Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa
File:                     ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa (raw, json)
Hash identifier:          LyQEJqK5xVUsH73GidK/2eMYlcQtXDR71WEGFl8U+KQ=
Subject key identifier:   45:AB:91:AC:B1:25:58:87:B8:24:DD:31:F5:48:D3:D3:95:A1:DF:EF
Certificate issuer:       /CN=87a7a98d-6ed8-48cc-953b-32292e94edde
Certificate serial:       010D0C9F4328584B538D7641995D07DBD9CCDC80
Authority key identifier: B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa
Signing time:             Fri 26 Sep 2025 20:44:49 +0000
ROA not before:           Fri 26 Sep 2025 20:44:49 +0000
ROA not after:            Thu 25 Dec 2025 21:44:49 +0000
asID:                     26891
IP address blocks:        64.25.224.0/20 maxlen: 24
                          66.110.176.0/20 maxlen: 24
                          97.64.0.0/20 maxlen: 24
                          162.210.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:53:8d:76:41:99:5d:07:db:d9:cc:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87a7a98d-6ed8-48cc-953b-32292e94edde
        Validity
            Not Before: Sep 26 20:44:49 2025 GMT
            Not After : Dec 25 21:44:49 2025 GMT
        Subject: CN=1851e596-0183-4c0c-9fe4-b4680c997182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:10:d8:91:2d:00:b1:ad:b3:80:91:5d:89:c1:
                    df:9e:b7:27:46:7c:b9:cf:0d:b5:81:38:2a:73:b1:
                    d2:b9:72:a0:91:66:b1:41:36:c9:32:ec:3c:83:fb:
                    71:54:f3:cd:9e:48:c5:49:d6:35:4f:03:17:75:08:
                    df:f7:b4:a5:39:00:c7:89:40:b6:0c:ba:7d:ac:9a:
                    48:0e:8d:a3:1a:7a:e7:23:4a:56:d6:97:14:72:ab:
                    42:1f:4b:80:4c:60:3a:7e:52:34:4d:a6:46:82:eb:
                    dd:d6:61:6c:3e:57:b9:ef:6d:15:3d:7a:bd:85:02:
                    91:f8:35:25:bf:4a:7f:06:03:f0:93:3b:8e:4a:82:
                    68:5b:a8:23:87:05:42:21:94:50:58:2f:1c:06:d2:
                    c8:1d:27:9f:f3:c2:66:3e:2d:23:37:c5:b4:7a:f6:
                    a4:25:dd:ee:74:b2:aa:5d:63:b7:9c:54:6c:68:c9:
                    16:0d:89:0c:ad:56:de:bc:13:91:33:36:ed:ae:37:
                    b1:fc:14:ef:ce:72:84:95:83:35:5d:4c:df:5c:3b:
                    68:95:88:9e:0a:f7:c1:9b:e7:71:0b:59:10:cb:00:
                    64:de:f6:de:d9:1d:f7:61:0d:b6:32:a9:f0:e1:db:
                    6d:a5:49:cc:94:67:64:07:3c:5f:18:0d:2a:70:69:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:91:AC:B1:25:58:87:B8:24:DD:31:F5:48:D3:D3:95:A1:DF:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/ae8cd62e-5bf2-3058-b8b2-5ee0b8c4aa1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde/87a7a98d-6ed8-48cc-953b-32292e94edde.crl

            X509v3 Authority Key Identifier:
                keyid:B3:48:FE:63:A1:FE:47:57:64:FF:44:53:06:55:C0:57:45:25:DF:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/87a7a98d-6ed8-48cc-953b-32292e94edde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.224.0/20
                  66.110.176.0/20
                  97.64.0.0/20
                  162.210.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f6:a2:92:00:c4:9e:a5:26:41:b0:87:a1:88:1a:3d:5c:13:
         bc:2b:0b:6f:7c:ba:bf:97:3e:4a:1a:ba:16:32:2f:c8:5e:ed:
         0c:22:f5:77:f8:b3:92:47:0a:2c:38:ac:f9:55:73:f1:81:b2:
         8c:72:c1:46:00:ed:ad:28:96:6a:7a:c2:72:d1:31:48:59:6f:
         46:b0:2d:34:00:aa:c0:d0:69:ed:52:ba:e0:1d:cf:e4:f5:de:
         df:40:d6:26:2c:e1:07:3e:1f:a7:9a:38:e4:a0:fd:6b:3c:2e:
         60:0b:8a:0d:b9:5b:89:a0:4d:ad:99:7e:47:d1:76:dd:a1:95:
         71:9d:6d:a7:fa:75:14:ce:83:d8:3c:6a:cf:49:97:04:6b:dd:
         e3:ff:65:ee:6e:d8:72:02:ea:01:ba:85:d3:d9:88:e5:68:f9:
         0c:88:4b:c2:b6:56:57:ca:74:1f:0f:98:02:62:16:84:d7:b2:
         14:3b:af:c6:51:3e:a5:f9:04:88:57:04:8e:7a:29:56:2f:3c:
         91:62:06:fe:5f:68:bb:9c:2d:b3:79:b6:20:bc:1c:76:88:9d:
         c7:dd:d0:a8:b9:b0:b9:a4:0d:8e:80:82:b4:db:7e:fa:bf:dd:
         1b:00:73:fb:a8:5c:52:bc:17:43:61:72:72:98:85:a7:b4:7a:
         d5:59:10:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:40:00 2025 by rpki-client