Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa
File:                     f04a1367-afb9-3894-a806-b6b5dcbc5860.roa (raw, json)
Hash identifier:          VUGbiJ3xL1t0krR3fsWutr4UpjYbG+43MTYlx7CCozA=
Subject key identifier:   FB:0C:DB:BF:A7:69:53:19:51:35:45:E5:A3:1B:AD:D0:68:2E:ED:71
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584B0746BCDBC7049D4A1944AB80
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     10747
IP address blocks:        64.18.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bc:db:c7:04:9d:4a:19:44:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=1ef97c17-0cad-4308-9862-0d1c3959e93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d0:6c:2d:f6:2d:26:f6:04:9b:ac:b0:ff:bb:
                    86:23:c7:b8:9f:fa:85:17:05:52:f7:b5:1b:cc:31:
                    48:5a:36:ee:ec:dd:0d:ba:fe:bf:f4:8a:2e:3e:f4:
                    60:b7:62:29:1c:c7:d6:8f:80:ca:28:57:47:ac:e6:
                    0d:6f:96:c5:bb:fa:09:ca:13:7f:96:cd:b0:17:e1:
                    97:df:60:ae:87:cc:3d:6e:0f:a5:78:6f:72:95:aa:
                    3f:db:44:58:48:1e:e7:df:5d:5b:22:a8:ab:ef:83:
                    50:3d:56:42:be:97:d3:f9:89:5d:2a:d9:ec:fe:bf:
                    a8:b2:3c:74:50:9b:19:c3:32:29:fc:17:2f:f7:52:
                    66:51:55:9b:e4:0c:be:d2:76:fa:63:20:de:75:e6:
                    73:da:6f:5a:4c:5d:b7:7a:c2:93:d8:39:bb:dc:a5:
                    47:15:d1:65:48:34:da:94:46:6d:56:ab:32:60:eb:
                    2b:93:9a:b7:d9:6f:5e:23:83:df:77:4d:58:1e:d2:
                    95:40:70:0b:aa:d7:28:98:86:2a:0d:85:17:01:bd:
                    78:ab:52:03:7a:70:74:11:d7:41:77:06:28:67:11:
                    57:73:87:92:48:ce:20:b8:c2:7c:c8:02:03:84:72:
                    56:b4:1a:c6:17:9c:bf:c2:17:0a:7f:2e:50:61:23:
                    6c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0C:DB:BF:A7:69:53:19:51:35:45:E5:A3:1B:AD:D0:68:2E:ED:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/f04a1367-afb9-3894-a806-b6b5dcbc5860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.18.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:dc:11:7f:72:c0:f5:60:c4:22:75:70:35:45:08:c9:72:ed:
         7e:25:a3:d2:78:41:94:c1:b7:5d:54:d1:6f:30:4d:b2:f4:a0:
         cc:a1:5e:b3:8e:50:9b:57:6b:6c:11:ad:67:69:0b:93:e9:7a:
         70:2c:f3:c8:eb:a5:3b:16:5e:02:9f:09:cd:49:23:03:eb:c2:
         97:d5:ae:b2:21:dd:52:6a:64:1f:88:a2:89:8a:21:cd:c0:18:
         bd:76:17:f4:f4:cd:db:20:42:85:f5:f7:f6:00:02:bf:84:48:
         3b:d5:a3:ec:d2:63:22:09:b5:8c:57:61:b5:1a:0d:4e:e7:9d:
         0d:82:5e:3c:85:b9:35:44:fd:2c:53:8a:f8:91:a7:ce:dc:a1:
         64:1f:8f:3d:d5:fc:6a:56:8f:71:fc:64:df:c1:cf:8d:84:01:
         8f:84:7e:52:3b:42:41:b4:40:4e:73:12:41:05:e0:e4:bc:9d:
         64:c0:e9:00:89:13:f7:3b:01:ae:26:c0:1c:06:a7:18:2d:b8:
         32:4d:07:b7:c3:ea:82:3b:fd:64:fe:cc:c8:9a:2e:55:bc:ec:
         63:a8:18:81:ee:ec:43:e4:3a:0b:69:df:5c:48:7d:b4:8b:c7:
         a7:ea:58:87:f7:2b:8b:e8:2c:ef:73:b8:02:37:92:e5:fa:68:
         f6:97:81:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:07 2025 by rpki-client