Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
File:                     1439153d-c93d-3515-adae-1d4468d668f3.roa (raw, json)
Hash identifier:          jE5gTi389eL99UUD2f0CYq87nHgm75zL+QdgnaelAiY=
Subject key identifier:   92:F3:20:A4:F6:0C:70:02:FF:B8:67:B0:37:94:DA:33:5A:C9:C9:78
Certificate issuer:       /CN=d65fef8f-4cd2-4778-9158-f56f30242812
Certificate serial:       010D0C9F4328584B3F1C6247AADC446FF9979600
Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     2734
IP address blocks:        208.64.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:62:47:aa:dc:44:6f:f9:97:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=25451e30-bee2-4d56-be2f-9f18c8b21003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:87:50:68:82:d3:8c:88:d1:6a:5e:55:c2:c8:
                    bf:21:78:ef:d9:e9:a5:98:4c:74:4e:2a:6e:2c:41:
                    9a:e3:b9:e4:d3:f9:f4:4f:6e:b5:d9:34:3a:44:d3:
                    cb:a0:7f:59:cb:f6:19:0d:d5:e1:d9:58:66:cf:f9:
                    79:61:95:72:44:e1:34:6e:a1:6b:b2:dc:4f:5c:61:
                    f0:e8:59:39:d4:66:bc:24:6a:34:93:98:5e:6e:07:
                    22:d2:86:b1:7f:ac:a1:c1:70:5c:e1:48:8d:4a:ca:
                    bc:5f:d7:43:c8:69:aa:5a:57:31:3e:33:93:55:a0:
                    17:fb:6f:21:22:69:ad:7f:5e:7d:db:69:59:d5:a0:
                    8c:07:39:52:7e:32:bb:bc:71:68:35:54:7c:e5:4e:
                    ab:11:30:e6:4c:36:29:1a:4f:b3:78:68:65:18:40:
                    09:46:0e:f8:15:6b:9c:ca:30:2f:31:8a:21:10:16:
                    e3:bc:e3:1b:f9:0a:36:00:bf:7b:b7:21:14:12:76:
                    aa:2a:8f:36:ce:1b:dc:57:13:d6:5b:14:32:f0:50:
                    c1:03:e0:ce:67:d9:12:52:3f:81:7e:33:33:28:c9:
                    6a:7b:73:38:81:57:ca:bd:ad:ec:d9:af:46:be:b5:
                    51:5a:88:87:f2:7d:54:d7:4e:38:72:fa:94:e9:b4:
                    00:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F3:20:A4:F6:0C:70:02:FF:B8:67:B0:37:94:DA:33:5A:C9:C9:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/1439153d-c93d-3515-adae-1d4468d668f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl

            X509v3 Authority Key Identifier:
                keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.64.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1a:5c:5a:a9:5c:20:7b:d2:65:ca:cf:37:29:68:03:f1:bf:
         73:53:4a:88:56:f0:bc:11:47:92:f5:2c:d3:f5:e8:ab:4b:43:
         fa:21:79:2b:83:3f:4d:11:e0:e2:3b:16:36:c5:bc:40:0c:79:
         9a:97:ff:5a:d0:d7:a9:82:49:30:12:44:f1:b2:40:cf:cf:f3:
         c2:11:de:af:ad:9c:ba:54:57:18:ce:de:4b:f3:e3:59:f5:c5:
         43:a0:88:a7:05:44:6a:78:c8:c1:25:76:ce:a1:91:56:bf:b6:
         9c:00:e8:d1:b2:61:f5:a5:5e:da:2f:38:db:80:df:0b:21:e8:
         3d:15:d6:d4:21:9f:8e:33:f6:a6:cb:53:4e:93:4d:4c:2f:1e:
         a2:56:6c:6b:5a:d7:39:db:62:13:6d:67:7b:17:24:12:16:8a:
         b3:3c:b6:d1:03:ec:7d:96:a3:8b:b4:51:32:a8:ae:a3:62:61:
         82:7f:cc:ca:68:c3:25:7e:fc:8d:0a:83:6e:1e:2d:5b:23:d2:
         49:a5:bb:f7:97:49:cd:a5:52:ba:88:d9:80:7a:9e:ed:2b:68:
         0f:6f:15:a8:fb:75:74:18:db:5f:6a:ad:43:aa:d8:ce:94:d1:
         4b:1a:ab:11:eb:02:c1:89:40:47:93:9a:79:2d:5b:23:c9:32:
         2c:ca:c8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 10:12:44 2025 by rpki-client