e4:
         9a:f8:d6:5c:d6:15:ed:ef:af:13:b0:9b:1e:2b:c5:23:31:36:
         6f:2d:7c:fd:61:f8:03:d7:91:49:91:a7:77:4a:22:0c:be:27:
         c9:f9:54:83:d1:56:b7:03:2b:57:52:fa:21:87:f6:5d:b5:1a:
         da:aa:ff:49:20:33:62:26:e6:0f:75:ac:e6:2c:c0:be:04:ea:
         4e:6b:62:ab:8d:d5:31:c4:88:ce:74:7e:2e:8b:27:64:28:7b:
         e5:86:57:16:5a:5d:f1:6f:64:57:ab:99:42:97:d9:42:a3:c4:
         9f:1d:d1:e0:39:1a:29:00:a6:12:0f:91:59:01:47:d4:57:da:
         5a:14:72:38:41:63:38:32:82:7a:80:04:de:9e:c1:08:6e:c9:
         9d:40:e9:7c:82:3d:2d:cd:b5:b3:36:4d:28:1d:d7:97:f6:6d:
         15:66:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:51:07 2025 by rpki-client