Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa
File:                     27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa (raw, json)
Hash identifier:          DxEt+mZaDRb+tSz7Ohl+CYAncrGhMZ8qwQgX1aymdLo=
Subject key identifier:   34:01:59:42:D1:08:A5:36:89:3C:C1:F5:1B:D5:E2:FB:2E:4D:8F:19
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB8FEFDEB2FFB6BCC71AC60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     7725
IP address blocks:        64.139.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b8:fe:fd:eb:2f:fb:6b:cc:71:ac:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0de8902a-1cd2-469f-8ad1-7f2db8e4b1b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0e:f1:39:a4:0f:0e:e5:d7:a7:67:89:9e:e8:
                    a2:e0:f4:06:64:f0:8b:47:ce:5d:e3:97:d8:6e:64:
                    6a:3e:a3:2a:f6:f6:82:34:97:a2:a2:23:73:8c:8b:
                    57:8c:bf:1a:61:58:45:7d:26:e6:eb:8f:6a:e4:11:
                    14:7b:34:88:16:1e:07:96:b8:68:1b:4d:39:79:57:
                    75:4a:11:3e:a9:31:71:d0:1e:d2:82:2b:c3:2d:5e:
                    b0:18:85:ac:3e:01:ff:f3:59:9c:53:f1:1c:2e:34:
                    b5:47:4c:6c:fc:4e:fe:53:08:33:b5:02:04:60:2a:
                    ad:ed:9d:39:54:53:74:34:33:a7:63:64:71:f7:e4:
                    ec:9c:ab:b2:25:6b:74:2d:e5:49:45:31:87:7c:7f:
                    8a:85:d5:c6:eb:64:b8:1c:1c:cd:85:10:13:d3:e5:
                    e9:7e:83:6d:ea:b2:9e:e6:c4:72:2c:60:9a:31:0b:
                    f1:64:1f:0c:a3:f1:4c:85:cf:45:0a:6e:20:9c:20:
                    a6:8d:fc:c7:bd:4c:17:4e:bf:28:17:6a:40:ba:e5:
                    15:f4:21:42:6e:90:d8:1d:b9:93:dc:27:08:25:c6:
                    14:98:f7:08:55:f8:e8:b1:17:4d:69:7e:5f:c8:ca:
                    7e:fe:5d:7e:f4:15:73:07:40:7f:b0:b8:d8:a2:4b:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:01:59:42:D1:08:A5:36:89:3C:C1:F5:1B:D5:E2:FB:2E:4D:8F:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/27d88c49-8e69-33f4-8ffe-d4a5b41b576a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f9:91:48:d5:b0:79:69:e5:c4:0b:3e:b5:0f:b0:32:4e:de:
         80:31:5d:2b:6b:fd:a0:76:59:73:84:86:b9:0d:da:bf:4c:f8:
         28:00:ea:92:f3:17:e8:2e:d5:52:1c:81:0a:ae:1d:90:83:b3:
         c8:36:57:25:b8:04:d7:00:0d:bb:e9:cb:6f:69:c2:43:d1:c1:
         36:04:e2:76:b3:3e:6f:7b:07:f6:15:c5:b0:c6:94:23:14:6e:
         2a:c0:61:96:58:ec:60:42:ab:a2:41:71:69:e8:8b:e1:c0:50:
         4c:46:54:9d:37:8f:63:41:86:f2:5c:48:1c:2c:ee:10:d1:3e:
         0c:c9:30:24:9f:ff:e7:1a:b5:6e:1a:1d:a2:fe:5b:8d:b7:6c:
         a0:4a:e2:a2:43:f9:ae:90:1e:20:93:36:f1:18:77:ff:75:24:
         93:5f:53:cd:ce:66:38:31:bb:6e:06:ae:dc:27:25:26:00:1c:
         f9:83:90:64:9d:28:2e:e5:fb:87:56:31:0c:3b:d2:34:18:03:
         ca:cc:f6:89:a1:e4:72:a5:8e:2c:22:d9:0f:04:e8:64:05:ed:
         75:fd:62:15:85:fd:43:76:7d:65:ab:87:b9:94:10:d6:0b:f3:
         9d:bf:48:1b:7d:17:09:af:57:ef:0a:7f:56:3e:42:86:7d:61:
         f6:7a:3b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:21:11 2025 by rpki-client