Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa
File:                     7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa (raw, json)
Hash identifier:          G+evo5aNSBImvZPeuUy11pNBgB92YP2SRBpIfRwFZbA=
Subject key identifier:   75:FE:8E:9A:B8:CB:7D:AA:29:26:F2:B5:6D:0B:17:25:52:15:10:98
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC51CD6ACB582DA2157580
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        64.226.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:51:cd:6a:cb:58:2d:a2:15:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=7f26b117-2a8e-41d0-aff2-730a666597a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:f9:af:21:75:9a:29:16:95:87:39:e7:e0:
                    3a:cf:2f:47:70:10:29:dd:80:b8:09:69:4c:3a:95:
                    23:dd:77:0e:f1:8b:82:d3:c8:ce:74:72:4c:5b:79:
                    a1:83:01:6c:77:91:3b:1f:4f:53:4e:c3:af:03:ab:
                    3d:d2:4b:fc:14:7f:a7:c0:3c:c1:03:e4:6c:a3:ed:
                    02:89:f5:1f:73:47:22:7d:24:bd:b2:6e:49:bb:67:
                    84:fe:ab:75:d7:51:c4:ee:29:93:33:f9:31:3f:12:
                    93:9f:c3:fe:60:70:9b:07:4c:ff:2d:8d:8e:7d:c9:
                    0b:48:39:f3:97:d3:84:5b:3a:03:40:54:40:2d:26:
                    94:da:fd:40:42:00:70:fc:36:ae:0e:92:68:da:ae:
                    50:50:ca:89:71:14:b4:c1:5c:68:f8:a4:66:59:9a:
                    e7:fe:ba:64:2d:7d:8c:dc:51:a0:0d:e7:b5:ce:44:
                    aa:03:be:6d:66:f7:8c:b8:e6:8e:7e:dc:5e:07:78:
                    8f:23:02:73:25:17:e5:9e:1b:7f:e9:64:d6:42:5b:
                    e9:d2:03:61:ba:bc:10:f4:91:fb:e8:79:7d:70:16:
                    db:17:ea:2d:4f:f3:b6:8d:f0:ba:a8:de:f3:b7:64:
                    61:59:86:89:31:65:00:24:98:31:3f:e7:9c:b4:00:
                    b4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FE:8E:9A:B8:CB:7D:AA:29:26:F2:B5:6D:0B:17:25:52:15:10:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7d1aeeda-30fd-3fde-ae05-37cbcddada46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a4:a2:38:8b:6e:16:27:b6:45:0a:a3:9f:2a:7c:da:ff:7a:
         3a:2a:23:4b:ee:46:bc:06:19:e8:9e:8c:c7:34:de:55:dd:38:
         88:3a:25:ab:2b:c7:42:40:ae:56:58:d5:9c:c7:be:02:27:c7:
         51:ae:da:e5:78:e1:71:05:6e:bc:37:f6:db:4f:1a:3d:18:f4:
         6b:6b:42:c9:59:e9:03:5b:71:f6:75:f8:34:32:9a:4d:4f:ed:
         11:1e:13:c9:52:29:ba:f9:58:70:16:18:b8:4f:41:a3:38:36:
         1d:0b:1f:99:9b:86:dd:d6:2f:9b:1f:cc:40:ae:b7:e8:51:3c:
         73:96:ea:89:ef:b4:26:ec:f3:d7:08:ef:e0:9d:d2:c0:d7:31:
         4f:e5:49:de:5d:fa:32:04:38:f1:70:45:a5:9e:8f:c9:4a:e8:
         dc:98:a5:53:f3:0c:79:53:48:99:36:3a:7e:cf:04:6c:fd:d8:
         7a:bc:b2:14:f9:06:54:e6:66:56:f7:a3:b6:39:1b:c0:e5:30:
         7e:5d:bc:98:1f:a5:b4:24:65:d3:0a:a0:19:59:44:df:dd:6b:
         e6:d2:90:4c:ba:ba:ec:8d:2c:e7:13:b1:e1:f6:a4:7a:1a:72:
         7a:52:ce:95:43:88:77:88:ef:6d:d7:ae:95:49:b0:a3:71:2a:
         fd:3c:e3:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs2vFHNastYLaIVdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDkxNjEzMDA0MVoXDTI1MTIxNTE0MDA0MVowLzEtMCsGA1UEAxMk
N2YyNmIxMTctMmE4ZS00MWQwLWFmZjItNzMwYTY2NjU5N2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikf5ryF1mikWlYc55+A6zy9HcBAp3YC4CWlM
OpUj3XcO8YuC08jOdHJMW3mhgwFsd5E7H09TTsOvA6s90kv8FH+nwDzBA+Rso+0C
ifUfc0cifSS9sm5Ju2eE/qt111HE7imTM/kxPxKTn8P+YHCbB0z/LY2OfckLSDnz
l9OEWzoDQFRALSaU2v1AQgBw/DauDpJo2q5QUMqJcRS0wVxo+KRmWZrn/rpkLX2M
3FGgDee1zkSqA75tZveMuOaOftxeB3iPIwJzJRflnht/6WTWQlvp0gNhurwQ9JH7
6Hl9cBbbF+otT/O2jfC6qN7zt2RhWYaJMWUAJJgxP+ectAC07QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHX+jpq4y32qKSbytW0LFyVSFRCYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2QxYWVlZGEtMzBmZC0z
ZmRlLWFlMDUtMzdjYmNkZGFkYTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOL+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2kojiLbhYntkUKo58qfNr/ejoqI0vuRrwGGeiejMc03lXdOIg6Jasr
x0JArlZY1ZzHvgInx1Gu2uV44XEFbrw39ttPGj0Y9GtrQslZ6QNbcfZ1+DQymk1P
7REeE8lSKbr5WHAWGLhPQaM4Nh0LH5mbht3WL5sfzECut+hRPHOW6onvtCbs89cI
7+Cd0sDXMU/lSd5d+jIEOPFwRaWej8lK6NyYpVPzDHlTSJk2On7PBGz92Hq8shT5
BlTmZlb3o7Y5G8DlMH5dvJgfpbQkZdMKoBlZRN/da+bSkEy6uuyNLOcTseH2pHoa
cnpSzpVDiHeI723XrpVJsKNxKv0848w=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:45:40 2025 by rpki-client