Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a6de46fc-eb5f-3681-b174-68c1fe3d724b.roa
File:                     a6de46fc-eb5f-3681-b174-68c1fe3d724b.roa (raw, json)
Hash identifier:          J3kwkfmZER3CBjEonl70Ke6cBpXhQwnd105Ps9JJm/0=
Subject key identifier:   78:5E:D5:3D:BB:6D:BA:13:65:02:C1:4E:A3:F6:E2:20:65:42:C1:7B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584BC53AF2AD7A3A8160BC620DC0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a6de46fc-eb5f-3681-b174-68c1fe3d724b.roa
Signing time:             Thu 06 Nov 2025 14:00:41 +0000
ROA not before:           Thu 06 Nov 2025 14:00:41 +0000
ROA not after:            Wed 04 Feb 2026 14:00:41 +0000
asID:                     14061
IP address blocks:        64.23.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c5:3a:f2:ad:7a:3a:81:60:bc:62:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Nov  6 14:00:41 2025 GMT
            Not After : Feb  4 14:00:41 2026 GMT
        Subject: CN=29ecece2-da49-491b-bd4a-f7e1e5acf7d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:2f:b4:1b:73:8c:5d:ca:cc:dc:c6:06:82:
                    93:d4:46:a8:2b:75:7c:f5:e7:03:63:72:63:58:ee:
                    ed:aa:f0:15:8f:7b:99:07:e7:64:83:a6:84:3b:8a:
                    ff:5b:0b:3f:f5:41:22:14:3b:01:ab:e4:7f:76:15:
                    e5:0d:51:84:67:ed:09:c2:af:f1:36:85:9f:fd:0d:
                    d7:5a:c7:bb:dc:c6:8c:23:3d:3e:bf:12:71:8b:b7:
                    9d:60:97:c2:62:b1:8d:18:bf:75:11:e5:b3:c2:bb:
                    fe:1f:38:b8:f1:63:b2:13:46:e2:c2:7c:5a:d9:d7:
                    10:38:01:5d:f4:1d:87:04:6e:82:d7:ad:95:4b:ca:
                    06:e2:9d:88:19:fa:16:8e:40:af:11:0a:ea:4d:9c:
                    cb:78:30:28:36:c0:02:45:ae:58:8b:29:61:0a:a1:
                    6c:a7:1d:32:54:ab:21:77:e5:94:d1:d6:7c:28:4e:
                    b1:0d:6a:52:50:ad:97:63:d8:2b:59:77:e0:ea:0e:
                    1e:0a:a0:ae:da:79:a0:75:61:ed:9d:41:6e:94:f8:
                    5b:1f:68:0b:65:82:f2:10:54:9c:f5:7b:f4:d0:ef:
                    49:41:c3:8b:08:38:5f:b1:e1:f7:3d:23:3d:a9:3e:
                    a3:e5:44:e1:13:0a:dd:b1:d9:58:46:5c:d7:99:02:
                    9f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:D5:3D:BB:6D:BA:13:65:02:C1:4E:A3:F6:E2:20:65:42:C1:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a6de46fc-eb5f-3681-b174-68c1fe3d724b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.23.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ec:30:18:63:3e:d4:b9:c9:4d:cf:e0:71:a1:b5:f7:48:a1:
         1d:cb:5d:c0:84:c2:db:95:fb:30:fd:7d:44:6e:58:39:59:4a:
         90:1e:bd:f5:7a:ea:69:f7:9e:1c:7d:d6:c5:ac:f7:32:bc:ef:
         f3:3c:1f:b6:fc:d4:da:51:56:ad:7f:f6:8c:3d:0e:ce:34:98:
         5c:df:de:a0:00:11:2e:25:2f:4f:37:23:d1:ac:7f:18:45:1e:
         07:cc:43:5d:e3:d6:76:0d:76:ad:30:8a:7c:2a:86:7a:97:f1:
         41:8a:37:8e:cb:68:41:88:27:29:5e:9a:9a:11:3b:ed:82:79:
         cd:83:59:30:ff:33:18:49:a6:1c:3a:a5:a4:98:25:c7:1c:e4:
         c8:a0:c9:62:1c:48:05:7f:f5:5d:2a:58:e7:5e:61:25:22:e3:
         a0:4c:fb:c9:e9:3f:e5:74:ba:eb:7d:21:45:10:e0:46:89:1b:
         f4:32:96:c8:1b:10:c4:cb:05:52:2d:18:1e:49:b9:58:cb:78:
         aa:80:94:8c:95:b7:83:89:0b:d8:3b:01:99:17:ef:22:e3:31:
         d0:02:21:66:c0:08:19:07:c9:fb:d0:70:88:54:f8:53:4d:ee:
         65:ef:20:82:05:d3:4c:c7:8a:7b:5b:66:07:3c:1b:bb:e9:d8:
         de:82:d9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 02:28:51 2025 by rpki-client