Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
File:                     c93aa5cc-9725-3304-9f64-6159a1070c5c.roa (raw, json)
Hash identifier:          3YV5a26RJ15US+zbWOOsnJ4MWLSuv2WEg01Vy8KbNNA=
Subject key identifier:   51:4B:8C:E8:F9:36:E4:B1:01:D8:A6:97:C8:D9:E4:5D:E1:22:5B:E5
Certificate issuer:       /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial:       010D0C9F4328584B7DECABFF4D14C977BAD27500
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     8075
IP address blocks:        198.252.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ab:ff:4d:14:c9:77:ba:d2:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=ad2d2597-b56a-4a77-80e1-6e9c576a7ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d0:cf:b8:82:28:bc:c7:9c:db:d4:c6:a8:1b:
                    cc:e0:a4:8c:ed:d4:13:11:c9:5f:93:ff:32:f7:3f:
                    71:28:fe:62:3e:67:ea:77:f5:c3:86:e0:95:ab:e5:
                    a9:a7:a8:0b:b1:15:6a:2c:fd:84:e3:7c:de:75:83:
                    13:cf:a8:e5:89:cc:9b:6b:b7:f2:38:bc:a5:a8:7b:
                    3a:38:c6:ec:91:65:40:16:aa:0d:79:d4:e3:ee:9e:
                    c5:2a:35:5c:bd:75:d9:dd:af:18:70:d6:3e:db:d4:
                    10:8a:e9:dd:73:9a:78:01:39:ef:46:d9:30:69:50:
                    3c:15:fa:84:46:4c:6c:f7:1d:1c:aa:57:ac:f1:96:
                    1d:ee:3e:11:26:92:04:da:11:99:4d:37:e0:d2:04:
                    7c:34:c4:b1:fb:f8:02:13:db:f2:43:01:a9:00:98:
                    21:97:d1:d2:54:c2:5e:61:1b:e1:cd:f6:25:9e:eb:
                    36:b0:41:4e:a4:f2:11:9e:aa:1f:55:8a:af:78:a4:
                    01:69:f2:17:f8:32:15:ea:50:7c:14:a6:95:c8:76:
                    5a:30:58:e0:5a:d3:3d:e1:da:e0:72:83:fe:47:4d:
                    5b:19:e9:2b:59:d9:a2:24:de:57:0b:ac:60:aa:95:
                    65:5a:e6:14:07:ad:77:52:97:b4:da:cd:03:40:b9:
                    72:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4B:8C:E8:F9:36:E4:B1:01:D8:A6:97:C8:D9:E4:5D:E1:22:5B:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:5f:a7:0a:7f:ce:65:07:f4:c0:d0:c9:bf:54:ee:c0:9d:
         1b:b7:22:f9:2e:00:39:df:f3:8d:c9:da:0c:4e:45:7c:bb:c8:
         96:0f:4c:47:9d:14:e1:fc:50:f0:e1:4c:6b:c4:17:c0:5f:0e:
         16:dc:00:b8:d5:0a:41:6f:86:71:67:b5:94:0c:0c:f9:37:60:
         6d:76:16:34:35:f6:96:52:5a:9b:08:03:53:1c:00:e9:86:35:
         b2:0e:6f:39:fb:a2:16:2a:6c:5b:8c:93:37:0a:8d:79:13:d7:
         07:5d:3a:21:05:a6:b2:b0:17:ee:95:a7:7f:b3:e3:44:39:29:
         e6:0c:0d:ff:6c:ba:3d:da:bd:3c:94:4e:2b:8c:4a:e2:56:36:
         b0:95:6b:38:c1:c1:ed:2b:9a:ba:fe:1b:1b:bb:1c:3f:39:1a:
         c7:c7:c5:e0:a8:65:74:5d:6a:82:b9:01:27:2b:66:08:e1:be:
         5d:6b:41:d7:d6:fa:b2:8e:35:51:79:db:f2:b6:00:8e:2b:88:
         9a:9c:5d:ac:e7:a7:40:8a:c5:32:7a:2a:87:76:ae:18:4a:ab:
         30:6b:3c:36:b5:3a:71:21:cd:37:60:fc:92:ea:84:42:d1:5e:
         98:50:0f:c7:8d:b5:bf:56:8a:b2:9f:64:20:c2:ec:90:5a:77:
         32:60:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:31 2025 by rpki-client