Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa
File:                     8bff03f9-a167-3414-b274-a9724bc100f7.roa (raw, json)
Hash identifier:          YBMbZnGSw2rjw63a7CFer1D86JzNFLNJkMBAZdOEbgo=
Subject key identifier:   80:41:FA:FA:7E:63:56:BC:6F:45:E0:C5:7F:23:B2:E6:F4:41:78:E8
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584B6D2C994DE80A6F0A79767700
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     33185
IP address blocks:        64.112.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:99:4d:e8:0a:6f:0a:79:76:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=0d3a0c1d-3f47-4221-8178-3d29d0a666cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:bd:1e:a9:d5:69:e2:fb:bf:74:f7:8b:6a:
                    d4:cd:e7:24:58:3d:1d:44:fe:e9:c5:ef:57:b7:91:
                    43:ac:f5:ab:c0:72:4d:fc:a2:bc:11:02:bd:b4:69:
                    ea:18:df:99:3f:94:b2:54:96:8a:db:7d:06:c7:93:
                    b7:16:41:09:c5:be:18:b7:97:4d:4e:f0:d1:3e:fe:
                    8f:e5:13:e5:36:13:09:1a:a9:81:53:8c:3e:87:47:
                    3b:4f:8b:02:6e:53:ea:09:57:7a:69:cb:71:15:06:
                    15:93:9d:90:7d:1a:96:3a:85:aa:8d:fe:3d:37:93:
                    8f:ec:24:12:4c:97:06:c6:a4:c3:2d:8f:24:6a:10:
                    6a:ba:7a:aa:af:4c:0c:8e:24:ae:13:0d:94:7d:ab:
                    29:38:64:38:dd:e2:7d:2c:c7:eb:0e:d7:8b:81:2c:
                    c8:75:eb:53:9f:07:06:00:01:55:6a:b8:3e:09:af:
                    f6:0f:65:36:62:8b:c8:49:d6:4f:3f:7c:32:af:30:
                    99:ea:a3:e8:a0:cf:12:72:f3:d1:c8:9d:51:66:8b:
                    9e:11:f5:16:d1:4e:66:01:ad:db:6e:8f:4c:66:97:
                    3d:a8:c0:1d:89:e4:55:a7:fa:da:c0:d0:33:ad:29:
                    41:5a:99:fa:f5:a8:00:4a:0e:eb:0b:1d:5a:5d:bb:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:41:FA:FA:7E:63:56:BC:6F:45:E0:C5:7F:23:B2:E6:F4:41:78:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/8bff03f9-a167-3414-b274-a9724bc100f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:29:81:df:f4:c3:f4:54:84:a8:c1:dd:81:8f:9d:6b:03:91:
         61:e9:ad:2e:96:60:73:ba:bc:94:65:b1:47:d3:9a:1d:12:20:
         f6:b5:44:f9:2e:33:e8:0d:be:5e:db:69:98:86:0d:eb:10:6a:
         5a:34:92:55:f6:82:04:26:08:39:a1:0c:0a:25:f5:a2:53:9f:
         0e:2e:a1:01:75:72:f7:c2:1e:fc:0b:61:b5:70:76:f1:f6:0e:
         57:5b:15:d1:d5:e3:1d:e3:34:26:44:00:19:a3:44:82:d1:85:
         09:47:13:f2:e7:2f:2b:13:94:0f:e8:b8:10:d6:47:36:3a:ad:
         b4:57:e5:e4:cf:75:1d:dd:95:4a:e5:0e:74:ac:89:c0:a5:a6:
         78:9d:a6:21:d0:97:4f:6b:de:97:28:d3:bf:b1:be:b4:a5:fb:
         c6:a4:35:71:45:c6:5e:3c:a4:70:d6:75:fb:05:fb:90:64:77:
         06:a8:0f:8b:19:25:d2:a9:7b:ed:fb:33:7e:f8:0f:af:ea:e7:
         a2:6e:13:5d:a0:3e:3c:61:5a:1d:cf:71:70:94:06:77:cb:f7:
         ad:52:41:4d:a6:6d:e1:7f:e9:ba:78:1f:72:60:5e:20:db:15:
         a7:4c:d3:06:61:b9:c0:85:d0:c4:02:05:b3:94:ad:92:50:50:
         3e:d1:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:45 2025 by rpki-client