Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa
File:                     bcd123dd-93ce-392d-a704-25004bdd6c55.roa (raw, json)
Hash identifier:          L6uKiSSgnohhAfiRDYAM25App4qbihWzdewzRrFhoqc=
Subject key identifier:   E0:BD:7C:14:92:13:BD:07:7D:C7:C5:B1:3C:8A:54:07:A2:F5:C4:9A
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F4328584B8EACCC6A1769D0F8201FCC80
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        64.35.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cc:6a:17:69:d0:f8:20:1f:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=7656b9cb-63b1-4d38-bb87-2025854806fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:e6:68:69:61:ca:ca:0d:18:40:68:db:fa:
                    b2:df:c3:04:0e:de:a8:e2:8f:98:48:f1:f4:34:f8:
                    f9:0f:cf:44:e0:1d:3b:18:57:dc:79:90:e7:c8:04:
                    9d:3a:9b:3f:72:70:18:74:d5:c0:78:f6:13:f3:18:
                    05:58:98:54:16:a3:53:aa:f7:6b:0c:f9:42:87:a3:
                    51:f4:43:39:10:22:81:fa:6d:ed:9c:d4:18:9a:0c:
                    02:59:a6:89:4c:41:47:09:24:de:50:df:15:d5:34:
                    05:8d:9f:f7:52:9e:7d:9d:a4:18:5f:dc:81:8d:a8:
                    b4:d5:43:52:f2:d5:fa:81:0f:be:12:7f:e4:84:0a:
                    52:79:29:00:1c:79:d1:9d:74:20:9c:bb:59:e2:08:
                    0d:1d:c5:9d:68:22:61:44:90:f7:5a:73:8f:0d:fd:
                    e6:3e:33:bc:7e:2d:34:de:0d:39:3e:91:b8:12:7b:
                    a7:eb:50:e9:72:39:9b:2b:03:9b:3a:02:61:2f:5a:
                    79:2b:24:fa:6d:7a:be:cc:f3:a7:68:a1:1f:76:a1:
                    fb:e5:9c:44:9e:28:9c:d4:13:16:66:9f:63:f4:7b:
                    f7:07:91:96:2b:17:a5:77:45:a9:3b:bc:f7:5b:8e:
                    db:f1:01:31:3f:de:3a:b5:51:d4:5b:9f:81:82:29:
                    37:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:7C:14:92:13:BD:07:7D:C7:C5:B1:3C:8A:54:07:A2:F5:C4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/bcd123dd-93ce-392d-a704-25004bdd6c55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:8e:c9:e4:e4:39:9f:f6:0f:1c:b7:d2:ac:81:12:ff:b9:25:
         c7:48:a8:5a:72:e2:58:73:54:49:c0:30:cd:c3:ae:51:b0:8c:
         7d:9d:49:a9:69:8a:d6:6d:c1:f8:47:86:60:56:e2:f0:2d:3b:
         6c:c2:d9:67:76:4c:fe:73:3d:67:03:84:e0:53:00:1e:b2:d8:
         ed:e7:05:d9:78:cb:7a:d5:b7:50:10:bb:c1:59:08:46:51:fe:
         1f:22:30:21:2a:f0:69:d4:0f:b7:fb:17:a2:cb:76:6a:2b:be:
         ba:4f:a7:f3:0b:fc:cf:9a:4b:cf:73:de:10:54:fe:94:90:2a:
         d3:bd:86:a6:1f:42:d7:fd:6f:cc:d8:c9:aa:ef:1b:79:a5:1c:
         b2:68:0b:53:11:d7:72:9f:c4:1e:12:16:22:44:e6:1d:b5:57:
         7c:77:46:c4:01:94:e4:7f:ec:33:4c:a1:fb:d3:b8:02:da:a4:
         65:5b:89:b4:7d:ba:49:71:3b:76:58:2f:e6:28:da:69:02:97:
         59:a5:07:f9:9b:b7:2d:c8:bc:1a:3e:66:df:aa:39:f3:6f:f6:
         85:fa:3b:97:41:8a:03:c9:45:a5:2f:bc:26:ff:f5:dc:5a:6a:
         1b:95:88:1d:87:10:1c:da:6b:13:6f:2b:54:15:da:18:d3:08:
         6f:b6:d9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:49 2025 by rpki-client