Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa
File:                     41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa (raw, json)
Hash identifier:          HdgSaqZj0XchhoOfexCrUYb/472V5k4ya0l64RJbNFE=
Subject key identifier:   F5:99:AC:13:F8:EE:75:4A:3D:65:81:DB:4D:45:B5:44:EA:D5:0A:6A
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584B715CA95F717D2CD3F3BABE80
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     22709
IP address blocks:        64.70.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a9:5f:71:7d:2c:d3:f3:ba:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=714dc07b-a67a-4edc-9bbc-f411ff58c330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:33:43:b4:9c:b7:dd:b6:3e:7c:18:37:27:e5:
                    90:1b:2e:3d:4c:ac:2a:ba:e1:b1:51:d3:a2:9e:41:
                    e0:27:a7:ad:41:e0:39:ce:ac:9e:6a:d3:76:c4:a9:
                    45:e7:02:f7:fa:c7:00:46:ab:16:87:50:9d:45:db:
                    9c:56:ab:c5:9a:6e:7f:01:89:6e:fc:e9:77:38:de:
                    27:18:45:72:2a:30:41:69:9d:42:da:d5:93:e4:22:
                    7b:b3:07:6a:d2:b5:d7:bb:59:a4:47:20:fd:6f:96:
                    89:c1:1f:a7:fd:9d:52:29:4e:49:8e:43:48:b7:84:
                    6d:76:db:9b:aa:cf:81:09:0d:3b:f1:eb:35:e8:b9:
                    e4:a4:71:a9:bf:ba:47:59:fe:c1:28:a9:1a:42:22:
                    1a:7c:cd:4c:01:1f:c0:36:d3:11:56:74:c6:15:cb:
                    71:d8:50:b1:75:d3:c9:42:ca:7f:85:b9:3d:fc:7e:
                    04:47:e7:50:e8:b8:1a:34:d6:0a:a3:e6:4a:c9:8e:
                    6d:46:ba:a9:81:17:a5:50:18:c4:e1:73:67:81:f7:
                    b5:e8:05:dd:b5:da:e7:99:51:ad:5d:e7:38:7b:ef:
                    83:3e:c5:77:03:59:6d:32:40:9a:3f:57:bc:6a:09:
                    30:7a:bc:25:7f:b5:72:39:b5:67:30:2d:92:7b:e3:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:99:AC:13:F8:EE:75:4A:3D:65:81:DB:4D:45:B5:44:EA:D5:0A:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/41bc3a8a-9b23-36e5-acd8-0f8fa5113f7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.70.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:04:a2:54:8f:32:d0:23:ad:86:87:2f:ed:f6:8c:da:0c:a3:
         62:37:4d:a4:49:a5:09:39:28:3f:cc:00:75:a5:fd:cd:2a:d2:
         d5:d6:19:d6:02:43:a9:07:f5:02:d8:d5:47:e6:c8:2f:53:70:
         53:3d:1f:12:42:14:14:28:8d:8a:fb:a9:95:82:75:33:81:be:
         ad:ea:b1:ce:03:0f:8b:dd:05:1d:81:97:19:65:e1:1e:79:f8:
         32:66:8e:4d:ae:9e:0b:2e:a1:1b:27:f9:2f:fa:92:72:1b:bc:
         85:68:a9:c4:40:7a:5c:52:11:cc:4b:20:6b:3d:77:fa:47:75:
         32:a7:3b:a7:ee:fe:be:f5:4f:9b:3d:1d:46:f7:99:f0:e2:d5:
         ce:b9:22:1f:06:88:cc:a6:ff:2a:fd:62:25:9a:19:82:ec:cb:
         1f:f1:7b:7b:40:8b:58:b5:3d:57:29:4c:ee:f5:98:1a:e5:2c:
         76:e1:0f:83:78:5e:77:70:5a:02:2b:7b:06:a2:22:7a:f7:12:
         fd:68:d3:88:17:1c:34:12:ce:4f:f3:18:3f:3e:90:8d:4b:70:
         42:15:a9:f5:37:d7:eb:1a:15:52:2b:82:42:8a:ef:72:2e:a5:
         07:65:bc:2a:e5:a3:d1:1f:e2:b1:8d:90:13:b9:3d:4a:41:10:
         10:98:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 17:34:32 2025 by rpki-client