Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/84f1e976-515d-38d9-acb6-c0126c79dee6.roa
File:                     84f1e976-515d-38d9-acb6-c0126c79dee6.roa (raw, json)
Hash identifier:          eBkpRkAnC2QluYKDE0WWHU8BmMJhYmd5L/8Qxlu9Lek=
Subject key identifier:   E3:B9:82:92:C9:98:5C:86:0E:13:5F:3E:1B:E6:D5:12:2F:8A:2D:76
Certificate issuer:       /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
Certificate serial:       010D0C9F4328584B21CC20ED5C6973D337539E80
Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/84f1e976-515d-38d9-acb6-c0126c79dee6.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     14713
IP address blocks:        64.112.184.0/22 maxlen: 24
                          142.202.232.0/22 maxlen: 24
                          165.140.72.0/22 maxlen: 24
                          208.87.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:20:ed:5c:69:73:d3:37:53:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=9c76425c-1e2d-433f-b6fe-37313a237d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:85:7c:8f:57:2f:45:fe:be:57:47:0f:96:
                    e5:a7:53:59:40:98:84:bf:d8:64:98:bc:d0:60:83:
                    50:d6:46:91:dd:2b:17:f5:aa:46:54:93:e3:28:c5:
                    86:1e:68:0b:9f:67:5a:41:cb:ee:d8:78:3e:3a:87:
                    d1:88:38:62:a3:72:33:70:ac:d6:dc:4b:e8:a6:0a:
                    fd:d5:de:a0:5d:83:9b:69:ac:79:4e:86:45:41:df:
                    0f:73:b2:1a:71:9a:23:35:68:d9:c6:f0:5b:be:10:
                    f8:f1:97:16:30:ad:ea:a1:62:92:0d:9d:68:74:23:
                    14:dc:45:59:02:07:ca:00:d7:d7:d8:6a:a5:b2:fe:
                    a1:4e:b3:1d:a2:79:a4:53:b1:57:74:f5:7e:f0:c1:
                    bb:84:b3:52:69:db:43:51:77:a2:5b:7a:0f:c3:33:
                    7b:85:6a:21:84:36:8e:bb:5f:f6:c7:07:5b:03:85:
                    47:63:c9:be:63:5c:ec:d0:6c:97:39:d3:0b:77:79:
                    a8:da:ec:a2:51:69:37:ed:95:3b:08:1f:f0:4d:c9:
                    44:4f:8b:b3:6b:3c:3e:bb:9d:bd:e0:f0:d6:51:7f:
                    7f:5c:b7:34:90:09:c3:ca:6b:73:8d:ce:37:78:16:
                    7c:9e:35:d7:0d:f6:f5:ad:5d:0a:60:cb:ea:27:7e:
                    a3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B9:82:92:C9:98:5C:86:0E:13:5F:3E:1B:E6:D5:12:2F:8A:2D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/84f1e976-515d-38d9-acb6-c0126c79dee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.184.0/22
                  142.202.232.0/22
                  165.140.72.0/22
                  208.87.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:92:d1:e0:ea:98:25:20:b3:f0:38:31:5f:a8:5f:62:3c:
         5f:e3:d8:57:3b:41:83:a8:6e:d1:10:05:59:b6:e8:62:7c:7f:
         56:5c:ff:44:76:6f:f7:8d:28:99:5f:ee:f4:86:21:d8:53:52:
         2b:0d:7d:10:3e:0a:67:13:46:02:ec:57:0c:32:f1:33:5e:1c:
         ee:60:0b:71:25:d1:b3:03:c8:b3:a6:12:f1:c1:1f:ed:43:1e:
         d8:4a:0e:7c:31:b9:57:08:f5:5d:65:6f:3a:49:90:c3:0e:99:
         7d:47:92:1d:8c:19:86:8c:d9:89:fd:b2:50:bb:0b:a1:ee:47:
         26:98:d5:ff:b8:ec:76:5f:34:75:52:c5:3d:62:ab:5e:e3:06:
         18:c7:75:c9:c9:b4:6b:07:82:c7:27:c9:5e:71:10:41:53:d4:
         5a:98:0b:95:71:aa:e2:e1:66:8d:14:96:82:cf:52:14:db:21:
         37:68:35:d9:d8:22:af:3f:ef:84:1e:d8:45:f3:08:80:08:6c:
         c6:21:7a:36:79:02:68:90:7d:85:be:3a:c7:14:43:f9:fb:16:
         ed:b5:41:d2:b3:70:9b:6c:eb:67:d9:f5:b6:07:52:26:38:46:
         c1:df:59:21:50:01:00:cc:4f:fd:c6:df:76:ba:58:d5:71:48:
         01:65:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 15:20:17 2025 by rpki-client