Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa
File:                     d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa (raw, json)
Hash identifier:          KGAsSbcKVgfp39jRRYc0jldlV99hZHannqgh+sugk58=
Subject key identifier:   F5:47:26:38:06:85:0E:23:DE:63:92:6F:0E:73:6B:B3:2F:37:F2:30
Certificate issuer:       /CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
Certificate serial:       010D0C9F4328584B1C36C8201EF620B1255CA840
Authority key identifier: 3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        64.7.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c8:20:1e:f6:20:b1:25:5c:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=95955cd9-422e-4c78-92b0-d0a4032ed619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:70:7d:df:d5:cf:32:57:6b:3d:38:22:bb:
                    cf:31:a6:1a:f1:2f:b4:ee:f0:f0:8d:54:b1:84:27:
                    88:f8:13:13:d1:dc:6e:2b:d0:56:9f:2c:4e:6f:b2:
                    a4:1f:4f:64:4c:0e:a0:2a:d7:3c:f0:f8:dc:dd:de:
                    42:7c:61:0a:cb:e9:43:a1:46:f7:50:4d:95:17:c8:
                    c6:f3:f3:14:65:43:60:66:05:8b:44:b0:07:9c:88:
                    43:d1:ed:dd:3e:36:a1:f9:99:ca:ea:b2:27:22:cf:
                    72:5e:12:fc:9a:48:bd:74:a7:5d:95:90:5e:01:17:
                    13:24:08:41:59:06:10:51:5b:f6:b3:4d:c3:50:26:
                    14:6c:f6:88:29:6d:5f:df:31:55:d5:63:84:e8:89:
                    f0:0e:96:82:3f:c2:d5:64:30:75:6b:2e:cd:0a:36:
                    70:d8:5e:b9:b8:5d:88:04:35:d1:dc:4d:20:6d:0d:
                    6b:90:49:cb:e4:74:5b:f1:07:dd:bc:d3:84:a2:bd:
                    dd:b4:f0:e5:f5:f6:e3:13:0f:3c:cf:c9:0f:fa:13:
                    6a:c1:6c:7c:28:81:f2:ec:ee:21:6a:f3:ae:b6:cc:
                    fd:23:16:e6:28:67:64:c4:df:ee:75:01:9d:2d:e9:
                    8e:f4:5f:6a:40:71:64:c7:0a:75:59:5c:a0:b1:dd:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:47:26:38:06:85:0E:23:DE:63:92:6F:0E:73:6B:B3:2F:37:F2:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/d1384c00-6932-3116-92cd-2f77a5f3f0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D5:F6:9C:53:A0:E3:B6:D7:3D:02:30:B4:E1:2D:03:28:6C:30:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/67c8e1a2-6955-45aa-bd58-c2ec26e8e5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.7.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:3e:5a:d2:20:9f:04:dd:7d:48:56:3a:7a:17:fd:cd:5c:
         23:31:0d:80:14:cd:c9:6b:e6:16:32:2c:06:27:d1:d4:b9:0a:
         00:ae:b8:a8:3e:3f:aa:36:95:74:b1:65:e5:ca:c9:69:87:75:
         e6:36:52:41:0f:9d:25:61:68:18:a4:d3:02:9c:94:81:1d:82:
         e8:13:07:4b:41:5d:52:c7:29:ff:c5:b5:b1:88:16:08:7f:3e:
         5f:b8:90:60:e6:fb:ee:cf:41:8c:b7:9f:b9:93:3f:3d:78:fa:
         d6:0a:1d:08:d1:60:3b:e0:0e:48:8b:2d:46:73:2e:eb:90:42:
         f6:9b:34:bc:e9:99:bd:17:c3:21:52:c6:74:96:57:0f:3d:5c:
         6e:8a:05:58:06:d1:fe:89:25:65:9a:8c:9d:09:0d:12:c8:0b:
         6c:b5:dc:a1:45:60:cf:a9:81:89:bf:41:51:f4:52:92:83:a0:
         be:ca:08:48:76:8f:cd:7a:45:5b:42:a8:72:d8:60:da:3e:d8:
         f3:b8:d5:a3:05:d5:88:c2:20:22:96:36:94:27:49:4c:7d:03:
         b9:97:dd:13:be:b5:48:a1:52:b1:3e:70:0c:e4:2a:1a:a8:db:
         61:85:4d:13:a1:0b:4e:73:c1:fd:fe:38:99:7f:46:9a:40:21:
         09:ac:5e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:58:39 2025 by rpki-client