Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa
File:                     07dff386-a6b4-3b99-b1cc-808ccc001aea.roa (raw, json)
Hash identifier:          KofCn6wTGOlOpsiJG49W/EHS3Am4nnsGBR0cCHUI35A=
Subject key identifier:   7E:85:95:B0:10:0E:F8:37:5C:7D:3A:8E:5C:FD:D6:87:48:45:5F:C2
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B821CC75F252C331E4C440200
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        207.64.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c7:5f:25:2c:33:1e:4c:44:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=5991b731-95eb-4461-bd11-1b083e856d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4d:70:d2:61:69:a8:35:3f:3a:10:98:c4:33:
                    a6:e6:c4:cf:b4:9c:05:6e:a1:db:72:ae:b2:12:d5:
                    19:dd:51:6b:a4:86:c3:48:97:aa:6e:b7:bc:61:8f:
                    08:bb:50:a2:2c:80:24:b6:23:e9:4e:f8:6c:0f:3c:
                    e0:91:a7:3a:1c:d7:9a:92:18:27:4a:95:fb:7f:16:
                    f0:62:6c:46:d6:4e:e1:39:3a:9c:66:71:cc:3b:c4:
                    b2:7c:66:c2:55:9b:c4:8a:8f:0e:8e:fa:1b:50:89:
                    b7:fc:25:4b:1c:85:87:65:70:dc:98:83:1c:ff:bc:
                    6d:aa:05:10:ae:64:1e:94:27:9e:3a:ff:9e:2c:fc:
                    ce:f5:95:81:29:d2:ef:13:7d:12:f1:f2:d1:bf:10:
                    27:48:f3:c8:2a:5c:12:cb:90:46:0d:cf:54:e9:02:
                    6d:d4:41:d2:46:06:5b:cf:35:c0:be:50:09:77:1f:
                    b1:c2:d4:42:ce:5f:17:dc:7c:84:60:83:4a:cc:ae:
                    83:5d:73:e3:29:38:3d:1c:e4:56:6e:3a:cd:30:00:
                    5c:e8:55:90:59:68:13:26:e1:72:74:44:5f:53:0a:
                    8c:ab:c1:d0:84:c4:07:1e:ee:72:20:4a:91:cb:9f:
                    bb:27:15:0f:ac:22:0d:91:45:b7:69:18:4b:ba:54:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:85:95:B0:10:0E:F8:37:5C:7D:3A:8E:5C:FD:D6:87:48:45:5F:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/07dff386-a6b4-3b99-b1cc-808ccc001aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.64.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:da:7c:ea:d4:db:23:05:6c:84:e6:4a:40:58:53:8b:a4:6d:
         12:b7:46:23:59:0c:25:a8:8b:8e:42:97:da:13:4a:63:37:3d:
         da:58:ff:74:75:1c:9a:8b:78:73:ea:21:6e:88:b3:25:7d:b8:
         23:02:16:e9:fc:82:76:54:b2:ee:9f:4c:f6:a7:c5:43:52:81:
         d1:bc:47:0b:27:08:b8:c0:10:08:56:ec:2d:5a:47:b8:b0:bf:
         ce:7f:dc:b1:1d:22:6a:e5:29:02:cb:f8:d5:47:44:94:45:47:
         1f:95:88:2b:a2:24:e6:b0:c1:e2:de:d3:47:52:af:43:d6:78:
         38:23:d9:83:be:32:74:b2:df:ae:cd:70:b8:15:19:73:0d:fc:
         c1:9a:cb:4e:70:67:7b:7e:9f:42:c0:10:28:36:23:55:97:ea:
         96:0d:4c:10:81:0a:93:2d:cd:c3:0b:5f:0e:9f:3d:a3:40:a0:
         b9:4f:40:f4:10:2a:6a:d4:64:0f:ae:a7:a7:a3:62:de:e3:fa:
         bd:07:e7:c0:7c:27:d6:78:55:b3:4c:10:02:b2:f1:fd:69:94:
         a3:05:aa:0d:a3:57:92:1c:9f:a3:4d:06:b1:6b:2b:26:0a:a8:
         85:24:4b:d0:28:20:b5:c1:0a:5e:97:de:bb:0c:2c:6f:23:3f:
         4c:08:84:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:24:21 2025 by rpki-client