Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c8d027f-3046-32af-8346-4bef988cb245.roa
File:                     1c8d027f-3046-32af-8346-4bef988cb245.roa (raw, json)
Hash identifier:          ajZuqxVVKbZLVxWA3dVvRREh1GODYIpIaA2Kt88Du6o=
Subject key identifier:   7F:A3:A9:8C:CE:87:7D:6E:27:D1:CA:2B:C6:3C:D5:43:93:83:CC:51
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584B99D7C3985805EA36FA47B180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c8d027f-3046-32af-8346-4bef988cb245.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     22168
IP address blocks:        64.62.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:c3:98:58:05:ea:36:fa:47:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=64cdbcd3-4cde-43a2-92a9-f604a0e97977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0a:d1:20:3f:29:d1:8d:72:60:7f:e4:ac:3d:
                    ec:7e:4a:9f:24:0a:33:85:0c:9a:41:0e:c9:c7:ab:
                    c6:93:12:39:f8:a0:a6:1f:6c:8a:19:54:33:c4:8c:
                    9c:81:2d:2e:ae:57:9e:54:86:50:47:d0:de:fb:24:
                    d6:32:b8:35:2f:77:52:ba:40:25:80:85:be:31:db:
                    ed:70:23:1d:2f:ba:8d:fb:8e:c0:d1:c8:81:79:b0:
                    8b:86:cf:05:a5:7e:c4:a2:4b:ec:65:ad:a2:38:09:
                    64:4f:a2:b0:82:76:de:48:fa:33:76:38:b3:81:46:
                    92:e8:0c:b1:62:3c:aa:c5:c8:86:05:81:87:19:23:
                    59:3d:e5:d6:ce:af:2b:4b:90:ff:69:09:b7:3e:11:
                    ce:42:ba:5f:17:36:51:fe:a0:4a:bc:34:b0:f5:43:
                    48:c5:7e:d7:14:07:8f:ec:96:85:b1:e4:61:d9:4c:
                    0b:0a:3d:34:74:92:5f:4a:77:b9:2c:ed:57:67:27:
                    e5:18:ac:ab:a2:42:29:53:bd:c3:32:b9:76:c7:a8:
                    71:09:0b:e3:9e:68:27:5d:8c:63:e2:1a:bd:65:47:
                    5a:19:bc:29:b6:24:44:60:fc:42:35:bd:0b:54:f4:
                    8f:e7:53:b0:8e:62:a3:cb:de:0c:5b:fd:6f:f4:c7:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:A9:8C:CE:87:7D:6E:27:D1:CA:2B:C6:3C:D5:43:93:83:CC:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/1c8d027f-3046-32af-8346-4bef988cb245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.62.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f9:fa:d3:37:3e:32:26:f1:c4:58:a6:b8:28:44:04:2b:e2:
         5d:23:9c:3b:b8:5e:f1:ed:29:cd:8c:af:e8:70:f6:0a:2c:15:
         78:92:2b:e3:55:e4:e3:80:27:08:58:53:d0:56:69:73:f7:5e:
         c4:36:e5:3c:ee:6e:f2:7e:6b:ca:65:1a:28:8f:86:0c:d3:d3:
         41:d5:9f:c5:c9:fb:8f:7b:60:f5:9f:06:10:10:bf:15:19:0a:
         77:a6:d1:a5:7e:88:79:83:79:a8:2e:7e:26:42:38:f4:fd:e0:
         14:5d:07:57:b0:cf:53:53:43:6c:b7:48:30:fe:e0:29:45:c4:
         75:d3:07:1b:18:8c:64:2e:ba:8b:a0:b1:ed:6c:8d:cd:33:4f:
         90:88:d5:eb:d7:b9:68:46:d0:7b:89:d9:9d:6e:81:8a:78:80:
         2e:8d:d8:08:28:db:26:f4:e2:bf:e2:bc:7e:21:a1:be:75:5b:
         61:23:99:0d:95:a6:1a:21:30:61:af:15:e9:d3:e4:fa:4c:14:
         b5:59:39:96:23:96:7e:05:d0:cc:f2:2b:d8:12:f1:f9:43:35:
         7c:08:b9:2d:8c:a2:18:0b:c1:94:f1:55:ab:66:ab:5e:10:24:
         15:de:7b:a6:77:6c:b9:35:86:85:d7:48:37:69:bc:5f:a0:7c:
         c0:f2:50:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 21:57:28 2025 by rpki-client