Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
File:                     f070a6f3-baca-3377-b676-79ab48b2a038.roa (raw, json)
Hash identifier:          +Edafa0BqcJjb4+A6Z2x1PMT4cGmdX3xcR1qYcY21+k=
Subject key identifier:   A8:0A:D8:36:FB:83:40:C3:5E:8F:8F:AA:C6:D6:F2:B0:F5:08:43:33
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F4328584B6797BB85808AB7483F265580
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa
Signing time:             Sat 04 Oct 2025 01:00:33 +0000
ROA not before:           Sat 04 Oct 2025 01:00:33 +0000
ROA not after:            Fri 02 Jan 2026 02:00:33 +0000
asID:                     36492
IP address blocks:        64.9.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:97:bb:85:80:8a:b7:48:3f:26:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Oct  4 01:00:33 2025 GMT
            Not After : Jan  2 02:00:33 2026 GMT
        Subject: CN=40f4e61d-882d-4ac3-ad49-8e2ff0a65245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:58:9a:5e:36:13:ea:8a:4d:89:51:11:d9:7d:
                    a0:69:1c:c7:91:ad:3d:9e:81:3c:0e:52:97:04:c4:
                    0e:9c:85:d5:f2:97:a3:92:63:a7:21:51:bb:9d:e9:
                    0d:41:f2:c3:31:cd:ab:da:09:71:9b:4c:7b:b0:8e:
                    df:08:7d:06:9b:e1:56:8e:a1:6a:09:48:47:4e:01:
                    89:f5:de:92:1c:9c:c5:00:57:ee:99:97:77:74:92:
                    27:d7:51:55:26:1a:f2:ee:d5:37:70:e7:8d:63:83:
                    ce:c3:06:ad:30:14:ca:99:25:50:21:b0:18:4b:a6:
                    d1:44:42:04:5f:f3:06:3f:05:a3:d7:82:05:02:67:
                    0d:ab:94:c9:83:48:39:91:eb:24:17:38:eb:d8:ec:
                    27:71:6d:a1:0f:67:f2:05:a6:6a:2c:30:d5:b3:17:
                    99:01:71:c4:8f:b1:be:66:8e:d1:ce:ab:40:f7:50:
                    49:58:90:13:d7:0f:fd:b4:03:96:5d:c2:b9:63:57:
                    fe:c9:b2:53:4c:58:d6:13:05:b3:0e:84:b0:72:b4:
                    5a:e3:e9:c8:ed:9f:78:30:60:b9:44:82:b4:49:83:
                    01:3d:18:6b:55:51:5a:e1:73:e4:ac:1e:0d:0f:a8:
                    e6:25:1d:c3:63:71:61:0b:da:22:1e:2d:d1:f3:d9:
                    97:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:0A:D8:36:FB:83:40:C3:5E:8F:8F:AA:C6:D6:F2:B0:F5:08:43:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/f070a6f3-baca-3377-b676-79ab48b2a038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e3:4d:de:62:2c:4e:24:26:42:32:ee:d0:37:b9:35:7d:17:
         8e:e1:f7:6e:63:8f:df:29:1e:7c:08:b4:14:e1:b1:78:ff:f1:
         92:0b:c9:fa:04:32:a5:e4:cd:9f:28:65:cc:9f:99:2f:5a:4b:
         f7:2a:db:20:01:7d:d0:8a:e8:83:a6:9b:6e:f0:b9:1f:23:41:
         b4:66:26:80:7a:14:04:0b:84:be:ad:52:59:ca:09:c2:48:2c:
         07:8a:8b:b2:c4:d6:d1:2e:dc:8b:10:ce:23:df:14:74:5c:96:
         f1:bb:ba:71:d9:64:38:e5:50:2d:2a:89:3c:ec:97:50:e7:b0:
         10:be:dc:c3:cd:9b:e1:50:51:a6:5e:cd:5c:ed:e2:4e:3c:b2:
         95:f3:ef:1f:42:1d:99:95:eb:24:93:43:0c:78:a3:f2:4c:76:
         58:16:fa:ed:6e:cf:e0:52:7d:53:fb:61:44:0c:e5:33:6b:18:
         e3:d6:c2:82:70:38:99:53:a3:b4:a2:e5:ca:48:d0:50:da:89:
         15:ae:c3:a5:53:42:69:b8:bd:89:c5:36:1c:bb:5c:e2:ee:fd:
         ed:08:e0:bc:52:2d:c7:d6:14:90:cf:01:89:c8:33:11:96:6f:
         63:f2:e5:95:95:88:cb:2d:e0:e7:8a:81:ca:2f:b9:0d:9a:3e:
         82:06:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:40:34 2025 by rpki-client