Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/9b28efa5-369c-39a0-b4e3-bb407eb72cf6.roa
File:                     9b28efa5-369c-39a0-b4e3-bb407eb72cf6.roa (raw, json)
Hash identifier:          67aD91Yra941CqOpZfU6wvfuXesgkAMfgSTvwuDvhrw=
Subject key identifier:   CC:81:44:A9:9A:78:DF:D0:51:9F:0E:81:DC:E8:AC:82:0F:28:D9:26
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B76016DC83082309CA27F8F00
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/9b28efa5-369c-39a0-b4e3-bb407eb72cf6.roa
Signing time:             Thu 09 Oct 2025 04:55:58 +0000
ROA not before:           Thu 09 Oct 2025 04:55:58 +0000
ROA not after:            Wed 07 Jan 2026 05:55:58 +0000
asID:                     22079
IP address blocks:        64.186.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:01:6d:c8:30:82:30:9c:a2:7f:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 04:55:58 2025 GMT
            Not After : Jan  7 05:55:58 2026 GMT
        Subject: CN=bf11aa9e-0a00-4fdc-bfba-46c75ec19567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:39:d0:e7:44:f7:86:30:56:c4:62:16:da:e0:
                    e0:9e:b2:d9:52:c7:ae:0a:ea:48:f5:fb:73:5b:a9:
                    19:1d:25:7e:ab:15:93:75:49:78:05:f7:5a:de:e4:
                    19:f3:67:7a:8d:98:23:f8:fa:63:0e:5f:79:45:44:
                    bb:07:2f:3c:31:ab:cc:de:fe:0a:0d:cc:b9:41:bc:
                    5e:ce:71:0e:66:ea:18:66:58:fd:97:94:fa:1b:0e:
                    e5:de:49:42:f8:d1:7e:98:a8:4d:98:52:ce:14:c2:
                    50:71:e8:b4:51:8d:d8:d6:22:82:e8:c9:29:9e:25:
                    bf:6f:de:d6:88:05:a6:f7:aa:d8:9a:2e:51:6b:86:
                    43:96:82:76:54:eb:c6:08:f3:28:f4:88:19:98:6c:
                    eb:76:87:71:29:ee:06:3d:75:bc:c5:c3:88:64:07:
                    e3:89:0c:7f:e1:45:28:b0:9f:9a:db:ac:5c:5f:26:
                    06:71:10:e6:07:6f:3f:40:82:be:77:87:be:78:af:
                    3d:11:a5:65:54:63:86:f0:7e:74:34:96:49:b7:d8:
                    44:72:cd:0a:f6:f1:49:a0:99:c8:e4:8d:24:13:52:
                    29:77:dc:28:d5:2e:01:52:cd:af:17:16:98:54:53:
                    f4:b8:74:48:6a:fd:f2:e4:2d:89:ba:41:47:24:2c:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:81:44:A9:9A:78:DF:D0:51:9F:0E:81:DC:E8:AC:82:0F:28:D9:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/9b28efa5-369c-39a0-b4e3-bb407eb72cf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:f5:29:ad:9f:35:12:df:40:22:7d:7a:fc:4c:d3:9c:02:
         8f:16:fc:0e:f7:37:e9:85:5b:71:69:7e:89:b0:e9:cd:36:6e:
         30:25:a2:07:8b:4a:91:d3:30:6b:b2:64:2e:96:4a:25:31:9d:
         05:c9:2e:d7:4c:94:e8:e6:d3:cc:e6:ca:b8:7f:b4:8a:38:c9:
         ce:b8:4a:32:e4:ce:46:5c:67:77:c7:90:34:ee:be:8f:cb:39:
         d6:34:b8:4a:8f:5b:74:41:e4:9c:f3:ab:5d:55:b0:50:08:41:
         ad:76:d8:00:8e:f4:88:9e:29:c9:c5:65:35:67:2c:43:8c:b4:
         1d:40:af:96:bc:35:c3:56:0e:ee:9c:86:1d:b3:97:d3:e0:13:
         19:b7:53:18:53:9d:2e:ec:86:6b:55:65:c7:bb:c1:22:f6:b5:
         d9:33:13:68:2c:82:94:db:dd:ff:d9:fc:cc:b8:3f:1d:00:9e:
         91:27:e7:0e:46:8c:17:5b:12:0e:14:1a:e9:96:a5:5f:52:27:
         e8:b5:81:f0:74:60:90:87:c1:d7:d7:e6:cb:bd:b5:7c:6d:e4:
         1d:0d:9e:30:97:a3:75:21:51:58:28:74:40:09:78:60:02:93:
         d5:6e:fb:3e:cc:45:a1:6d:4a:54:42:65:f9:6e:a6:12:a7:54:
         45:a4:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:49:21 2025 by rpki-client