Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa
File:                     b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa (raw, json)
Hash identifier:          H/ORT0ZFlRDF40SD1kHknEWw0m3BfFoXZGvOYtW8cWY=
Subject key identifier:   0E:E4:FF:9D:DE:FB:91:F3:B7:AA:6A:8D:E1:C4:70:17:B7:E2:FD:B1
Certificate issuer:       /CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
Certificate serial:       010D0C9F4328584B4A6F4784899017E709F5B500
Authority key identifier: BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa
Signing time:             Tue 23 Sep 2025 14:21:44 +0000
ROA not before:           Tue 23 Sep 2025 14:21:44 +0000
ROA not after:            Mon 22 Dec 2025 15:21:44 +0000
asID:                     16608
IP address blocks:        64.187.64.0/20 maxlen: 24
                          64.187.81.0/24 maxlen: 24
                          64.187.82.0/23 maxlen: 24
                          64.187.84.0/22 maxlen: 24
                          64.187.88.0/22 maxlen: 24
                          64.187.92.0/23 maxlen: 24
                          64.187.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4a:6f:47:84:89:90:17:e7:09:f5:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0586936-28a6-4bf2-9b25-bda26fb9b65e
        Validity
            Not Before: Sep 23 14:21:44 2025 GMT
            Not After : Dec 22 15:21:44 2025 GMT
        Subject: CN=3a18fcdb-d394-45b0-92a4-e5d842aeaea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:79:c4:a2:66:55:ed:0b:7d:29:b7:e4:9a:
                    3d:d9:1a:c1:aa:49:84:2d:35:d2:11:38:18:07:a2:
                    09:1d:d5:0e:f8:40:d0:fc:46:e1:42:4a:6c:ff:0a:
                    29:7d:5a:50:b2:cc:c7:a3:74:0e:86:d9:a8:dd:26:
                    d4:2a:bb:12:af:73:7b:12:37:fa:3c:18:5a:42:fd:
                    ba:c4:e9:ec:b5:31:7a:34:a2:dd:c6:94:ef:6e:4a:
                    81:cd:04:c6:62:ea:9b:a8:ec:29:64:c0:8a:44:73:
                    d6:bf:62:21:8c:ee:85:30:f7:50:8b:30:e8:70:07:
                    3d:cc:fb:77:91:e7:72:ab:e9:c0:73:76:be:cf:04:
                    50:77:01:9c:a5:be:ce:c1:ad:49:cd:14:ac:30:13:
                    ed:5e:ea:b1:4d:61:31:f1:5e:b9:8b:be:92:1c:08:
                    0b:e1:4c:49:00:0d:17:48:ed:43:ba:f3:1c:62:e6:
                    7b:54:e5:07:4d:b4:06:6f:d7:e8:96:e3:6e:94:00:
                    a1:22:97:21:6a:3c:e8:6b:04:56:f8:9a:69:b4:1e:
                    0a:f5:01:df:db:da:f0:53:80:c6:bb:bb:3f:ca:dd:
                    eb:ff:98:cb:f3:06:31:6e:8b:cf:8b:99:41:09:80:
                    68:43:5f:a2:b7:b3:c3:a7:0b:bf:be:47:ba:0f:94:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:FF:9D:DE:FB:91:F3:B7:AA:6A:8D:E1:C4:70:17:B7:E2:FD:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b8d5cab3-b903-3f4a-8b6c-0b44cd2d46c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e/b0586936-28a6-4bf2-9b25-bda26fb9b65e.crl

            X509v3 Authority Key Identifier:
