Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa
File:                     1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa (raw, json)
Hash identifier:          DejhFDydS6CFyo0wJN/CbamhGN57Dmad5rjRx+vFCxI=
Subject key identifier:   AB:D7:DF:2D:F1:1D:2D:C0:75:0C:78:39:25:78:18:D1:17:7A:75:49
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584B821CBFC9D8A7F8A5F53FB340
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14618
IP address blocks:        207.64.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:bf:c9:d8:a7:f8:a5:f5:3f:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8468351f-b7e3-461c-9bfe-2463f1b09ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:92:67:74:1f:c2:62:75:52:0a:4c:9d:c6:92:
                    10:d5:c9:03:b4:cc:03:90:ba:8d:b5:30:f8:29:35:
                    b7:75:f1:f0:cb:31:ee:fb:b1:1b:a4:1a:d2:ba:61:
                    3c:9a:67:1d:e6:2d:78:81:e9:f2:a6:df:c8:b4:a1:
                    70:53:dd:51:75:ab:cd:95:95:f6:24:98:3b:25:93:
                    9e:08:37:e5:b1:44:3b:32:66:c8:82:57:2b:b8:1e:
                    ef:1a:7b:63:8b:a3:02:f8:d2:90:82:f8:ed:f3:70:
                    76:08:78:08:ea:38:df:26:84:f1:a6:67:81:8d:58:
                    52:91:d0:f7:4a:34:51:4e:da:40:48:26:b8:54:fb:
                    52:10:18:a6:7f:57:16:06:50:de:e9:e6:7c:1c:01:
                    41:f7:2a:79:3e:0e:e3:20:60:17:ce:41:7d:b7:4d:
                    6c:a3:9e:9e:b3:91:52:bb:62:9b:a5:86:a4:fd:c5:
                    c3:56:77:41:0b:2d:b5:14:c3:de:0c:83:91:08:3a:
                    5c:a6:2e:73:54:43:82:ce:4d:54:99:7b:8d:2b:33:
                    38:01:fd:35:fb:88:6b:d7:96:45:b7:f5:bb:36:d2:
                    84:48:0d:90:d4:20:8f:52:99:5f:45:04:2b:00:e4:
                    85:7f:d0:0e:32:f5:d0:b4:be:41:69:f5:a6:40:03:
                    25:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D7:DF:2D:F1:1D:2D:C0:75:0C:78:39:25:78:18:D1:17:7A:75:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/1c55dbe3-8311-3da5-9a26-9f5291cb888e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.64.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:61:c2:26:ae:0b:2d:4b:30:03:9c:1c:fb:0a:d0:dc:d8:73:
         1d:b8:2d:36:bb:54:54:f9:09:cf:8f:bb:0a:55:d9:58:5a:1d:
         c6:9e:96:cb:70:81:20:0e:f5:66:ad:3c:d6:d9:ce:f4:f3:7d:
         9d:23:f6:4c:be:1c:22:0a:7d:ed:2f:4d:6b:36:e1:b5:3e:44:
         95:91:e5:ff:9c:88:99:f8:51:be:47:56:6b:2e:1c:db:65:c0:
         46:b2:06:f3:9e:45:46:aa:68:24:b5:a6:5c:b7:11:71:5b:da:
         a3:82:15:57:9d:fa:fa:ba:18:59:87:4d:21:da:96:85:f3:89:
         85:1a:f7:19:88:45:10:9d:05:68:c7:54:26:92:9d:d2:3d:29:
         33:06:57:d5:98:b1:eb:70:09:55:4a:47:30:1b:3b:8c:a9:b9:
         73:a0:8d:1d:8b:da:c8:5c:af:3e:e1:aa:4e:2a:0b:d1:ae:51:
         85:aa:ea:fe:7b:1e:65:cf:7f:e6:31:5b:a2:6e:be:3a:7b:0d:
         6d:66:ad:80:a7:44:35:41:53:e5:19:19:3c:af:75:75:fd:0a:
         63:2e:89:67:9d:fc:72:ba:c1:96:3a:e0:52:a9:dc:04:df:77:
         9b:39:6a:8b:77:a6:a1:46:5d:07:c0:c7:35:a5:27:30:90:1e:
         0f:22:ec:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:39 2025 by rpki-client