Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa
File:                     4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa (raw, json)
Hash identifier:          xeRb2IX34WAL5cxczWZ2d3U9EWgjqq56AO3oTTYZTTA=
Subject key identifier:   E8:DC:DE:07:29:D7:FF:0B:CC:58:2E:41:CC:18:83:B8:3D:9E:7E:71
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584B0B76C7BC16D663871D826800
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     397213
IP address blocks:        64.6.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:c7:bc:16:d6:63:87:1d:82:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=5b85ce48-0d38-4c0f-b3b4-eeaea678c2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:51:10:1b:a0:36:d8:65:39:15:c8:dc:2d:66:
                    08:b8:10:e2:c6:45:4c:7a:17:42:39:52:76:f4:70:
                    1b:bc:68:5b:16:62:38:02:07:1d:9e:ca:a1:91:3d:
                    50:2c:74:e1:44:20:1c:7a:8b:49:de:0d:2f:43:17:
                    df:45:9c:b1:16:ff:d6:16:62:77:07:21:30:1b:da:
                    b6:07:66:ee:73:fe:48:f3:e9:d9:71:14:7d:dd:4f:
                    f3:cb:e7:30:63:57:f6:9f:7e:ee:f4:84:64:0e:fe:
                    85:98:b6:d9:49:77:9f:04:21:03:6d:61:22:93:80:
                    7e:9e:6c:3d:59:7f:f2:8a:79:6d:67:ec:e8:03:e5:
                    c4:90:c2:c7:9e:c8:17:78:18:cf:2f:85:02:e2:ca:
                    ff:a9:2f:5f:38:36:7f:7c:1c:9c:70:9c:74:04:0f:
                    48:10:d1:78:34:a8:bd:dc:72:ce:38:24:85:25:84:
                    a0:c0:26:49:7b:df:e5:23:34:f2:85:95:5e:61:c9:
                    09:a5:9f:a4:4d:28:76:c9:fb:45:54:37:41:0e:a0:
                    c3:c6:8a:a3:88:a7:6b:14:39:8d:fd:8e:68:07:85:
                    58:08:48:fd:77:06:e6:df:f2:ae:a5:6f:40:6f:a8:
                    85:b2:e6:ed:58:08:75:7c:9e:10:63:4a:6f:7a:12:
                    98:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:DC:DE:07:29:D7:FF:0B:CC:58:2E:41:CC:18:83:B8:3D:9E:7E:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/4e4b6747-b623-3732-9afc-4f9d1d465d1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:bb:a5:e5:0a:8e:ec:f7:19:a4:59:76:a0:0b:da:c9:59:67:
         a6:f4:74:56:47:cd:80:a8:d7:f2:52:43:74:8d:df:b6:05:a9:
         4d:be:8a:4a:15:73:78:b0:21:86:a2:64:10:ae:c3:b1:1a:2e:
         16:c2:f2:90:e8:87:4d:3a:61:f4:f6:6e:1e:4d:17:7c:3a:f0:
         79:34:74:79:a3:a5:c5:2f:c3:f9:b5:4c:d6:89:8f:86:47:ac:
         cd:b7:4d:3d:f4:52:a9:bf:f3:7b:a7:20:dc:8d:7f:cb:2d:14:
         fa:94:2d:5d:b0:be:3b:4d:c4:e7:01:da:57:9c:51:96:89:72:
         32:9f:90:5b:4d:08:f0:29:32:9c:c7:e1:d6:38:8a:ae:22:3f:
         5a:1a:b3:7b:da:45:a9:6c:f9:6f:b1:73:69:e7:a9:54:da:ac:
         d7:4a:1f:48:b7:58:f6:8b:ec:e3:df:a6:35:b1:d4:a1:70:fd:
         b0:ee:00:8a:6b:5d:2d:37:bc:b8:51:f6:e7:3c:4f:ee:4e:40:
         40:07:30:ea:f1:f9:da:bf:1f:c9:ca:a1:73:3c:27:18:2c:aa:
         8d:47:86:d9:b2:2f:f5:40:81:a4:0c:a6:f7:d7:04:c3:d3:63:
         b2:14:28:08:68:27:68:e0:07:8d:f8:77:94:a4:f0:50:90:82:
         58:b4:0d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 10:12:07 2025 by rpki-client