Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa
File:                     d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa (raw, json)
Hash identifier:          ki6D7oyNwaMIJTO9bYRh2O355YozHhA5g/8OtStaGTg=
Subject key identifier:   9F:08:72:9B:A2:78:59:9F:81:93:D2:F5:47:79:0B:DF:18:70:A8:25
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584F94D30150FEF8F40D0D626920
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     25645
IP address blocks:        64.92.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:01:50:fe:f8:f4:0d:0d:62:69:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=e1a039c8-5a72-48b7-8faf-dad964f1843c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:fa:f6:8d:e9:d8:f1:be:c2:53:b4:fc:94:
                    8f:b9:24:37:67:b0:88:2b:86:31:3a:95:14:46:b8:
                    64:bb:1e:89:29:2a:b9:9d:7e:ab:0b:e6:2f:1f:50:
                    8c:12:9f:9f:d4:69:9d:71:c8:c5:1d:71:c3:10:ea:
                    96:a1:45:a6:f6:ba:0b:cf:ea:3a:02:37:4c:a2:69:
                    c2:8e:92:b6:ef:de:24:ca:a2:d7:37:22:5a:ba:c9:
                    77:05:ba:15:98:39:ad:93:82:4c:e0:0c:b4:0a:23:
                    08:6f:cf:9a:ba:36:e9:38:8c:2c:06:84:47:62:79:
                    2c:7e:ed:b0:fa:37:8d:9b:fe:69:e3:fe:7f:0a:8a:
                    9f:27:15:40:90:99:bd:b2:69:63:ae:e3:df:fb:44:
                    a1:f9:15:e8:0a:a5:5b:5d:c6:d9:b5:73:cd:ea:3f:
                    e7:85:6d:3a:d7:7f:57:86:53:79:e6:84:ed:52:54:
                    7a:78:0b:1e:05:39:53:58:02:60:24:54:05:0b:8a:
                    a0:a8:fd:07:71:be:72:5c:f6:f9:71:94:65:aa:d1:
                    bf:4e:29:0a:61:c8:70:14:90:58:ef:49:55:33:d2:
                    16:46:25:df:26:b7:11:39:97:e5:f7:a5:8d:77:ce:
                    6f:8f:8a:f7:1b:a7:fb:c7:09:1b:78:b1:6f:e5:18:
                    8a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:08:72:9B:A2:78:59:9F:81:93:D2:F5:47:79:0B:DF:18:70:A8:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/d6b7f5c7-4eb7-31ac-b7fa-b07be18abef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.92.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:b1:fe:1d:1f:66:f5:f7:30:3e:6d:c4:11:bd:07:3e:75:fa:
         5b:b4:18:08:88:08:97:04:4b:df:9f:61:59:eb:a3:85:d6:03:
         4f:85:59:f6:ac:80:a1:e1:0a:6d:17:f2:39:c2:1f:0c:56:2d:
         2f:ec:49:7c:28:b6:94:73:82:ed:34:30:4c:8a:e1:69:fa:3c:
         23:f8:eb:44:a9:14:73:25:bd:a9:71:7c:ad:4e:23:e9:67:e1:
         ad:87:99:c5:0d:16:f1:fa:9e:f6:f8:57:70:a5:d3:28:d4:e2:
         3a:64:6a:d7:c3:31:a7:10:24:f0:e2:43:11:06:71:ab:a3:8d:
         27:be:ff:ce:25:97:11:df:64:d3:e5:15:bd:99:11:39:8f:c5:
         13:5f:ca:fd:5a:c4:3a:18:be:48:0c:14:fc:d5:69:51:cd:8b:
         79:e0:2d:60:72:61:83:cc:ef:33:59:0a:d3:ea:05:6b:0f:7f:
         79:0d:ba:19:77:cf:e7:29:a7:a5:fc:86:88:77:0e:0f:a0:d1:
         25:e1:67:4a:76:fa:7b:45:dc:fe:d1:ee:f4:90:36:7f:95:ec:
         73:57:51:de:63:ef:16:77:44:96:ed:42:cd:55:27:92:14:e8:
         b0:4f:a9:65:b1:10:9b:0d:bd:d2:0a:ea:19:7e:25:b5:a4:29:
         a0:de:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:56 2026 by rpki-client