Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa
File:                     ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa (raw, json)
Hash identifier:          6Mg1UZLS0erGs9DeHxn2mo8lJxYcFZCgQ72wgQkcdmo=
Subject key identifier:   DC:FD:56:CA:B8:A6:AE:AD:82:A9:65:CE:D5:70:C8:7D:AD:47:A5:4B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B86E016D1FF23EEF42AE40580
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa
Signing time:             Wed 15 Oct 2025 05:57:32 +0000
ROA not before:           Wed 15 Oct 2025 05:57:32 +0000
ROA not after:            Tue 13 Jan 2026 06:57:32 +0000
asID:                     9304
IP address blocks:        64.8.255.0/24 maxlen: 24
                          206.217.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:e0:16:d1:ff:23:ee:f4:2a:e4:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 05:57:32 2025 GMT
            Not After : Jan 13 06:57:32 2026 GMT
        Subject: CN=1490eb58-37f0-4f01-868d-bd69a02b5a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9a:76:4c:42:4c:74:75:f0:d5:e1:04:6b:d5:
                    68:86:96:f4:bd:e1:37:a5:88:24:29:b5:cb:79:61:
                    48:c2:cb:fa:cc:71:dc:1c:71:56:f9:c4:00:41:2e:
                    f9:df:e4:3a:64:23:a1:81:df:8b:6a:e2:89:95:5e:
                    b4:cf:05:35:62:ce:51:bc:c9:9f:e6:cf:9d:87:d4:
                    6c:02:07:29:41:c5:32:6b:10:d0:a1:7b:f9:45:c4:
                    f5:10:ce:9a:a0:51:d2:ff:6a:1d:3f:4a:5e:ed:df:
                    f4:08:43:5c:7c:29:51:30:55:ed:45:85:c1:50:34:
                    07:6b:50:04:7f:b8:56:c6:91:c2:dd:92:0c:4d:54:
                    f3:2f:e1:cc:b3:08:fd:2b:cc:c8:92:fc:0b:65:7e:
                    83:52:b9:f6:3d:f6:b5:51:3a:e3:18:85:4c:59:7a:
                    d5:be:d4:9f:ba:55:23:da:ad:72:78:70:ec:77:47:
                    67:a3:2b:1f:53:a3:fc:3a:99:a8:52:a8:4f:cc:ee:
                    a6:dd:9a:80:4b:1a:fb:a8:fd:88:f8:31:21:7b:f5:
                    a0:cc:95:05:73:53:3a:66:18:c6:ab:eb:be:57:4f:
                    ab:4c:a9:9c:ac:79:6b:35:a1:25:bf:9e:f5:f5:97:
                    19:2a:35:53:ca:1c:d2:1b:7d:82:5b:48:26:df:f7:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FD:56:CA:B8:A6:AE:AD:82:A9:65:CE:D5:70:C8:7D:AD:47:A5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/ac2e6252-7ec6-39d5-bc42-a1224a7dd4e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.8.255.0/24
                  206.217.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1d:df:3a:ce:37:e7:99:71:b5:c2:78:c3:d7:b2:0c:de:8b:
         ac:60:79:8d:a7:37:ec:bd:9f:8d:35:c6:13:a4:d6:86:a5:36:
         5e:67:42:cf:ce:0d:f2:00:b4:78:60:3d:e8:0a:e4:fc:a2:a8:
         78:ab:f4:d0:0a:6e:24:88:05:4f:a5:0c:4e:39:10:e6:20:f2:
         96:4a:27:7a:97:ab:c2:04:ed:66:f9:0b:78:b2:4f:59:ce:e3:
         48:1b:57:a7:38:b0:56:97:e3:8d:17:b5:b4:cb:2a:30:8e:b6:
         e9:12:51:8f:00:9a:43:9a:ba:15:43:20:f3:89:fd:84:0e:13:
         e6:9c:84:1b:6d:b6:81:56:54:b3:42:06:06:d3:3c:9e:ec:db:
         24:01:40:29:80:cc:01:11:81:08:98:13:2e:06:b4:12:07:34:
         34:0e:b7:ae:10:03:34:7a:d6:a0:8f:ee:21:86:2f:26:ac:16:
         2f:55:3b:3a:76:f6:e5:d9:c2:d2:9e:3a:59:6c:06:44:58:d2:
         12:eb:aa:b6:29:cc:84:ad:9d:db:25:05:36:9a:54:5d:ae:8b:
         39:44:c5:76:29:30:e8:44:81:dc:d8:42:04:df:d3:c4:21:d8:
         8a:bf:29:2c:7a:a3:2f:29:54:28:94:3e:a6:f6:1b:7f:b0:b2:
         1f:3b:c6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:23 2025 by rpki-client