Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa
File:                     8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa (raw, json)
Hash identifier:          GAHGvjLq0MA3kUUPrhUodMqWYKkyx4dJUeHXIxDXWH8=
Subject key identifier:   9F:C6:60:57:0B:35:A2:F5:9E:65:F3:AB:49:5D:3B:9B:46:AE:60:11
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797D3E2583FD1DDBF886C40
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:d3:e2:58:3f:d1:dd:bf:88:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=1563415b-c662-44fd-85d0-de8ebca3b6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:40:bb:6a:7c:5d:92:e2:8c:f7:1d:ae:c5:70:
                    01:70:b8:62:66:d7:2f:72:cf:18:03:da:0f:d9:58:
                    ef:c1:8b:b3:e0:9c:e1:fd:ec:f6:fd:13:24:e8:87:
                    5f:d2:1a:ca:f4:55:b0:cc:c2:a9:b8:b5:6c:a2:5d:
                    c1:72:64:96:94:4f:f3:04:0a:cd:b4:ca:d3:16:45:
                    d5:de:b6:d7:13:73:c6:80:79:0d:1b:ab:ac:e2:41:
                    41:23:03:30:f3:17:9e:e7:77:33:04:a2:8d:03:71:
                    7f:b6:52:82:5c:4d:b6:b4:3c:ef:ba:0f:73:44:dd:
                    a5:74:56:96:d3:7e:b2:90:31:62:04:41:bb:14:bb:
                    46:06:8a:01:a8:16:76:33:e0:b0:ef:4e:fd:d4:fc:
                    23:a0:61:c0:41:ee:00:e3:ca:7b:0b:f0:8d:5a:8c:
                    df:91:32:5e:81:d8:0f:e3:af:f2:ef:55:9d:2a:d4:
                    74:e0:05:2b:1e:69:95:9a:b4:61:ad:0f:06:1e:a5:
                    c5:f0:c4:f9:ce:b3:47:45:bd:f7:15:08:3d:42:d4:
                    f6:28:37:cf:e5:22:f6:a5:9d:e6:73:88:cd:dd:78:
                    42:62:58:31:16:9c:35:f4:35:3a:cb:b5:42:08:39:
                    49:cc:d7:49:65:2e:e8:84:5c:27:46:5c:ed:fa:94:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C6:60:57:0B:35:A2:F5:9E:65:F3:AB:49:5D:3B:9B:46:AE:60:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/8e9d27a1-d5d0-35ce-aea9-0d6c7fa76f14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:91:da:35:2e:e5:8c:4a:ae:54:25:4c:e4:18:7a:03:4a:
         5f:7e:93:91:5d:50:c4:30:a0:3d:f0:a5:fe:c8:d8:df:c0:ce:
         83:fe:f4:f0:8b:a6:14:52:ee:e8:65:8c:ed:d9:3d:3d:c9:6a:
         ac:55:da:1c:2e:31:3a:17:86:ab:16:0e:1b:9d:1c:de:15:12:
         1d:3f:40:8b:6b:53:06:d4:5e:3f:0a:e7:80:07:46:50:91:42:
         fd:d2:3e:67:14:7a:83:e2:bb:8a:fc:c2:73:c3:25:9d:3c:2a:
         52:bd:56:56:9c:de:ed:c8:c7:ed:be:96:da:72:dc:9e:61:5a:
         06:8e:a3:6c:b7:ce:0f:b6:15:6c:c3:97:d2:46:5a:e0:58:7e:
         81:e1:ea:40:3d:bd:f7:db:04:83:e3:e4:16:0e:b3:58:16:85:
         6d:44:21:73:a1:83:f2:3f:cc:ae:e6:fd:cb:7f:d5:76:59:bc:
         30:91:8e:70:dc:64:94:de:55:c5:b6:0c:ef:33:2a:ea:c4:f3:
         41:41:33:a3:c6:4e:4d:a4:d3:e4:cc:4d:a8:bc:57:4d:04:7a:
         f7:2e:fd:24:1d:84:d1:73:c5:94:b0:cd:6b:c4:38:c2:61:bf:
         e5:1a:73:88:a5:01:76:8d:f4:6f:8e:76:77:30:cd:8a:60:18:
         3e:ae:c0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:33:54 2025 by rpki-client