Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0317a55b-cd51-3982-ae2c-bc854b49a05f.roa
File:                     0317a55b-cd51-3982-ae2c-bc854b49a05f.roa (raw, json)
Hash identifier:          zR/J2I0SKVu4PfEU7srZMaNQse4YaIJXNGaGPkjszJA=
Subject key identifier:   93:03:8B:F7:17:F1:07:2A:D9:C9:A7:BE:CA:DA:0B:15:C8:2D:4B:D0
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584B7F52134B230FA0102E7E9200
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0317a55b-cd51-3982-ae2c-bc854b49a05f.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     397041
IP address blocks:        64.112.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:13:4b:23:0f:a0:10:2e:7e:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=c746c267-6672-4e72-876a-ed81b4bbdae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:01:82:e0:24:47:18:ab:26:8f:f6:f0:26:
                    48:bd:7d:56:7b:1d:50:5c:6b:7d:c9:08:cb:ed:8d:
                    87:e5:65:35:7e:3c:45:eb:54:c7:b5:b0:98:5e:19:
                    7a:13:37:c7:fb:d5:ce:50:0c:87:76:07:48:ad:e2:
                    13:92:30:37:1b:11:62:69:04:a2:d7:39:0e:9f:fa:
                    f6:6f:4d:82:1c:6b:e9:1b:64:f1:d9:8f:27:77:dd:
                    57:ab:f4:8a:e9:96:10:18:33:f0:12:c1:bc:db:9e:
                    c0:ab:3d:38:4a:02:ea:2c:dc:29:7d:95:98:2e:03:
                    be:05:96:d5:8b:92:36:a9:e6:b4:0b:f9:7e:81:fb:
                    7f:b1:34:5b:4c:19:c8:00:43:e0:40:78:7c:5b:47:
                    cd:91:dd:96:23:0a:31:dc:49:e5:bd:ad:76:da:ec:
                    10:9b:2a:f1:15:f0:b3:08:ce:28:0f:8c:07:4d:37:
                    aa:cf:70:77:7a:88:ac:4a:d8:ec:7a:5f:d8:da:92:
                    b9:b1:e1:b7:c9:22:79:77:79:b6:f2:87:7d:61:6d:
                    52:be:da:a8:11:24:fc:0c:79:c8:91:97:be:44:6c:
                    30:84:d5:19:8e:3d:e1:6b:b5:4c:45:43:13:b4:af:
                    90:a1:94:23:02:fb:2a:30:d8:66:48:56:d4:f5:eb:
                    e6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:8B:F7:17:F1:07:2A:D9:C9:A7:BE:CA:DA:0B:15:C8:2D:4B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/0317a55b-cd51-3982-ae2c-bc854b49a05f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:8c:fd:2d:2a:11:9c:66:83:b1:6e:f8:f9:09:5a:31:c5:
         05:58:42:0d:59:dc:43:dc:f5:5c:b1:a9:92:bd:7d:0b:bd:d2:
         a1:5a:9b:aa:0d:d2:3b:c8:a8:72:c4:8e:c5:1e:e3:49:54:93:
         35:86:f5:b7:38:99:f5:d3:2f:87:bc:1c:ba:dd:e0:3e:d6:2e:
         66:38:46:c0:57:ea:eb:17:b8:4c:9c:24:91:03:b6:bd:b2:d4:
         08:a9:be:90:8e:10:09:64:df:66:f0:b3:03:41:0b:25:02:17:
         77:bc:b1:e9:75:fc:62:ff:5d:5a:71:89:83:c6:61:f5:c1:cd:
         c3:43:c0:7b:84:b1:72:02:8b:41:1e:ec:17:ec:27:45:a3:c5:
         15:7c:c1:b1:d2:f9:7c:8d:0d:dd:e1:b3:18:5f:05:60:87:91:
         4c:61:58:0c:de:52:67:cb:9d:2b:49:32:bf:b3:9c:48:09:27:
         46:88:f8:33:d0:2b:6a:99:37:50:11:4f:2c:48:64:14:fa:26:
         dc:8d:35:de:34:b3:72:92:cd:0d:b3:d2:2b:94:29:59:c3:f0:
         da:76:c0:e0:3c:6b:be:b6:a4:21:1a:6a:7d:df:34:a2:53:c8:
         26:7f:8d:c5:33:ea:2c:e6:b8:fc:d3:d1:a9:66:38:8b:c3:de:
         67:17:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:03:11 2025 by rpki-client