Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5fe3bef8-a13c-3278-a87a-c33da07be774.roa
File:                     5fe3bef8-a13c-3278-a87a-c33da07be774.roa (raw, json)
Hash identifier:          sbTFK5Syz8I3KFqDLiLw3H6ctB4mcQndx0O9ed4SjDM=
Subject key identifier:   9A:12:6F:7E:94:43:EC:3C:9D:9B:BB:7D:A6:EA:C6:D8:66:2F:F3:F8
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584AD3A111F6A2612D965A509218
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5fe3bef8-a13c-3278-a87a-c33da07be774.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        64.99.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:11:f6:a2:61:2d:96:5a:50:92:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=723b9e5d-4a02-44f1-8f9a-74a9273dc329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:47:3b:38:70:b0:17:b9:5d:89:97:bf:8c:
                    56:b6:61:00:41:4a:41:fc:76:95:17:e1:44:16:b8:
                    90:d3:b0:26:2e:af:8d:9e:95:24:b1:b7:cd:45:56:
                    ee:80:e9:a6:0c:db:4e:61:b9:3b:d3:0d:bd:07:93:
                    f1:16:37:54:4c:82:8d:7e:1e:dc:54:cd:ee:9e:59:
                    fa:74:29:69:5c:68:80:0c:37:5e:c7:d4:5b:6c:89:
                    d4:9c:a2:57:59:85:ee:ed:b9:17:a1:43:15:4b:e5:
                    78:8a:90:a3:49:10:18:4d:d4:2e:1e:54:1f:a7:1e:
                    9f:38:63:ad:ef:97:30:92:4c:61:cf:7d:dc:07:26:
                    3d:b9:a6:49:1f:1c:9f:d3:47:6f:9d:37:7e:ba:00:
                    db:0c:37:20:ef:51:02:28:ad:a8:de:86:27:cf:a9:
                    60:e6:bb:df:b8:3f:1f:6a:1e:73:6c:d2:14:96:45:
                    11:b1:cf:6f:9b:ca:c7:fd:49:97:c1:60:03:ef:ab:
                    81:29:b8:2c:89:ce:41:03:83:2a:6e:35:34:5d:37:
                    4d:65:79:95:06:38:f4:b7:66:42:db:b9:1b:e2:d1:
                    04:b1:16:47:5c:d2:e9:4c:36:ee:e9:b4:bb:90:b1:
                    26:ed:fe:c9:6b:e3:33:ee:e0:ce:30:3a:91:2a:41:
                    6e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:12:6F:7E:94:43:EC:3C:9D:9B:BB:7D:A6:EA:C6:D8:66:2F:F3:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/5fe3bef8-a13c-3278-a87a-c33da07be774.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.99.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:73:ef:7e:a5:2b:de:23:84:be:3f:e0:b0:da:36:f1:ed:7d:
         28:5e:c4:4f:6f:22:b1:c0:a7:84:3b:39:d0:69:ff:07:e4:7e:
         83:01:e5:35:10:09:4e:09:e2:39:35:00:2d:f3:48:5c:6e:52:
         e9:cf:05:25:ba:2d:0e:05:eb:ff:98:c4:58:d7:5b:0b:14:48:
         e4:2c:2a:1d:70:5d:d0:e5:b5:e2:4b:33:9c:7e:21:fd:0a:2d:
         19:05:cf:95:6a:11:9e:c4:a4:19:a4:29:10:4b:71:4f:25:44:
         9c:be:ff:01:25:fb:4d:7d:f6:b9:89:b1:da:86:7c:f5:7c:b9:
         70:62:68:28:39:94:34:47:a3:12:69:45:e1:c4:1c:7b:65:f2:
         55:3b:56:9f:5d:06:54:11:fc:b1:ad:8a:05:c0:72:f7:78:5c:
         df:75:40:44:1a:c1:b7:8a:6c:f5:d5:74:7e:30:82:d7:24:8d:
         6b:0e:1e:d3:78:f8:a5:8d:3a:24:fb:1a:b5:ff:06:8f:60:93:
         39:99:01:53:73:e0:d1:9e:27:9e:5d:89:65:d2:71:c5:e4:67:
         52:10:81:70:4b:85:a6:da:21:e0:b8:b9:f3:20:22:19:b2:62:
         ba:e0:78:63:99:63:6b:a2:53:1e:43:bc:b8:ea:40:b2:99:be:
         4c:f5:49:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:14:48 2025 by rpki-client