Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa
File:                     af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa (raw, json)
Hash identifier:          k20eHAUgRAb+G47p9IV8o2mn43TZKGx88UsK67De4DY=
Subject key identifier:   5A:09:F5:81:79:C4:6D:CB:85:E0:12:C8:8B:B9:6D:1B:25:A9:D1:82
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE19714F420275C2C5A58B800
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        64.231.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:97:14:f4:20:27:5c:2c:5a:58:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=6094b27f-a11c-45f1-a498-aeee58b5eacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:2b:0a:74:0d:e8:04:7c:27:90:b1:16:f3:
                    51:d8:f7:ac:18:e5:7e:86:5b:04:e5:d5:b7:90:19:
                    62:44:2d:21:ff:e7:bb:a1:dd:2d:0b:4e:f3:d1:4e:
                    9c:98:8b:39:af:8f:94:22:f7:1c:85:ae:46:35:cd:
                    d6:23:2e:93:99:4f:2b:72:b5:cf:7c:5b:5e:ad:bc:
                    1f:fe:67:ed:79:c8:77:2b:95:aa:ca:33:e0:71:7c:
                    29:8d:19:e6:3b:12:69:27:d5:86:e2:7b:2f:d3:e3:
                    00:6c:12:b3:1d:83:ac:51:62:1a:45:3d:db:0e:77:
                    2c:6d:f3:70:9c:73:76:50:a7:61:31:de:4a:9c:c4:
                    7d:ec:b1:2e:85:7b:6e:f3:1d:28:c1:e6:96:c9:87:
                    bd:07:e8:91:53:38:dd:0b:73:e6:f8:0e:84:f7:db:
                    e6:e5:34:38:7b:52:98:b7:91:4b:92:0d:f1:e4:22:
                    3e:93:b6:5c:fa:46:5b:99:13:a0:39:e2:58:1b:a9:
                    28:bc:14:92:ee:e8:f3:4d:92:c7:79:c9:33:3f:97:
                    cd:3c:7c:42:31:4d:8e:03:38:c8:65:3c:a8:c3:a1:
                    c2:c3:c5:fc:70:2b:2d:2d:6f:27:13:58:af:fc:f6:
                    d6:af:87:f4:52:f4:06:26:3c:a6:71:7d:ed:00:2a:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:09:F5:81:79:C4:6D:CB:85:E0:12:C8:8B:B9:6D:1B:25:A9:D1:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/af4868b3-26a2-31d0-9de6-f3b7ef66108f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.231.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:f8:c1:c6:48:6f:2b:5c:81:ca:6f:59:80:b9:46:1a:a2:
         03:b7:fd:1b:cc:27:d3:41:0b:57:83:1e:0e:11:2a:9c:5b:e1:
         0b:4e:a3:4a:02:c7:79:c1:20:c5:1b:ba:1e:8a:a5:66:c8:ea:
         4b:48:70:fa:13:85:7e:a5:a3:2a:d2:f3:9a:86:66:ce:8d:ba:
         ad:95:b3:f0:10:62:c3:e2:22:ef:c9:47:79:c1:2e:62:32:0f:
         f4:eb:dc:9e:bf:af:00:53:11:cd:76:d6:9c:1a:aa:6f:73:fc:
         b1:4a:5d:9e:9a:e1:41:4b:fc:0e:95:c1:61:7f:0d:2b:fe:d6:
         58:47:00:7f:97:b9:c4:94:34:a8:6a:e8:00:a1:38:ef:ec:bc:
         f4:8f:46:d8:02:6e:98:ea:8c:dd:e0:8a:bf:c1:76:2f:37:ba:
         0b:89:47:46:97:29:98:54:1a:8d:14:a5:18:6f:7b:68:25:ba:
         e5:cd:1d:5c:31:41:e6:c0:0b:f7:a4:8c:6e:02:1d:f5:10:77:
         f3:03:56:3d:c3:cd:40:ec:87:80:6d:59:8b:8a:d5:9f:b9:c8:
         8d:69:a6:71:43:57:56:9d:91:0c:6f:08:4e:b5:12:0b:b1:29:
         82:26:67:3f:e4:e7:21:c5:c9:7d:7d:f8:32:1f:e2:3d:36:07:
         fa:b5:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:52:05 2025 by rpki-client