Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
File:                     c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa (raw, json)
Hash identifier:          +4NCChSq3qe5CdAC6WLj0vPOyv5O25FuhxvOMCRFtC4=
Subject key identifier:   A3:63:E9:CE:A8:8A:81:6C:6D:C7:B1:20:E3:A3:35:DD:78:D3:E3:AE
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584B0A115EB44960ACA0BAE10840
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        64.69.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5e:b4:49:60:ac:a0:ba:e1:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=11fab122-8550-4bd9-a36a-2afab8ea36f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6b:69:38:50:59:ee:06:b8:9c:2e:58:2f:69:
                    68:03:07:d1:37:7f:be:48:d4:79:12:46:4e:14:16:
                    e4:7d:b3:da:67:24:b9:3e:3d:df:2e:f8:c1:46:54:
                    a2:29:b6:db:e7:d8:57:18:3b:ae:f8:ea:a5:30:8b:
                    f5:ee:09:72:91:12:a1:60:1b:3d:22:5b:3c:83:0b:
                    0b:c5:9e:86:01:13:8f:4c:46:f8:b5:20:1b:fb:45:
                    32:8a:42:ed:d6:0d:94:7d:85:73:f1:f5:73:22:93:
                    f9:2b:42:4d:98:87:70:66:64:4f:09:26:69:66:c5:
                    75:52:f1:94:60:87:45:af:be:c7:fa:8b:c9:87:5e:
                    23:b1:53:3d:16:25:51:16:7b:3f:7d:85:cb:3b:78:
                    ea:f5:99:0a:c1:56:dc:c1:32:80:39:94:e4:71:fd:
                    c3:0f:2c:c8:ff:f1:f7:e7:de:4c:86:2f:d2:98:8d:
                    c7:87:9c:27:a2:42:0f:75:0d:d0:b6:0d:94:fc:2b:
                    d2:74:b9:2f:01:6f:7c:74:10:b0:34:fd:cf:fc:dc:
                    5d:84:a4:d6:34:25:b9:29:f4:4e:ff:ff:2e:77:fe:
                    c1:be:09:30:1d:f3:4e:8a:8b:94:23:17:54:45:62:
                    ea:49:d8:40:79:4b:dd:d1:25:9f:a5:48:af:45:95:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:E9:CE:A8:8A:81:6C:6D:C7:B1:20:E3:A3:35:DD:78:D3:E3:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/c3d8cbf4-c2a6-3469-9eda-e2116b238de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.69.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:f6:ec:c6:00:c9:57:2a:ca:b8:89:7e:33:48:8e:3b:e1:09:
         ca:af:7a:52:18:de:14:a3:9e:55:03:b7:a3:c3:ea:59:ea:bd:
         d9:fd:e0:5f:58:9e:2f:0b:80:99:55:f6:7e:c4:2e:08:49:fd:
         81:4b:b8:00:48:28:57:c6:bb:02:4d:36:2a:4c:b9:a3:66:02:
         db:b9:08:0c:e3:66:ef:9a:0b:7f:83:28:3d:da:b6:48:09:f3:
         e3:3f:10:d6:5b:7d:30:47:99:12:f0:29:18:2e:cc:71:ff:ac:
         66:59:96:78:83:0f:d3:09:9f:46:51:8a:df:35:25:60:9c:52:
         3d:b9:0b:c6:48:ce:c8:20:5c:8c:3f:e3:d7:83:54:83:4e:7f:
         ba:77:d6:fc:84:8e:2b:5e:5a:cc:7a:40:15:5f:3a:21:00:90:
         72:88:79:cd:22:4b:ed:b8:06:02:e8:8e:f0:79:1c:e7:4e:20:
         ee:4e:c9:2d:fd:8a:40:fd:5f:0f:f6:35:ba:42:af:2c:79:18:
         74:ac:f5:00:d0:e1:c6:60:dc:84:f9:92:b1:8e:da:c1:65:41:
         35:ec:93:d0:8c:bd:79:d9:ac:f8:d7:ac:85:70:2b:72:0f:06:
         da:2b:ed:cc:36:15:34:c7:6c:8c:06:e5:9e:7b:c1:ca:f3:72:
         ac:ab:aa:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:14 2025 by rpki-client