Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa
File:                     501204f1-9c82-36a0-9013-d5ffbfc01804.roa (raw, json)
Hash identifier:          oGaLgGS8uH5kqROBGMxVXia5lpohrjK4u7oOOgDkRVM=
Subject key identifier:   76:17:58:94:65:85:05:25:6A:D8:33:1E:45:64:93:FE:94:FB:B0:71
Certificate issuer:       /CN=c2c2b205-cbf7-456f-b185-0afd263c5276
Certificate serial:       010D0C9F4328584B742752BF9B5F9B3C09C9E0A0
Authority key identifier: D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     11620
IP address blocks:        64.57.96.0/21 maxlen: 24
                          64.57.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:52:bf:9b:5f:9b:3c:09:c9:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c2b205-cbf7-456f-b185-0afd263c5276
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=36fff547-7558-4adf-8ffb-9d22d0eb38a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:97:53:5c:73:83:ca:29:3d:93:10:3d:1c:35:
                    65:d3:90:be:5b:76:11:6d:49:b4:2f:8d:fc:54:23:
                    61:97:f9:39:c1:22:cb:0b:5a:48:d2:d7:28:4c:35:
                    42:fb:51:b2:58:13:49:b2:b5:9f:5d:d2:03:33:7d:
                    36:67:0e:cf:fb:f0:7d:13:00:c2:18:82:51:e8:26:
                    68:59:93:44:a9:cf:03:85:b5:79:19:22:6c:64:56:
                    ab:ec:d8:73:c7:5a:23:c4:6d:cd:0b:d8:de:a4:26:
                    a3:5c:71:fe:38:cb:d3:3a:84:9c:67:cd:ea:4e:8a:
                    69:89:78:2f:68:89:36:fb:21:0e:a3:c4:ca:ae:2f:
                    9e:99:f1:9f:11:e9:15:69:ae:b5:9a:31:da:20:cc:
                    2e:28:1a:06:86:28:ec:b4:8a:bb:f5:f3:e9:77:32:
                    82:5b:3f:fc:30:80:1f:ec:6a:f8:1c:0d:d6:95:d3:
                    cf:b1:3c:d4:14:d2:68:6c:5b:21:63:8c:cf:8d:33:
                    eb:c1:1c:05:1d:54:98:79:36:4f:47:29:f6:24:bb:
                    09:ad:d5:8e:61:fd:57:96:c9:5f:67:e1:d5:82:a0:
                    1d:b1:3d:2e:fa:59:86:6e:b4:93:28:93:af:87:3e:
                    6a:a8:89:cc:85:88:02:98:98:c3:46:d6:ae:ff:87:
                    71:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:17:58:94:65:85:05:25:6A:D8:33:1E:45:64:93:FE:94:FB:B0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/501204f1-9c82-36a0-9013-d5ffbfc01804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276/c2c2b205-cbf7-456f-b185-0afd263c5276.crl

            X509v3 Authority Key Identifier:
                keyid:D5:19:AE:14:CB:EC:24:6A:5B:BA:4B:E4:B7:D4:36:14:33:41:52:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c2c2b205-cbf7-456f-b185-0afd263c5276.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:d0:a3:96:4d:c4:a8:ad:ef:38:51:c6:75:70:27:ae:76:dd:
         4f:12:14:c9:71:96:a0:fb:5e:38:00:f2:67:cc:b6:5d:85:b1:
         0b:70:75:d3:a1:ef:d9:9b:ab:52:03:d9:a9:92:84:67:5a:49:
         5e:94:9a:31:37:ee:e0:d0:e5:3d:11:6b:df:9e:6f:04:b0:f4:
         e7:37:ba:10:54:0c:0c:5d:39:d7:db:c4:69:d6:a2:11:10:ca:
         5c:64:0a:5b:39:d5:07:cb:4f:46:c0:b3:a5:ad:03:13:d1:b6:
         5b:15:89:d9:c1:2c:67:a8:80:70:2d:fd:fd:4d:82:78:0f:47:
         8a:ff:38:2d:12:17:cf:cc:72:f5:74:25:3c:62:39:65:6d:1f:
         55:8e:cb:45:f3:97:7b:5f:17:97:cc:a9:bb:aa:eb:02:ab:9c:
         bd:fb:b3:09:b5:b5:b8:10:cd:12:b4:4d:7d:4f:36:17:11:bf:
         ed:3b:d9:43:4b:eb:8c:20:01:91:d2:6c:42:80:39:a9:64:09:
         d8:37:02:9d:1b:6e:24:09:91:1a:af:28:e2:8a:65:3c:de:45:
         98:39:e0:22:e4:89:d4:78:b4:82:b8:15:e0:2c:95:a7:c9:fc:
         8f:cc:98:10:ea:07:83:f3:f9:10:d8:65:61:75:62:0d:8a:d6:
         c5:90:7c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:10:25 2025 by rpki-client