Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
File:                     600796a1-ad56-3f64-a245-134764ba9e7c.roa (raw, json)
Hash identifier:          cvcWZfKBzfNFQXTzHXdPqGbbkDGOZ8zxcMQmuRXhUuQ=
Subject key identifier:   94:67:B1:AC:0B:6C:F8:6C:4B:AF:D6:23:60:6A:EC:16:4C:79:24:E1
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797D8BA21906BCA8BA31FE0
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d8:ba:21:90:6b:ca:8b:a3:1f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=0cb1eece-b207-4211-afad-8c24ead53aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:97:8b:b9:d1:a1:da:22:61:b2:2b:45:48:91:
                    70:b3:5a:27:e3:91:8f:b8:7a:b0:c3:a3:80:d2:1b:
                    5f:04:1c:f8:2b:e4:6f:ff:7e:4a:a8:9a:b5:e9:83:
                    5e:f1:f6:42:0c:b1:a6:e7:b1:e7:4b:d8:fc:c2:3f:
                    8d:4b:26:31:c4:fa:d1:ce:13:65:d2:ab:a4:9b:07:
                    86:04:d5:40:20:7b:1e:9a:8c:54:ad:37:02:13:e2:
                    11:c6:27:d7:49:5b:0a:d1:f4:2b:7f:6d:9e:b3:62:
                    cb:bc:56:db:41:25:0d:5f:0c:18:23:ec:18:62:5a:
                    42:91:4d:68:a5:c3:1f:28:2a:d8:f8:52:67:ff:cf:
                    0b:ac:02:1b:6a:ad:21:38:fd:8e:40:f7:73:78:a3:
                    a8:d3:be:d6:74:52:00:43:ca:96:dc:7f:cd:d9:b8:
                    e3:88:e7:a3:17:8d:62:3c:50:2a:29:e4:98:24:48:
                    bc:fc:e8:c7:b7:ea:72:b4:5f:be:9e:a2:8c:aa:ca:
                    68:6b:8e:1d:fd:7b:85:af:e1:17:02:e7:99:3b:9b:
                    ef:6d:27:53:40:ea:0d:d8:94:ae:21:4c:bb:dd:21:
                    d1:cb:bb:ca:28:82:44:f8:8c:07:65:36:bf:0c:08:
                    e0:58:05:66:2e:6a:6c:8f:d9:2e:55:ee:86:37:f3:
                    0e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:67:B1:AC:0B:6C:F8:6C:4B:AF:D6:23:60:6A:EC:16:4C:79:24:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/600796a1-ad56-3f64-a245-134764ba9e7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:20:37:62:85:8c:d4:d1:e4:60:84:2c:45:29:2b:71:67:ae:
         f0:4c:d3:40:65:ba:bf:a6:19:01:35:86:4c:69:53:e4:ff:ee:
         c3:99:7c:8b:93:6b:aa:e6:c9:13:5a:e6:b3:ba:44:53:18:12:
         98:80:97:7b:11:a5:1e:83:79:50:15:43:44:db:ee:60:f9:37:
         62:eb:c0:0f:43:ec:37:ec:dc:00:cd:95:33:c7:cb:5b:d8:65:
         ec:64:80:1a:e4:1c:50:d0:ab:1c:d6:58:e6:ec:87:04:5f:3f:
         5d:0e:4b:2f:4c:6f:a9:bb:91:ab:29:23:27:c0:03:ed:ce:60:
         e4:16:c6:44:cc:5b:06:7d:6b:73:74:78:1c:5e:78:09:7c:f9:
         90:94:76:e5:ed:c2:47:7b:44:99:9f:50:59:c6:c3:bb:84:93:
         04:e9:a6:2d:3c:2d:41:d8:61:d2:43:3e:4d:5c:cb:4f:9a:35:
         a1:89:f6:16:54:79:f2:4c:04:de:df:7f:ba:a4:e8:51:42:1d:
         fd:30:26:46:15:df:e4:7e:02:0a:e1:28:1e:9d:4f:9d:d2:b3:
         a3:9a:94:43:9a:77:30:f8:d3:40:71:aa:5e:6d:ed:e8:bb:9c:
         dc:98:5e:66:7f:fc:8f:f8:bf:b8:e8:32:87:d4:61:81:f4:d5:
         b5:37:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:31:36 2025 by rpki-client