                keyid:BB:65:59:CC:29:A1:14:F4:F2:9B:47:03:30:95:FD:C6:2E:48:7D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b0586936-28a6-4bf2-9b25-bda26fb9b65e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.187.64.0/20
                  64.187.81.0-64.187.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:07:06:c4:e7:aa:54:5a:c7:f8:70:e7:15:35:91:d0:5f:00:
         89:b4:bb:b5:c7:d6:54:6d:3b:db:6c:1a:01:48:59:96:63:d1:
         02:b6:3e:53:2e:07:9a:ce:ee:15:e8:42:f7:51:7e:73:b1:e1:
         fb:22:e0:b8:d1:24:8a:53:29:46:08:43:93:66:7e:4d:fe:c8:
         0b:4e:02:e6:21:37:6d:78:9d:55:8c:e0:8d:30:6e:e2:4f:ff:
         b3:c0:cb:96:81:85:45:c5:ba:48:f5:5b:ed:8c:ed:8a:78:3b:
         73:48:bc:61:45:b6:e0:43:10:cd:85:3a:ff:07:47:30:8f:a1:
         b0:16:eb:5e:12:6e:34:b3:1d:da:e5:7f:d1:2d:ff:3a:52:79:
         6e:0b:a0:6d:ce:d3:46:f9:d6:d0:b6:7d:ac:75:90:1c:9d:8c:
         c3:58:66:0b:30:61:61:00:bf:e0:9d:ce:62:35:1a:f8:13:2c:
         0e:20:7f:18:a8:3a:95:44:a2:10:32:4b:21:d4:1c:7c:0c:92:
         b6:d7:62:73:57:10:a6:1c:eb:c9:69:53:a3:87:6f:a4:58:73:
         99:cc:c4:33:f9:36:5d:f4:a1:2b:50:4f:12:66:a5:92:be:b6:
         45:88:6e:64:64:80:8c:09:6c:1a:b4:ba:9c:93:19:66:57:d9:
         23:50:6b:fb
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEtKb0eEiZAX5wn1tQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA1ODY5MzYtMjhhNi00YmYyLTliMjUtYmRhMjZmYjli
NjVlMB4XDTI1MDkyMzE0MjE0NFoXDTI1MTIyMjE1MjE0NFowLzEtMCsGA1UEAxMk
M2ExOGZjZGItZDM5NC00NWIwLTkyYTQtZTVkODQyYWVhZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgh5xKJmVe0LfSm35Jo92RrBqkmELTXSETgY
B6IJHdUO+EDQ/EbhQkps/wopfVpQsszHo3QOhtmo3SbUKrsSr3N7Ejf6PBhaQv26
xOnstTF6NKLdxpTvbkqBzQTGYuqbqOwpZMCKRHPWv2IhjO6FMPdQizDocAc9zPt3
kedyq+nAc3a+zwRQdwGcpb7Owa1JzRSsMBPtXuqxTWEx8V65i76SHAgL4UxJAA0X
SO1DuvMcYuZ7VOUHTbQGb9foluNulAChIpchajzoawRW+JpptB4K9QHf29rwU4DG
u7s/yt3r/5jL8wYxbovPi5lBCYBoQ1+it7PDpwu/vke6D5S/7wIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFA7k/53e+5Hzt6pqjeHEcBe34v2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iMDU4
NjkzNi0yOGE2LTRiZjItOWIyNS1iZGEyNmZiOWI2NWUvYjhkNWNhYjMtYjkwMy0z
ZjRhLThiNmMtMGI0NGNkMmQ0NmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYjA1ODY5MzYtMjhhNi00YmYyLTli
MjUtYmRhMjZmYjliNjVlL2IwNTg2OTM2LTI4YTYtNGJmMi05YjI1LWJkYTI2ZmI5
YjY1ZS5jcmwwHwYDVR0jBBgwFoAUu2VZzCmhFPTym0cDMJX9xi5IfQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9iMDU4NjkzNi0yOGE2LTRiZjItOWIyNS1iZGEy
NmZiOWI2NWUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQEQLtAMAwD
BABAu1EDBAVAu0AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAigcGxOeqVFrH+HDnFTWR0F8AibS7tcfWVG07
22waAUhZlmPRArY+Uy4Hms7uFehC91F+c7Hh+yLguNEkilMpRghDk2Z+Tf7IC04C
5iE3bXidVYzgjTBu4k//s8DLloGFRcW6SPVb7Yzting7c0i8YUW24EMQzYU6/wdH
MI+hsBbrXhJuNLMd2uV/0S3/OlJ5bgugbc7TRvnW0LZ9rHWQHJ2Mw1hmCzBhYQC/
4J3OYjUa+BMsDiB/GKg6lUSiEDJLIdQcfAySttdic1cQphzryWlTo4dvpFhzmczE
M/k2XfShK1BPEmalkr62RYhuZGSAjAlsGrS6nJMZZlfZI1Br+w==
-----END CERTIFICATE-----
Generated at Wed Oct 8 21:12:41 2025 by rpki-client