Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa
File:                     85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa (raw, json)
Hash identifier:          T3ovgJQ4BO9YnhxOrGxAjKRZYswUJxV2q+kvDUzIhjs=
Subject key identifier:   BC:20:05:0C:9F:CF:3C:EF:8D:AA:C6:42:13:5D:92:33:A8:F5:35:16
Certificate issuer:       /CN=cb444bd8-be6d-4853-a460-b577b6f84b65
Certificate serial:       010D0C9F4328584B609C93E4118583139432E600
Authority key identifier: 2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     213122
IP address blocks:        64.112.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:93:e4:11:85:83:13:94:32:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb444bd8-be6d-4853-a460-b577b6f84b65
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=b9a006f4-f540-4434-864d-6ba34a01aec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:54:1a:ad:81:47:0b:61:81:fd:9b:4e:98:5c:
                    29:5c:0d:46:29:b3:2f:0f:97:10:fc:44:ff:89:6e:
                    39:ed:d4:38:8a:4a:55:7e:d3:6b:67:bd:30:e3:8a:
                    1c:99:51:12:47:e7:07:1e:14:99:f9:15:c0:c4:76:
                    44:48:02:0c:51:de:2b:ad:04:e8:34:33:53:4e:39:
                    5f:75:94:4a:ae:73:b5:5f:42:87:89:52:15:6e:65:
                    99:c1:cd:7a:aa:0d:88:36:9c:ff:e6:c6:77:5e:e3:
                    e3:94:3d:ab:28:e6:cc:29:46:da:86:e9:13:07:f4:
                    7b:8a:d2:82:cd:22:c2:8a:a0:ad:30:0b:7d:81:a7:
                    fc:cb:c5:ab:7f:0c:ac:39:43:00:53:01:c6:51:19:
                    52:0d:45:c7:01:26:fb:a4:38:4a:28:92:a7:5f:ed:
                    b4:d7:68:e3:0f:da:3f:5b:df:e4:10:8c:ef:b0:3d:
                    34:ff:93:74:c8:f2:6c:20:ef:df:41:fa:8d:ec:d9:
                    0d:f6:d4:ff:0c:9e:3e:be:43:e6:6f:76:b2:7c:2b:
                    e8:85:b0:49:33:aa:7c:04:47:90:1d:2a:3e:a8:d7:
                    cb:78:3b:7a:40:a3:f8:1c:bf:70:36:df:40:7f:be:
                    f6:8c:75:ed:30:a7:c4:f8:32:24:25:ea:d2:c4:05:
                    06:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:20:05:0C:9F:CF:3C:EF:8D:AA:C6:42:13:5D:92:33:A8:F5:35:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/85bfc13b-5ca6-3582-84ef-09bdb9bfc4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65/cb444bd8-be6d-4853-a460-b577b6f84b65.crl

            X509v3 Authority Key Identifier:
                keyid:2D:A1:B0:8C:36:6A:A7:0F:6E:A9:91:B2:BB:47:5E:CD:7E:D7:58:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cb444bd8-be6d-4853-a460-b577b6f84b65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:dd:40:34:11:de:4b:ec:42:3c:56:61:b8:45:7f:1e:0a:7f:
         1b:d0:36:cd:31:b4:14:59:4a:8f:78:cf:d5:d9:dc:46:93:0e:
         6d:bd:49:ba:97:9a:d6:50:08:27:b3:dc:32:17:30:4a:f3:fd:
         60:3f:97:00:ac:b4:36:43:13:e8:52:ab:1a:e8:7a:f6:c1:30:
         ee:36:19:0f:06:16:89:dc:44:7f:ff:d6:de:fe:1e:16:30:8d:
         e3:e3:54:f9:f0:37:c2:37:55:93:94:22:c3:22:2d:ee:22:de:
         dd:95:88:61:ae:8d:a0:04:24:7c:2a:46:a6:8c:02:0e:bc:b0:
         2a:9f:90:be:c0:cc:26:82:d2:17:15:0a:41:41:19:ed:3b:64:
         56:ec:03:2a:aa:70:3c:62:64:3d:5f:74:21:55:1a:02:a5:7e:
         3e:bc:0d:a5:4f:d1:d0:b2:ed:6a:1d:e5:b5:d1:d9:0d:01:fd:
         88:b2:ac:70:ae:6b:b2:7f:bd:f5:a2:7e:d3:73:9e:d9:f2:91:
         aa:79:98:af:42:60:cf:53:a8:a3:f7:e1:7e:d0:eb:9c:05:a7:
         5c:56:3f:9e:63:3f:06:2c:83:43:14:59:da:0a:ff:a1:80:e1:
         b7:df:6b:c6:db:f8:d5:f8:2c:7f:cd:8a:08:94:b8:5f:43:d4:
         e6:c3:bb:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:03 2025 by rpki-client