Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/bdd36230-4401-3e27-a636-1ff75dad6c8b.roa
File:                     bdd36230-4401-3e27-a636-1ff75dad6c8b.roa (raw, json)
Hash identifier:          NH/Se56Hc7Ho0jN5JEdckbybnQ7s4qr1rRnvCV5eou0=
Subject key identifier:   00:17:5C:C0:53:9C:8F:9D:3D:4B:7A:D5:E1:A6:0F:EF:1B:38:33:22
Certificate issuer:       /CN=b2797f94-84cd-4d6b-a254-94f6593d32af
Certificate serial:       010D0C9F4328584B76027462269F220B24360400
Authority key identifier: 6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/bdd36230-4401-3e27-a636-1ff75dad6c8b.roa
Signing time:             Thu 09 Oct 2025 04:58:02 +0000
ROA not before:           Thu 09 Oct 2025 04:58:02 +0000
ROA not after:            Wed 07 Jan 2026 05:58:02 +0000
asID:                     22079
IP address blocks:        64.186.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:02:74:62:26:9f:22:0b:24:36:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2797f94-84cd-4d6b-a254-94f6593d32af
        Validity
            Not Before: Oct  9 04:58:02 2025 GMT
            Not After : Jan  7 05:58:02 2026 GMT
        Subject: CN=40f0a6c8-e334-47ca-ae97-bc0d767fcbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:69:87:24:a4:5b:1a:ad:f8:0b:cd:98:76:
                    d1:b6:ac:82:7a:ee:cc:e4:7c:fd:ba:0a:ce:f9:36:
                    35:60:2e:bb:48:23:01:77:77:48:1a:de:7a:de:79:
                    3f:d5:c7:3f:4c:f5:e7:88:ab:ff:b7:d6:29:6b:ec:
                    ab:80:ea:35:b7:6f:55:a6:25:19:dc:68:9f:da:71:
                    b3:c9:56:42:b3:ec:ed:f6:bc:3f:7a:da:d8:69:30:
                    4b:ea:bd:21:33:3f:25:c7:82:3c:07:af:8e:65:cf:
                    0b:72:1e:08:30:17:c3:32:9d:9d:bd:3b:b1:f8:18:
                    93:ad:52:0a:19:72:ab:71:29:0b:a0:4f:ec:54:5b:
                    2b:4c:b6:cf:2a:25:35:67:ca:3d:75:b4:97:e6:87:
                    86:d5:14:1a:6d:92:a1:a9:b5:d5:43:cc:d2:d0:34:
                    fd:95:b2:7f:e3:d1:12:11:4c:1d:02:8a:0a:4c:70:
                    b9:59:db:26:03:10:22:09:fa:1f:1e:6f:6a:72:11:
                    d6:a2:f4:77:6b:07:9d:9e:ea:3d:70:a0:ba:e7:56:
                    ed:fe:6b:6f:c1:43:e1:ea:cc:8d:3e:51:6d:07:f3:
                    3a:86:34:ff:8f:1b:5b:89:67:24:61:97:38:49:85:
                    b8:0b:8f:48:22:a5:12:4b:5a:6e:03:e9:89:af:18:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:5C:C0:53:9C:8F:9D:3D:4B:7A:D5:E1:A6:0F:EF:1B:38:33:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/bdd36230-4401-3e27-a636-1ff75dad6c8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af/b2797f94-84cd-4d6b-a254-94f6593d32af.crl

            X509v3 Authority Key Identifier:
                keyid:6A:58:99:31:84:51:EC:35:05:7B:22:35:FF:70:52:EA:18:6C:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b2797f94-84cd-4d6b-a254-94f6593d32af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:73:04:21:7f:5d:42:bb:8f:b2:cf:ef:d3:51:0d:58:18:8c:
         39:3a:90:9e:03:e5:2d:a6:41:a0:8c:07:52:5d:1d:16:5f:4b:
         8f:c9:6e:06:a6:a0:84:fa:75:69:23:61:7c:a3:b2:a6:75:2d:
         80:f6:52:ad:52:ee:50:2f:e2:57:aa:35:a8:8b:1b:39:ca:70:
         35:e5:cc:52:4f:b6:9e:7b:74:0e:8c:f6:c9:27:10:70:82:7b:
         57:83:85:a8:d0:4b:1d:93:b4:50:88:ed:a0:5b:ea:bc:df:34:
         4e:27:cc:2c:ce:87:b1:31:71:f5:63:80:ba:1d:e1:c6:02:48:
         80:0b:e4:ff:12:52:e4:ef:ac:96:d0:ea:ca:fe:d1:f8:57:33:
         da:5b:6b:ae:e4:cb:bd:21:0a:e1:75:46:8f:e3:fd:09:9b:66:
         3d:7c:a8:06:e6:18:ad:ba:85:80:2a:77:7f:6e:57:3e:8d:2a:
         87:53:4d:c3:3a:28:9f:b4:f9:1c:35:a1:28:2b:bc:e9:49:a4:
         fe:35:17:af:da:eb:6d:61:d8:96:a7:54:30:2b:22:f6:23:42:
         06:02:23:dd:26:49:78:93:e8:b1:49:61:ea:e7:cd:11:76:e3:
         fa:36:c1:37:f8:46:f3:3c:17:a2:5c:ae:dd:5c:08:38:ea:7f:
         85:99:66:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:48:24 2025 by rpki-client