Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa
File:                     2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa (raw, json)
Hash identifier:          t8FHP3uFxjWKbdqvRYij4UEfmrIM9ZCHT/q4OnHFGlo=
Subject key identifier:   84:B2:CC:6B:89:DC:F9:2A:D9:40:65:1D:E3:05:BC:A6:4F:07:2F:22
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F4328584B8EACD9500B8EF2927C7E7900
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        64.35.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d9:50:0b:8e:f2:92:7c:7e:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=9c0b8c4e-e4cf-4cf3-98ce-93a497d4f6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a1:ca:b7:33:2f:3c:e6:a5:af:f3:7c:ff:c7:
                    8a:a8:18:3b:cc:75:9e:47:28:12:26:bc:99:49:ca:
                    dc:be:aa:55:57:05:de:6b:07:be:68:63:ca:8c:dd:
                    06:75:c4:6b:70:7a:cd:1a:24:95:8c:f2:c1:64:8a:
                    0e:3a:8e:69:13:81:5d:73:c0:42:50:ef:0d:26:d1:
                    6a:f7:77:56:5d:ca:29:a6:c4:0a:c8:28:0f:d3:cb:
                    0b:52:69:47:9a:fc:ee:94:2e:e9:fe:0b:7f:f3:1e:
                    a7:06:7a:93:e5:54:52:80:f3:bd:fb:15:bd:fa:48:
                    cf:cc:bb:fe:fe:a6:24:b0:b3:9e:e3:98:be:8a:4d:
                    f3:43:3d:9b:0f:5f:3c:7f:29:de:1c:97:33:50:0d:
                    08:9d:69:c9:99:8b:7c:da:79:a8:fc:e5:ba:eb:df:
                    6a:84:63:11:0a:db:27:c2:1c:6b:af:57:b0:68:ac:
                    68:2a:64:1c:1a:68:ac:29:09:86:69:ee:d2:d8:7c:
                    74:e6:76:74:44:b3:7d:60:38:98:88:3f:2d:38:18:
                    4c:fa:d0:92:94:1b:a4:87:ea:01:fd:6a:74:b8:69:
                    13:30:89:83:b2:ce:1f:9f:b2:75:2b:d4:fa:da:e2:
                    5d:31:f9:41:2d:54:67:0e:2d:e6:64:0e:ab:77:bd:
                    de:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B2:CC:6B:89:DC:F9:2A:D9:40:65:1D:E3:05:BC:A6:4F:07:2F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/2dde838b-f3eb-3f14-b1f3-f896bb87f20d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:13:0e:53:87:46:37:32:93:ac:5e:b3:e9:8e:03:97:cd:7b:
         7f:66:fd:ae:8f:3c:84:27:82:07:c6:7b:d0:37:21:2b:48:04:
         70:a6:1a:0f:48:5f:d6:65:70:3e:e8:62:c8:16:e8:73:de:cc:
         0f:05:83:7b:f6:31:77:6f:19:0b:cc:73:61:5a:d6:5e:db:f3:
         d8:2f:d5:61:9b:bb:b2:89:cf:8b:04:45:b4:eb:fb:36:2a:cb:
         47:0b:14:6f:08:71:d4:d5:9a:ed:7e:7c:ec:72:3d:a2:de:b8:
         86:07:23:e0:41:16:5d:16:ef:dd:fe:81:f9:3c:a9:c9:3a:c2:
         57:ed:d2:41:6e:ea:88:d0:c0:b6:02:57:f1:e1:7c:43:59:93:
         d3:09:2f:a1:8b:2c:51:97:3b:a5:73:ac:74:0d:1a:e0:c3:47:
         1a:f3:bb:96:d2:28:95:84:d5:db:cc:f0:c0:e5:08:a4:18:d0:
         91:9a:02:0e:f7:9e:2f:ef:a8:86:f5:4d:02:c8:8b:44:99:bb:
         d1:53:7c:b1:13:1f:52:bf:ac:63:89:11:09:1f:46:a6:0c:91:
         ab:00:cb:f8:78:5c:fc:d5:f8:93:9d:15:e4:df:b8:9d:1e:00:
         50:f6:3d:49:64:63:58:7f:9c:95:ff:d9:69:4f:c8:e5:c1:9f:
         66:b4:5a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:12:42 2025 by rpki-client