Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa
File:                     bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa (raw, json)
Hash identifier:          kTAKStvdfbl7bUWaef693MwRnWULVylQge9HSESH0W0=
Subject key identifier:   78:1A:C3:E9:A4:1C:D9:FE:F0:49:A6:A2:FA:59:24:CB:97:73:93:BF
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584AF256A12AEAF1CED15A0EC100
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     2711
IP address blocks:        64.84.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:a1:2a:ea:f1:ce:d1:5a:0e:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=bd088254-bc36-43f2-8e9b-c9e22c5633b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2e:79:3b:4b:ae:94:df:0c:d2:bd:0a:d4:e4:
                    4c:0d:19:9c:b2:2b:8b:e3:da:72:3d:78:6a:b1:45:
                    79:ce:c8:58:7f:16:9a:5b:32:f0:16:94:b6:f9:c0:
                    2c:59:a7:1f:f4:56:6b:8e:b3:a6:40:16:10:2a:4a:
                    7b:4e:b6:73:57:89:ba:50:a9:96:d1:1b:d7:72:3f:
                    ba:13:18:b6:99:cd:c7:0a:17:96:29:e3:4a:22:f2:
                    7f:96:68:93:d5:27:50:ff:03:17:ff:5f:fd:8d:0b:
                    34:14:a1:06:28:73:0c:ad:dd:6d:ab:d8:32:87:97:
                    10:27:3d:b0:9b:f1:57:75:fc:de:10:fa:10:32:81:
                    71:64:4c:65:95:26:b4:a2:b5:e2:f5:c2:4e:15:9b:
                    73:2f:96:9b:8a:75:90:45:f3:77:aa:ee:c2:af:78:
                    1a:08:6e:c3:19:46:ae:1e:c6:81:64:4c:70:0a:cd:
                    6a:23:6f:45:5d:67:ba:25:a3:c9:29:4d:f1:c3:d9:
                    30:ef:fe:f3:b6:1d:c2:08:fb:2e:79:85:48:9f:7b:
                    58:20:53:f4:98:dc:3c:3b:de:b0:cb:47:f1:ff:48:
                    9f:dc:f4:4a:e1:8b:60:4b:02:4d:6b:45:e2:46:db:
                    9c:41:78:2b:ef:34:6b:00:c6:6d:eb:5c:f3:ea:e0:
                    cb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1A:C3:E9:A4:1C:D9:FE:F0:49:A6:A2:FA:59:24:CB:97:73:93:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/bf47a0a0-287a-33e8-bdf5-e2f63247a358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:85:e4:34:a1:24:e7:1a:ec:94:ed:9a:f2:03:b9:4c:0b:
         1a:84:b9:87:c0:88:b5:e5:f6:cf:b7:8a:19:6b:72:87:35:00:
         09:ef:5f:46:3c:23:05:1a:2a:69:18:dc:22:4d:b1:11:12:4e:
         76:64:49:3e:51:b8:69:23:c1:43:ef:74:ed:12:af:71:90:97:
         68:fe:6e:6e:89:9e:fb:7d:3b:39:39:c3:dd:7b:55:79:c5:4e:
         fc:0b:37:37:3c:cd:a5:3e:fc:90:ab:19:67:94:85:9f:76:83:
         4d:ab:6b:ba:90:78:b5:73:08:63:43:57:b9:a3:e7:58:f0:58:
         79:28:b8:42:88:dd:a3:6f:78:69:ea:04:bb:23:25:f8:8a:58:
         11:8a:6c:98:f6:b2:5b:59:55:61:0a:75:42:95:3b:d8:6f:8f:
         0c:c9:88:32:aa:7f:31:5a:e1:d9:e6:bf:07:c4:85:00:29:53:
         1f:26:3c:5f:5a:67:9a:99:54:81:bd:b3:78:57:53:c9:d4:dc:
         ac:24:00:2e:75:c0:cb:15:d4:01:62:b6:7a:52:63:a3:23:59:
         96:c1:4f:08:fd:e1:c2:10:2a:ec:35:5a:05:e3:91:82:37:1c:
         9c:b3:4e:78:04:ad:86:75:40:36:a7:2f:70:b0:65:95:d8:9c:
         3a:c6:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:09:31 2025 by rpki-client