Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
File:                     97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa (raw, json)
Hash identifier:          hKPP72OWxpBZ8YxGLIT5Sv5FPabJe5KO4gMcbMtpSU4=
Subject key identifier:   FB:81:89:A4:72:D7:BE:BA:4B:F9:47:1F:EC:8B:16:E2:DC:D7:0D:E5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D913757AE654D6118720
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        64.114.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d9:13:75:7a:e6:54:d6:11:87:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=1c47e86a-b0dc-4d1f-8492-76d1dbda5e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:e1:26:b0:c5:d0:64:b4:35:85:ea:7d:62:
                    09:e7:76:ff:1a:78:95:ee:bb:f2:fd:8a:2b:b6:67:
                    f2:1c:50:cc:ee:11:85:c2:8d:04:20:13:c0:a6:70:
                    c4:cd:bc:58:a1:ea:95:7c:7b:7d:23:4a:2e:6d:81:
                    60:08:bd:07:0b:c4:6a:e2:28:89:a7:b0:d1:dd:a7:
                    d7:f3:b6:f3:db:da:f9:d7:2f:15:1e:ff:4a:8c:06:
                    1f:a4:c0:e6:fd:4a:3a:b6:12:0f:ca:5d:02:d3:d0:
                    b3:4a:4e:de:ee:d9:3d:4e:4b:5b:be:5d:72:a0:dc:
                    97:99:83:ed:8b:df:85:22:06:44:84:0c:c4:b1:a1:
                    e7:51:02:40:23:fe:0a:c9:1c:2a:52:b1:96:1a:93:
                    d8:e8:16:28:bb:15:96:fe:56:27:6e:9d:8e:60:81:
                    e3:2e:6c:e3:b0:32:c4:9b:72:4c:a6:09:82:80:53:
                    20:3c:22:f2:e4:b1:91:7b:08:f7:b9:27:11:0d:55:
                    c6:f9:4e:05:af:b6:22:e3:9a:b8:f9:ff:9c:33:f8:
                    3a:ca:e5:8c:2f:7c:a3:fc:19:29:24:a4:16:e8:22:
                    f5:fc:af:c0:23:dd:0d:93:8a:50:ac:5f:c1:45:01:
                    59:71:3a:b2:69:9e:2e:24:fc:22:1f:b7:d6:96:dd:
                    35:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:89:A4:72:D7:BE:BA:4B:F9:47:1F:EC:8B:16:E2:DC:D7:0D:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/97df3f3f-a5ba-3966-a9ee-f50b9934f052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.114.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:27:a1:17:8b:e9:9f:e7:65:94:28:13:66:48:5b:bb:7a:d9:
         a8:ac:2d:64:29:ba:a8:17:b5:ce:40:ee:8e:75:cf:a1:bd:bf:
         8d:dc:d8:63:ad:e3:d5:ce:bb:ec:4c:09:1a:0f:85:28:aa:97:
         d1:13:75:e3:0a:1d:23:c0:b0:c6:9d:8b:cd:00:5b:fd:74:c7:
         e2:0d:15:59:5b:1e:fd:58:d1:96:88:2b:20:7b:19:0f:86:18:
         92:4b:16:c9:6f:62:cc:5e:68:4c:5e:79:9d:bb:35:e0:f8:31:
         72:90:8f:30:50:84:01:a4:00:6e:c9:79:3e:29:bf:28:f2:98:
         39:e6:24:2b:32:89:2e:b8:8f:4f:aa:2d:14:57:18:a8:9c:f6:
         69:6d:d1:1e:79:ec:8c:68:d1:71:b4:5d:ce:54:08:27:fc:c9:
         ad:0f:61:51:eb:f8:60:03:d1:cf:f1:12:65:b3:ea:e0:6b:43:
         76:34:0e:3c:e1:36:a8:4c:93:3f:8e:d2:92:7c:03:58:33:68:
         e0:39:96:30:05:eb:43:09:45:3a:20:07:5a:6e:6e:02:a0:99:
         f6:0e:3c:b1:67:c3:8f:71:45:3e:ff:08:ab:52:48:0e:5d:4d:
         98:5c:d5:a3:22:42:1b:13:4c:3d:d7:40:7f:0e:e7:e0:1f:84:
         5d:0f:7a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:30:49 2025 by rpki-client