Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c015f382-d394-307a-bd7f-a2f88561589a.roa
File:                     c015f382-d394-307a-bd7f-a2f88561589a.roa (raw, json)
Hash identifier:          lBHtiuak6OXGGOrBgWV0KZv6h1wg3G80wItS+uInyOg=
Subject key identifier:   4E:DA:AF:B7:62:F9:B9:15:78:68:B7:6E:E3:B9:0A:E4:8C:26:78:6E
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B7604CE9F28F76FDDA9855F80
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c015f382-d394-307a-bd7f-a2f88561589a.roa
Signing time:             Thu 09 Oct 2025 05:02:46 +0000
ROA not before:           Thu 09 Oct 2025 05:02:46 +0000
ROA not after:            Wed 07 Jan 2026 06:02:46 +0000
asID:                     22079
IP address blocks:        64.186.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:04:ce:9f:28:f7:6f:dd:a9:85:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 05:02:46 2025 GMT
            Not After : Jan  7 06:02:46 2026 GMT
        Subject: CN=c0e3cbde-80aa-4606-909b-bece3b52bba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:60:51:c5:4a:2a:fb:17:fb:5d:c5:02:40:
                    17:c5:c3:2a:c1:fe:3f:cf:38:c3:38:aa:a0:46:c6:
                    54:40:42:de:c6:c9:9a:65:b4:21:c9:0c:1b:46:d7:
                    29:22:43:0b:a7:22:d0:bd:a0:cc:4d:42:e3:33:97:
                    c5:d1:30:74:9b:76:17:44:c2:be:93:d8:45:de:8d:
                    5c:4a:6c:b9:92:43:55:33:a8:0d:b0:62:16:e8:ab:
                    c4:99:6f:c6:21:cf:e3:72:b8:e3:57:e9:e3:06:81:
                    76:69:e3:b8:f2:38:e6:5d:6a:fd:d4:e8:df:0b:31:
                    0d:df:7a:21:b7:84:4a:03:87:b3:19:2f:09:5b:2d:
                    f9:55:33:69:51:6b:d7:3b:e6:df:18:bf:3f:17:06:
                    0d:55:a0:41:cc:e8:da:c6:27:c0:27:50:87:6a:b3:
                    06:91:17:a9:04:a9:5e:c8:d9:6b:be:12:14:dc:9b:
                    43:1d:ca:45:5b:3a:68:64:a3:6b:9d:88:9c:4d:84:
                    bb:be:5b:89:ef:fa:89:c0:b0:50:fa:4a:c3:31:e8:
                    f3:50:7f:8b:2e:1c:e5:15:36:58:7c:35:ad:92:80:
                    87:62:e9:14:d0:e2:0c:ee:0b:47:3f:60:ab:60:01:
                    be:ae:7b:e5:a0:bc:04:cd:2e:03:70:c5:52:c8:ac:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DA:AF:B7:62:F9:B9:15:78:68:B7:6E:E3:B9:0A:E4:8C:26:78:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/c015f382-d394-307a-bd7f-a2f88561589a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:b3:60:e7:83:e7:fb:55:81:43:9f:de:c0:0c:95:c5:3b:
         f1:af:41:bf:8d:f1:1c:dc:06:84:06:5d:57:93:52:fc:26:3a:
         ca:5b:34:74:34:5b:0b:6e:f2:e2:d3:24:cf:4f:b5:d6:64:0d:
         91:58:9f:13:bd:c0:07:46:bd:57:91:fc:dd:f3:25:52:9f:f1:
         62:d9:71:87:68:f1:f3:fe:f3:c5:9e:de:bd:db:74:d1:6d:87:
         85:a1:20:f6:6b:e7:e6:3d:aa:f8:ea:e8:ca:52:0c:68:ff:fd:
         6b:f6:56:6b:af:1b:3a:b9:3e:66:b9:45:01:c8:da:d7:9d:ba:
         79:a9:a2:da:57:ea:43:b4:cc:9b:fa:52:86:37:38:0a:49:44:
         b0:5e:ad:1b:fd:ba:fd:a9:ac:8c:c6:96:39:d7:77:79:dc:39:
         da:d6:83:4c:7d:d4:71:78:8b:8c:b3:86:63:23:3b:6c:1b:82:
         49:c8:b0:6a:7e:24:d7:68:bb:62:19:f5:11:14:0c:c1:38:fb:
         10:96:bf:1a:82:e6:16:38:fb:16:97:f4:1e:75:a2:ff:08:e0:
         e7:8e:10:2b:15:a8:5f:ae:14:e6:cd:0d:c3:c9:fd:61:75:de:
         54:47:ca:6f:2b:34:67:0c:17:89:ec:f1:cf:84:a6:03:c6:10:
         8b:5f:80:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 14:49:21 2025 by rpki-client