Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa
File:                     cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa (raw, json)
Hash identifier:          35LZdJXrV2GK4GLEgw8XmARwEUbK2IQ8+HRw6ccN4ZQ=
Subject key identifier:   94:23:17:33:66:11:10:73:57:65:15:F5:CD:F8:DA:70:21:08:5F:E8
Certificate issuer:       /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial:       010D0C9F4328584B1AD18DED76D6C79B215F8680
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     40628
IP address blocks:        204.87.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8d:ed:76:d6:c7:9b:21:5f:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=3bc439e9-aa59-4f24-b66b-803f092cca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:d5:e8:ed:65:57:ef:e2:c3:c4:4b:61:37:
                    f4:15:87:ac:ce:e1:09:20:78:21:a6:4d:49:5f:d1:
                    de:0f:04:0b:a7:ab:24:90:e5:30:1d:c1:5f:c1:cb:
                    14:db:ec:2e:68:85:ac:0e:d5:ed:f7:70:9f:6d:f7:
                    13:6a:58:03:c6:47:17:7b:7b:c5:5d:b0:26:e4:4b:
                    3a:33:47:2f:ff:57:fb:d3:bf:f6:9a:1e:88:25:ff:
                    45:49:83:a8:fe:13:01:dd:27:da:55:b0:8d:b5:67:
                    15:75:16:79:3e:6f:b1:0d:96:5e:f4:eb:41:08:bb:
                    91:c8:6a:44:b3:d4:eb:e6:2b:b0:73:d5:e8:bb:62:
                    78:a5:88:f4:69:47:a1:33:4c:ed:8f:12:6c:e7:04:
                    a2:34:bc:5e:4c:38:18:0c:9d:a8:82:f6:3a:7c:3e:
                    dc:3f:e3:02:eb:a2:81:4f:83:85:10:b9:d4:5c:77:
                    7a:db:0d:14:52:c2:e1:37:fe:3c:4a:8d:f6:c4:cd:
                    71:26:92:7b:ae:0a:1e:e7:f9:c1:a3:bf:41:49:94:
                    2b:70:fc:69:e1:22:2c:0e:15:96:09:f7:4d:fc:6a:
                    96:47:de:65:75:ec:4d:d5:fe:09:a9:9d:dc:7c:0c:
                    3d:c3:3a:e9:93:b9:ce:85:f1:61:42:dc:43:f4:8e:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:23:17:33:66:11:10:73:57:65:15:F5:CD:F8:DA:70:21:08:5F:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/cceadf2b-0fe1-30c9-882a-958ec7249cf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl

            X509v3 Authority Key Identifier:
                keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.87.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:01:3f:cf:53:c2:fa:11:0f:a4:1d:03:52:87:0e:68:da:
         e0:a8:68:cd:6b:7b:64:d4:c1:f2:ed:16:5d:cc:6c:d0:0f:cc:
         55:f0:2b:ee:38:0d:6f:8d:05:c0:6c:67:23:b6:47:06:1d:99:
         a3:33:32:fc:71:d4:f6:61:92:22:04:fb:c0:80:d8:3b:01:26:
         54:51:e1:64:56:a2:67:81:41:de:36:c5:41:21:0d:e0:96:07:
         c4:09:c8:04:02:e1:ea:57:72:08:a5:7a:5f:95:56:9e:7a:f9:
         ea:81:7f:16:89:c7:74:08:cb:f3:78:8e:57:ba:17:36:8d:82:
         00:97:52:22:ab:19:6a:f1:d4:3f:76:f8:f2:ad:b6:b2:13:bf:
         91:aa:33:3e:9b:c5:98:50:fe:76:60:1f:af:f7:d9:37:cb:ee:
         8a:58:02:e6:33:83:00:e2:5c:0a:d5:a6:23:7e:e7:b4:44:85:
         4d:4a:7c:d5:2b:e7:08:2b:61:b8:09:c4:8d:00:a2:cd:00:59:
         66:fb:a7:a1:bc:e7:58:ed:d4:3b:3d:ae:f4:dc:c2:ba:c9:b8:
         a4:b8:40:13:68:84:5e:82:65:73:be:78:b2:2f:d2:45:74:0a:
         96:66:f8:03:11:dd:f7:80:98:45:19:ba:f4:43:a1:ca:3b:ac:
         fb:bd:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:19:02 2025 by rpki-client