Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/509c9616-a683-3a1c-b568-97fefb8f7782.roa
File:                     509c9616-a683-3a1c-b568-97fefb8f7782.roa (raw, json)
Hash identifier:          iBJ8a/918E91Cq037orkFRyAb0vfFmP+OcCmm7NNRBg=
Subject key identifier:   E2:6A:F4:63:6C:01:2B:77:74:DB:BE:22:57:B1:DB:A7:3B:41:E4:07
Certificate issuer:       /CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
Certificate serial:       010D0C9F4328584B4A86BCA9DE21D9E5CD230780
Authority key identifier: BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/509c9616-a683-3a1c-b568-97fefb8f7782.roa
Signing time:             Tue 23 Sep 2025 15:09:00 +0000
ROA not before:           Tue 23 Sep 2025 15:09:00 +0000
ROA not after:            Mon 22 Dec 2025 16:09:00 +0000
asID:                     17046
IP address blocks:        64.187.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:86:bc:a9:de:21:d9:e5:cd:23:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
        Validity
            Not Before: Sep 23 15:09:00 2025 GMT
            Not After : Dec 22 16:09:00 2025 GMT
        Subject: CN=3b5900cb-9e53-4da4-b25a-a8ee55dcf91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:c5:92:94:ee:8e:09:31:37:37:39:35:f1:
                    b4:3b:cd:a5:bf:16:f3:ae:57:e7:51:3c:b6:2d:02:
                    ce:73:7d:5f:05:86:86:50:38:b5:d9:ea:ca:d7:a3:
                    29:bd:d5:3d:32:f2:a5:9d:04:11:4b:4b:34:90:9b:
                    59:71:6b:e2:af:f2:0a:33:75:60:81:46:24:65:da:
                    3d:26:0d:8b:c8:e6:9c:98:f2:f9:d5:ad:a1:81:df:
                    a9:e5:65:07:79:79:43:4f:8d:f1:2e:81:db:73:bc:
                    3f:34:c5:21:f4:9b:80:67:94:5c:2a:cb:94:d9:ba:
                    f7:1d:87:2f:2a:92:13:46:11:ed:5b:38:2c:da:e6:
                    6e:15:94:54:1f:a9:b7:cf:e0:9f:1a:ce:d6:dc:05:
                    2e:7b:70:b8:20:7f:75:2b:02:0a:7c:2a:bc:d4:68:
                    96:f6:31:5f:dd:a2:5f:36:e2:0e:46:68:a5:8a:19:
                    7a:68:f4:9a:81:bc:e0:60:b2:d1:33:8b:86:86:c0:
                    af:d1:be:fe:35:f6:87:de:b6:dc:e5:f5:08:84:ca:
                    32:43:d9:da:b5:3d:8b:62:f4:7d:2d:53:af:75:5c:
                    41:14:b0:c7:cf:b9:51:9c:8f:d7:41:83:01:8b:d8:
                    87:e7:37:d1:27:79:cd:04:8d:43:9b:42:28:46:da:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:6A:F4:63:6C:01:2B:77:74:DB:BE:22:57:B1:DB:A7:3B:41:E4:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/509c9616-a683-3a1c-b568-97fefb8f7782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl

            X509v3 Authority Key Identifier:
                keyid:BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:17:8d:9d:86:bb:48:a4:6f:6d:db:31:70:35:1c:14:fb:
         3a:df:37:1f:6e:66:26:a3:c0:8d:7e:ab:15:05:83:1c:fa:93:
         be:5d:79:82:ef:a9:d6:9b:bf:18:26:bf:1b:91:86:64:8d:84:
         58:09:02:41:b7:4e:80:67:d1:24:81:07:4b:41:65:d0:b2:f1:
         76:35:b0:11:69:e8:66:79:47:8b:ad:2c:94:82:b9:2f:d6:b2:
         72:35:e3:92:8f:87:d2:ba:83:bc:75:0b:74:14:43:d7:fa:bd:
         8f:fd:0e:e7:8f:e6:64:e4:95:7f:25:96:1a:4b:68:bd:35:6f:
         2f:8c:83:8a:77:47:79:8e:9b:7c:47:07:a7:14:23:0a:bd:61:
         be:06:3a:14:95:9a:93:3d:6d:3e:bd:91:cf:90:09:74:0f:61:
         23:99:ae:1f:c4:42:78:cf:df:c6:9b:91:72:12:2c:e8:87:51:
         b5:8d:a8:3a:bd:a1:1b:1a:0a:99:86:75:a9:af:83:f9:c6:44:
         fa:22:57:6f:f3:4a:ef:e2:29:ea:f2:c1:6c:76:03:06:a4:c6:
         69:77:d7:d5:70:94:52:ec:57:a1:ed:eb:f0:6a:58:3c:66:96:
         55:e3:f2:ef:35:35:13:2a:ad:18:5e:fa:8a:88:b6:c3:c1:f3:
         0b:6d:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:55:13 2025 by rpki-client