Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
File:                     9095152a-38e0-3430-998c-371744f1abaa.roa (raw, json)
Hash identifier:          Asb3D9zDVYpcc0YnzMANUPpJtGcSgsjMBQSWICH9p3g=
Subject key identifier:   85:E3:30:E8:E9:CF:92:3C:FE:E1:C1:1E:A9:4C:5B:A0:FC:FA:78:D9
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584AA6F6244131EA0313558C1300
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     25645
IP address blocks:        64.92.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 Aug 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:24:41:31:ea:03:13:55:8c:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=332dabfe-7e71-4dcd-bca9-0190b108bc73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:45:b0:93:c5:39:5f:86:66:f7:0a:1d:cb:62:
                    a8:0f:6b:f0:19:6f:03:73:f0:90:e1:46:26:60:04:
                    08:d5:02:f8:f7:56:ce:d7:65:74:5b:a8:3c:83:f4:
                    39:45:3d:70:f1:f3:8f:7b:16:f0:cf:55:81:58:6d:
                    27:c7:6a:48:9c:c1:7f:d3:1f:85:57:93:19:97:55:
                    ce:5f:74:d9:d9:7b:99:f2:f4:1e:83:2c:ea:c1:e2:
                    bc:ee:79:aa:2e:73:95:41:63:b1:8d:e3:c4:5b:a6:
                    46:e3:c7:b1:90:bb:c8:5e:ef:07:a1:3b:3e:fc:fa:
                    36:99:e7:fb:58:0e:17:62:4f:a0:b7:fe:e8:df:f9:
                    29:23:f5:d3:dd:91:f0:8e:cf:65:2f:5c:cf:b2:04:
                    eb:6d:7e:33:1d:6f:69:29:f7:4e:5a:1b:64:6b:37:
                    60:4d:bd:88:e6:fd:d7:63:70:ad:c5:7b:d2:8e:5e:
                    38:77:9e:4b:f8:ec:0f:a6:2b:2c:21:3a:cd:dc:e9:
                    78:b5:ee:ce:a5:73:4e:a7:26:4e:bc:fd:c4:69:70:
                    87:c9:6a:85:21:a7:75:90:7b:56:42:6c:c5:c7:d5:
                    93:3d:07:04:70:fd:c1:3c:ee:3e:60:ca:6a:dd:e0:
                    9c:96:b5:33:79:0b:82:45:d1:78:2f:ad:0b:78:2f:
                    0c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E3:30:E8:E9:CF:92:3C:FE:E1:C1:1E:A9:4C:5B:A0:FC:FA:78:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/9095152a-38e0-3430-998c-371744f1abaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:43:a7:4d:26:e6:00:29:e8:bf:ac:ed:03:bc:3c:73:59:19:
         ba:f8:dd:10:d9:64:44:29:26:76:03:29:12:c4:68:0f:e0:9a:
         b3:1b:b1:9d:c2:77:7a:47:71:5e:9b:4d:c9:b7:28:e4:89:96:
         9c:80:04:62:e6:89:6b:30:ba:5b:dc:e3:ef:d1:f1:49:84:60:
         eb:b0:a3:e7:40:7e:9c:33:a7:24:f5:3d:d5:6d:06:49:dc:2d:
         4b:98:14:f1:4c:87:ee:ce:0a:e1:4f:77:c0:d4:c3:99:1a:5d:
         9c:ce:e4:fa:3b:bc:22:70:1d:fe:11:a9:1b:08:77:38:5b:97:
         21:27:c4:6f:d2:7f:4e:c8:a2:db:9a:98:be:07:40:4b:a3:59:
         20:c5:66:72:cd:39:13:ae:5d:38:73:79:98:3f:1f:70:85:ba:
         a7:bd:43:06:93:ae:3e:b9:53:cb:69:31:49:63:44:6e:48:ca:
         a2:99:67:87:3d:c4:45:fc:fd:29:e0:9a:f5:a7:26:7c:17:de:
         08:1f:16:20:d9:34:9a:71:a2:97:9c:89:5d:49:03:e1:d9:74:
         a7:d9:e5:3b:57:01:45:3c:13:08:14:ed:20:3d:f3:b6:4f:7d:
         69:0f:ef:80:e2:27:f9:29:f2:85:13:e1:50:74:04:b9:33:90:
         e3:52:0e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:17:36 2025 by rpki-client