Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
File:                     8364f6e2-aaec-33e5-80c0-465d381b7783.roa (raw, json)
Hash identifier:          fkakDKdAMkwTm4ezpUpiiU6xOpzPDSpi2b3mYJ6w8/4=
Subject key identifier:   B3:F5:53:EB:24:6D:54:1B:AC:1D:D4:A7:71:B3:E3:0C:F8:2D:4C:48
Certificate issuer:       /CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
Certificate serial:       010D0C9F4328584B0B76A4B6D01A27746A08EB00
Authority key identifier: 77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     6461
IP address blocks:        216.19.84.0/24 maxlen: 24
                          216.19.86.0/24 maxlen: 24
                          216.19.95.0/24 maxlen: 24
                          2620:a::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a4:b6:d0:1a:27:74:6a:08:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=49e1018f-ce48-46bc-8efe-1cf4e0146bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:05:f6:71:61:88:3e:42:60:78:5e:f6:6b:
                    19:ca:fd:a2:e9:d6:f3:50:33:b0:a7:13:05:ac:90:
                    d4:d4:a1:11:94:b6:e5:2b:ac:1e:71:50:e6:5d:98:
                    1b:c6:63:ee:6e:0a:1c:cf:41:1a:01:5c:31:af:e9:
                    46:ea:78:8a:c6:71:bc:d3:33:db:3d:87:b7:7b:17:
                    de:6a:9d:44:54:fa:df:1d:e7:8f:5a:9e:81:7e:2c:
                    f9:c6:0b:d9:ba:92:b5:ae:28:e8:32:6c:47:9e:2f:
                    17:ed:f7:69:93:04:96:4b:7b:8a:b5:9d:fc:b8:12:
                    83:83:01:89:14:06:8d:a3:69:86:66:80:0f:b1:4c:
                    6d:08:f3:26:85:12:0e:eb:8f:5c:2a:89:9d:8a:06:
                    1c:b6:99:8a:f5:3b:93:d7:e5:8f:b9:05:d6:60:eb:
                    d6:38:48:99:34:85:6d:73:11:98:c0:be:cf:65:c5:
                    df:cd:19:f6:63:a7:2f:59:f6:24:b1:ed:aa:1f:e2:
                    22:88:2e:9c:66:92:df:a1:1a:87:4b:2d:ae:30:9b:
                    7b:fb:d3:3d:a2:ff:13:72:de:ac:a9:45:5a:ed:4a:
                    00:6a:34:0f:97:25:aa:9e:77:f0:92:48:56:d4:45:
                    31:0b:1a:95:cb:17:a8:59:c3:24:e3:95:c2:ef:b1:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F5:53:EB:24:6D:54:1B:AC:1D:D4:A7:71:B3:E3:0C:F8:2D:4C:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/8364f6e2-aaec-33e5-80c0-465d381b7783.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.crl

            X509v3 Authority Key Identifier:
                keyid:77:05:42:3A:27:84:58:52:46:16:9F:93:86:71:AF:A7:C1:01:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4dcc6a3a-0e4f-48c1-9114-5dddf2d7db9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.19.84.0/24
                  216.19.86.0/24
                  216.19.95.0/24
                IPv6:
                  2620:a::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:36:95:0c:57:52:d2:2f:22:53:f5:8f:b0:c8:25:d6:71:3f:
         67:42:c9:8b:4c:09:95:4a:64:c5:34:70:e1:8a:b6:c7:ff:cd:
         86:45:4a:55:f8:61:3a:5e:35:29:68:39:7b:ef:1b:25:68:49:
         d1:30:46:b2:b0:8c:7b:b7:b7:44:e1:8f:d5:7f:d1:7a:1e:1a:
         88:1e:a4:0f:ce:6b:20:09:d4:5c:8a:14:bc:82:55:b1:c6:e6:
         1a:72:d5:92:a7:ff:c6:9f:07:96:ed:d2:d9:30:f9:5a:20:f9:
         8f:28:12:0b:1a:97:72:45:7b:18:9c:4c:ed:33:19:d4:31:7b:
         b5:66:32:8f:8f:39:7b:d6:36:d2:70:38:d7:64:1a:7d:50:1f:
         cc:f2:14:8b:77:3f:f8:4a:c5:bb:42:dd:43:5c:b6:0c:91:f5:
         4d:a3:95:eb:9b:60:6f:b2:1c:76:d6:45:a4:76:df:0b:87:c6:
         13:1d:96:c6:fd:34:ed:ce:39:b4:f5:86:10:90:74:71:09:75:
         20:78:3c:d5:cf:e9:60:54:ed:42:b8:9d:ac:53:61:e7:97:29:
         cb:94:51:ea:a9:b6:cb:01:67:29:57:d1:cd:61:ea:83:7c:29:
         18:bb:cb:c2:82:c1:3f:8d:d0:40:2c:7a:48:c8:27:c3:45:a6:
         d7:79:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:33:46 2025 by rpki-client