Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa
File:                     f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa (raw, json)
Hash identifier:          JnWLVTSoQxpugwbNb4eyjdE0tjeP+RPak5rlnGPpiKw=
Subject key identifier:   44:B2:1C:99:49:60:C5:BE:D4:7E:86:B3:87:0D:B6:BE:5C:43:4B:77
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B6797B25F1788541A677CBA00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     15169
IP address blocks:        64.233.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:b2:5f:17:88:54:1a:67:7c:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=87052ec7-cef4-43f1-b847-2802647522eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:50:38:2b:6f:17:fc:ae:58:c7:90:71:53:
                    7b:59:8c:39:ed:2c:c0:5f:51:37:5a:0d:87:9f:49:
                    b4:87:07:86:dc:8f:cc:26:db:3d:24:4e:73:fb:32:
                    34:36:90:d5:25:ff:7f:18:ff:ad:ad:49:0a:db:81:
                    03:ca:57:32:2f:de:12:4b:52:d1:60:dd:e2:b3:01:
                    73:4a:4b:4e:f4:8a:73:c2:9b:ba:79:b2:8e:b3:18:
                    df:84:f0:ae:cc:69:23:d1:43:92:89:22:6e:10:a1:
                    c2:0b:3b:fb:66:28:62:31:70:cb:e7:f9:a2:5f:66:
                    94:bd:cb:14:3b:c0:e6:15:33:7a:d1:ae:4a:1e:99:
                    5f:31:e8:91:db:2c:4e:d0:0c:e2:0c:2a:66:e8:bc:
                    31:58:5f:c6:cb:42:9e:a2:c5:7d:0e:d9:bc:de:81:
                    88:fd:35:2b:2f:b8:ae:bb:aa:51:8a:3c:98:10:a2:
                    03:3e:93:07:d0:cb:5f:e4:a1:ee:c8:47:5e:00:bd:
                    cf:3c:26:92:ae:59:76:da:17:6e:f8:0c:f0:cc:46:
                    7f:28:31:c9:c0:07:ad:85:21:a7:13:bb:77:8d:00:
                    46:64:13:9d:7e:a8:cd:d9:f1:b9:c4:73:f5:b6:22:
                    c7:1c:b4:9f:f7:c7:e8:98:15:e7:f5:5c:60:0e:b4:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B2:1C:99:49:60:C5:BE:D4:7E:86:B3:87:0D:B6:BE:5C:43:4B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f88daead-6cba-32df-a8f9-e16b4b2aba2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:84:aa:67:80:6b:f9:21:34:f9:39:fd:3a:44:d3:38:1a:d2:
         9b:0b:2a:60:e4:c8:44:6b:98:fd:be:87:3f:7d:74:d3:bc:67:
         87:ca:b5:06:aa:ed:86:73:29:9b:b2:bf:1b:f9:44:c0:6f:9c:
         d2:81:42:ae:54:6c:90:c0:a7:f9:b2:b4:66:36:28:69:53:7f:
         cc:54:4f:df:e8:2e:cc:4c:9e:bb:28:71:8d:2b:81:5f:32:8b:
         e7:56:b2:47:0d:4a:6e:68:45:1f:4d:1d:9c:2d:ba:0b:ef:4f:
         18:22:80:71:f9:f0:db:e8:48:74:66:e5:99:68:8c:78:ef:48:
         7c:ee:4c:80:65:17:8a:ba:b1:33:66:aa:bb:80:a1:a8:12:d2:
         6e:55:9a:77:ec:6f:a9:ea:13:74:88:e2:d4:1e:27:79:08:4a:
         d4:7f:4e:43:d6:bd:11:dd:56:d1:94:2b:32:5f:9e:07:9d:cd:
         c5:de:31:2d:64:54:96:35:57:14:d6:bc:ef:ec:c2:c9:46:d2:
         98:bb:e3:f9:ba:fd:25:67:c4:35:e3:fa:de:72:9f:7d:49:91:
         d6:78:7f:ea:15:ba:af:b6:c1:0a:08:68:53:89:e2:55:7e:51:
         ff:bb:aa:00:fc:97:e1:1b:23:2c:1b:83:d3:b5:5a:ac:b5:26:
         58:fa:69:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:39:57 2025 by rpki-client