Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa
File:                     68709e78-5d4d-356f-b01a-04e4a0287898.roa (raw, json)
Hash identifier:          zL4ggi0ghopHTf+NqWwPkA79fuDMgFrD5nQ6x3vpa4E=
Subject key identifier:   40:13:BB:9E:80:84:D5:36:3D:D7:A3:DE:0D:1D:AF:35:8A:2D:0D:F7
Certificate issuer:       /CN=eeff816f-42ef-47a6-ba61-7075adb85329
Certificate serial:       010D0C9F4328584A9BCB725089D80EEA2651FFB0
Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     393457
IP address blocks:        64.25.110.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:72:50:89:d8:0e:ea:26:51:ff:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=1c8ce06b-24f5-4d05-8899-cd90c1149371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ea:b0:09:2f:eb:a9:e4:e2:8f:b3:1b:bb:5f:
                    fa:44:cc:84:90:96:73:54:54:40:12:09:e0:13:89:
                    6e:bd:03:59:1b:b3:81:61:8b:b8:2e:6e:ab:43:06:
                    85:88:4b:8b:4d:49:9d:db:23:b8:04:c2:da:dc:f1:
                    b4:48:7b:e7:da:3c:39:12:85:a4:4d:14:5c:bc:ce:
                    e9:92:e4:ea:9a:ee:f2:b3:20:ca:8b:63:d9:e3:b0:
                    cb:21:54:ad:45:3c:a1:27:32:14:fd:a5:b6:1a:38:
                    31:0f:bd:3e:07:14:ad:5b:c0:f5:e3:61:64:71:28:
                    9e:54:30:5d:d7:c4:04:19:fc:b2:4e:fe:7b:29:d6:
                    0c:3f:4b:54:3d:ba:fe:0e:34:c4:6b:29:cd:4f:3a:
                    e0:fd:f5:54:c6:c5:e1:17:7c:bc:17:ca:8d:b9:68:
                    18:a0:40:23:84:f5:b5:fc:e9:34:05:2d:9d:8e:a0:
                    ec:6c:66:23:e6:78:5a:6f:d9:cb:81:ce:93:a5:92:
                    54:99:ce:1f:cf:ad:30:14:44:77:f7:0d:c2:d7:d4:
                    2d:32:33:bf:06:8b:6b:1a:17:18:68:04:e2:90:15:
                    f8:01:33:14:f9:7e:4d:7b:39:19:6d:f0:47:ef:75:
                    15:fb:76:f6:cf:f3:fd:58:4a:79:d8:bc:94:05:90:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:13:BB:9E:80:84:D5:36:3D:D7:A3:DE:0D:1D:AF:35:8A:2D:0D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/68709e78-5d4d-356f-b01a-04e4a0287898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl

            X509v3 Authority Key Identifier:
                keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.25.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:24:ed:1b:f8:97:15:01:f8:fa:6d:16:00:14:a5:30:61:
         18:81:d4:44:fb:71:64:8c:88:6a:d8:9a:78:22:23:d7:b6:07:
         66:f4:44:18:3c:ee:08:0e:0c:a0:f3:51:b4:ff:58:9d:96:d9:
         9a:25:54:13:49:88:17:37:59:2a:1e:64:69:e5:e7:39:8e:e3:
         ab:3c:c0:67:9e:af:18:b5:0d:3b:d7:33:3d:fd:bb:bf:40:0e:
         7a:9d:af:cd:38:a0:a6:37:7b:d9:68:7d:9a:cf:61:62:12:30:
         01:3f:70:8a:2f:d3:83:7e:4f:f2:8f:df:ee:67:65:3a:b3:e7:
         ee:59:3b:5f:80:f4:b5:8f:7a:cd:fb:7f:74:4a:7e:ca:42:21:
         f2:fb:17:0b:44:12:f1:c7:34:9b:32:c6:be:de:2b:8b:09:7d:
         86:17:15:e8:fb:51:51:ed:d6:eb:22:e2:aa:22:e3:4d:f6:6d:
         b5:5b:33:09:17:89:3e:1c:98:6b:92:4c:11:0b:26:ed:20:44:
         47:93:01:ee:b9:70:a2:79:84:4d:ad:7c:cf:5a:d0:46:38:ac:
         8f:4e:72:73:5d:f6:4b:b8:b4:be:03:28:33:3c:8e:18:8f:55:
         47:1a:7f:95:75:e5:83:69:37:06:2c:00:20:c9:ac:d1:95:5b:
         6c:09:2e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:25:09 2025 by rpki-client