Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa
File:                     ea5a2c00-9921-30a7-9f68-189974168bf4.roa (raw, json)
Hash identifier:          M+mUbWxow70GapWGhRmxEohXBVRsX+PGgUk7UthIpCI=
Subject key identifier:   A1:DB:2A:3D:AF:19:2A:7A:E3:BA:2A:5B:79:6C:CF:DC:44:20:E5:7E
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC5138591E84916E9EC800
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        64.226.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:51:38:59:1e:84:91:6e:9e:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=077415bf-4fa4-4048-a598-47d85d227b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:68:fc:52:15:d5:5c:40:7d:d5:d9:33:97:
                    68:67:37:7e:d3:8a:a5:90:45:e2:a0:e5:3a:b2:5c:
                    33:e6:bd:b1:d5:a5:ab:92:f6:63:d2:19:fc:60:7c:
                    f3:1e:dc:0c:ac:38:7a:dc:2f:2a:ea:ee:35:c4:7c:
                    ed:27:5e:16:72:55:86:c1:1f:78:50:5f:38:74:4c:
                    eb:a4:c5:13:81:76:77:5b:2c:27:50:19:e3:ab:6b:
                    25:d3:47:ec:cd:db:f0:25:55:47:2b:3a:52:9b:55:
                    fe:20:10:26:b3:77:73:1e:74:b4:4f:e1:58:cb:a5:
                    53:ea:53:6e:ba:cf:e6:a6:ad:a6:28:87:40:94:e3:
                    ea:57:29:0a:5e:23:73:d2:5b:ba:e8:ae:c1:db:d9:
                    f0:77:1e:1b:7b:33:a8:34:34:63:61:4f:9f:a0:62:
                    3d:eb:1c:06:b7:59:db:58:70:d8:6a:2b:9e:1a:8c:
                    66:3a:21:59:03:71:09:e3:de:c4:1a:e4:34:af:32:
                    45:69:4a:f8:97:bf:9f:78:48:3e:e5:d7:46:19:5f:
                    2c:b4:12:94:28:47:e8:1f:1a:84:d6:83:78:89:23:
                    70:a9:09:64:47:3b:43:32:6c:4a:55:71:07:aa:9c:
                    d4:3b:3e:e4:9d:78:5f:5c:05:14:c6:c2:03:4a:94:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DB:2A:3D:AF:19:2A:7A:E3:BA:2A:5B:79:6C:CF:DC:44:20:E5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ea5a2c00-9921-30a7-9f68-189974168bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:e6:9b:9b:35:9a:78:89:a0:39:64:7e:95:5f:41:02:0c:be:
         7d:ad:27:4d:d4:44:ab:a8:3f:16:72:1c:26:2f:86:2f:44:40:
         a0:f2:98:28:9b:6c:88:6a:e5:24:e3:e8:5d:16:b0:ce:e3:6e:
         66:27:02:12:17:9b:ff:c2:8f:5e:46:52:0f:d5:dd:01:02:a0:
         78:21:a9:44:e3:69:8d:3a:7c:66:10:2a:13:e7:c0:5d:f9:6b:
         e6:38:13:7b:b8:dc:a9:bb:a4:44:4e:56:a6:2d:9e:67:56:06:
         24:76:29:7a:2a:1e:9a:bf:52:6b:10:d0:83:c9:1c:9f:60:9c:
         fd:36:1f:1a:f5:ff:62:18:b7:42:72:4e:0c:cc:5f:02:91:79:
         7f:bb:9e:0f:12:79:27:b7:ac:da:30:38:47:d2:7e:b7:c1:1a:
         35:02:e7:15:8c:70:b1:c3:6f:38:57:24:9f:fe:68:18:74:0b:
         a7:84:92:7b:0a:cd:f4:ff:25:96:a1:84:98:44:c3:95:2c:54:
         f7:7f:fc:3c:34:e2:66:3a:e7:25:f8:41:e9:0e:b2:0a:57:bd:
         67:0a:6f:bd:be:a5:16:6d:04:8d:4d:a4:1e:fd:bd:d8:33:f6:
         7f:cb:e6:de:7c:ff:50:d2:9f:2c:a3:c1:57:1d:e0:36:2b:06:
         a2:93:e0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:08 2025 by rpki-client