Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
File:                     b8b1380b-8b04-35d1-aadf-93dea95122c5.roa (raw, json)
Hash identifier:          sRFkMnJtt9cjlhK6NifT1I2oGOFV1XRXtMYTnj/KGlo=
Subject key identifier:   6A:F7:0C:6F:B6:EA:1D:85:47:F0:6D:C7:95:C4:5D:01:31:1B:D1:96
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584B5571DFEB0360F8B811D94480
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     11090
IP address blocks:        64.127.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:df:eb:03:60:f8:b8:11:d9:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=53524b1c-7359-4195-bf60-c08ec57c4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c6:76:b9:91:95:50:ee:70:13:2b:9e:6a:3b:
                    17:d9:11:6c:76:ab:bd:eb:ba:59:64:01:c3:e2:59:
                    be:09:74:be:63:c2:d6:e9:f5:a7:95:46:90:72:7f:
                    20:62:10:32:ad:8f:c4:b5:98:97:6f:f1:d7:f3:99:
                    ca:f5:87:2f:ed:84:4f:c7:4c:25:39:63:4e:6e:88:
                    f0:fb:71:99:96:6a:f3:9e:c6:e7:44:fa:5a:b2:8b:
                    bf:c3:05:7f:cf:0e:4c:43:f3:96:30:8d:f0:23:20:
                    77:4b:10:8a:97:ff:e6:87:c6:5a:98:a6:bc:a7:e3:
                    de:79:fe:9e:8a:f5:35:6b:e4:da:a5:d3:b0:16:79:
                    a9:5e:fa:e3:a4:89:86:d4:32:4a:c1:cf:ac:a2:f1:
                    b5:40:f1:6d:6e:91:1f:2f:ab:5b:66:4d:01:4b:85:
                    96:db:2d:5e:98:f3:1f:9d:1b:d0:f4:72:67:f6:f8:
                    2c:be:b1:6a:c8:a0:f1:68:1f:91:ac:49:7d:c4:df:
                    b9:fe:76:f0:14:96:c3:2b:0f:37:98:5d:7a:ea:78:
                    23:8d:ea:a5:71:1e:67:b7:85:80:2b:79:96:5d:15:
                    2f:dc:07:1d:6f:ed:7d:fa:42:c5:aa:74:ed:84:a0:
                    f6:bd:70:64:cf:2a:5b:3c:d9:a4:ca:92:0b:17:75:
                    f9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F7:0C:6F:B6:EA:1D:85:47:F0:6D:C7:95:C4:5D:01:31:1B:D1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:06:cc:f9:4d:d0:64:e7:bc:71:47:92:26:e7:26:0e:ff:
         d2:a9:ea:56:10:16:73:a7:bd:47:11:f6:f5:7c:7a:c1:d0:0e:
         f8:78:a8:c2:10:2d:c3:58:0c:df:27:0e:76:ea:58:5d:52:af:
         d8:61:d3:66:56:83:26:04:73:fd:2d:26:dd:8b:13:61:8b:f4:
         69:51:a3:d6:1a:ba:cf:ae:91:58:d2:c5:83:52:42:98:02:47:
         be:48:7f:78:64:0f:db:b8:93:d4:28:c6:00:7a:72:d9:69:58:
         51:0e:2d:b2:75:30:b9:b8:a2:05:16:c9:c4:95:14:0f:cb:7c:
         26:dc:f7:9c:1d:fb:bc:b9:40:ed:ff:38:3b:8b:67:ea:69:8b:
         24:20:73:3a:1e:76:62:44:a3:42:38:49:80:31:7d:fe:9d:76:
         c2:68:74:ea:6b:42:d4:e6:76:15:b5:ed:b8:16:0a:1e:eb:28:
         35:27:6e:68:8c:69:44:d1:1f:b7:c8:19:5b:2f:63:51:cc:ae:
         54:7b:bf:82:1c:d4:98:d5:31:57:53:e0:cf:48:97:bd:6e:4d:
         4b:d2:e0:7c:94:06:0f:cb:6b:eb:84:a6:54:bd:bb:5f:9f:49:
         e7:42:22:48:7a:69:f8:1e:16:07:30:bf:3c:77:6d:7c:37:af:
         86:46:ba:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:01:08 2025 by rpki-client