Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa
File:                     91d96eca-aa01-3090-9aa3-e2154462c824.roa (raw, json)
Hash identifier:          7IfdK7j3DxiGMV6aV6tPX834d3fB++7vUGs1SD0moh0=
Subject key identifier:   FF:BA:3A:94:CF:AD:E0:62:76:3A:8D:5E:00:D6:81:B0:8B:47:F5:C7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D953FBC63575912271C0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        64.114.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d9:53:fb:c6:35:75:91:22:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=81c641af-e334-44e0-8fe5-34c3a5a6246f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:c7:0f:3d:56:c1:f3:b7:56:99:f7:c7:3a:
                    f7:12:4a:c3:4a:2c:48:a6:63:b0:da:e2:2e:ee:1e:
                    0d:d8:80:88:f9:47:fd:ce:02:9f:2a:81:fc:45:4f:
                    da:4e:cb:2f:51:f9:3f:61:44:95:51:81:9f:7e:99:
                    2f:d3:d7:f9:b6:31:f6:c7:d8:6f:a1:0b:c7:a9:c0:
                    23:f4:14:04:68:e1:c8:24:2c:46:fc:6b:be:ce:8f:
                    7a:a2:17:97:ac:aa:00:b4:0f:b6:41:33:1e:22:01:
                    38:60:19:00:ee:7d:d7:ab:8d:c8:86:a3:45:32:af:
                    4d:88:70:93:f5:78:a3:56:9b:8b:2c:45:69:7a:19:
                    e2:30:0f:1a:1d:04:97:98:b2:f2:d1:4f:6f:e7:9a:
                    f4:2c:52:47:fc:ef:e2:fb:01:37:3d:57:15:c8:85:
                    46:c3:19:3b:c8:8c:dd:4a:44:f1:2d:3e:62:64:7c:
                    c0:14:d1:79:51:39:50:9c:cd:e5:02:ed:30:20:55:
                    fc:92:bc:46:eb:b7:a1:a9:62:f4:51:ce:f1:93:31:
                    53:e2:a5:a5:a6:3d:48:6a:47:3a:f0:4c:7b:27:66:
                    8e:b6:a1:a0:ba:ca:f8:4d:1c:1a:cf:6c:64:05:ae:
                    47:a8:f3:a5:dd:eb:c7:15:27:f7:c2:38:35:9d:85:
                    30:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:3A:94:CF:AD:E0:62:76:3A:8D:5E:00:D6:81:B0:8B:47:F5:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/91d96eca-aa01-3090-9aa3-e2154462c824.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6b:9e:d6:c2:c3:42:02:9d:9a:d6:7b:92:fe:99:21:b5:24:
         d8:0d:15:21:3e:00:cf:df:61:64:66:d1:e1:fe:18:9f:b1:67:
         af:c3:73:8c:82:2b:4b:2d:35:af:b4:90:b8:26:ac:6c:57:b9:
         b8:8d:00:40:c7:69:0a:17:ad:54:07:18:de:0c:23:47:1c:3c:
         2f:3c:d5:19:9e:b3:82:36:c0:ed:1a:d8:34:1a:29:f6:ca:e7:
         87:14:05:42:6e:ee:f8:86:40:c5:65:60:43:dd:e6:35:1f:5d:
         1e:80:b0:47:ac:a6:ec:3b:61:db:cb:cf:b3:65:04:f1:16:82:
         5c:73:c8:66:ac:dc:a1:6b:63:80:b7:00:e9:d5:8f:c7:51:d0:
         02:97:ab:8a:44:00:98:84:93:83:cf:fb:17:46:91:bd:48:ce:
         0d:71:c5:31:95:83:d1:f9:c3:67:c1:fe:1c:ee:4b:d5:df:61:
         5a:34:e5:c8:4e:00:2e:75:f3:8f:f9:1b:a4:5e:17:02:57:86:
         26:35:f8:8f:6b:ad:7e:a6:1a:b4:c8:08:2c:ec:4c:4b:4a:09:
         a4:a4:23:91:7a:fd:f8:0e:f3:00:64:9b:99:96:32:ef:f0:27:
         8b:b1:99:61:1d:60:fc:04:ef:d2:c5:28:59:f1:6d:79:7c:22:
         91:09:da:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:14 2025 by rpki-client