Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa
File:                     34c11998-ca90-3ced-8946-ee40e3de932d.roa (raw, json)
Hash identifier:          pJwVfLRH0uF2GGvXciRzZCk2gnw2SVgo6jlCywc0OtM=
Subject key identifier:   4A:89:EB:95:76:30:8F:D0:D9:DD:D0:F9:2A:8A:7D:57:71:A4:67:09
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584B84E7654A8C3F7DD622029700
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16509
IP address blocks:        64.40.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:65:4a:8c:3f:7d:d6:22:02:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=23944ced-40bf-4192-bef7-bce5d654a810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d6:26:1c:38:72:0e:b6:65:30:be:4b:8d:9b:
                    1a:62:7d:b0:a3:e0:68:70:da:f2:32:6c:96:9f:07:
                    49:e9:73:ec:fa:3d:00:62:93:0b:4b:84:cd:fd:ca:
                    37:ed:ce:f5:bf:be:46:9d:13:53:c2:cd:76:f2:7b:
                    9f:e5:8c:4a:38:73:fd:88:be:ec:bb:7a:b1:cb:fa:
                    37:47:81:07:fb:be:55:91:ad:b3:d2:a7:1f:34:b8:
                    2d:09:94:1c:5f:b6:e0:6e:e5:b8:e5:db:6c:40:d0:
                    fd:dd:fc:84:9c:6b:f8:95:ce:42:b3:27:54:fd:9e:
                    2f:85:6a:9e:a1:46:0e:8e:6f:2f:a3:4e:8e:35:4d:
                    ce:9b:5d:9c:3c:5f:0e:84:d9:92:09:55:26:4b:47:
                    27:1d:58:16:b7:ff:b8:a9:ee:8f:fa:e6:44:09:c5:
                    f1:94:79:2d:6c:34:85:9b:43:5a:23:d7:66:b7:62:
                    f0:11:a5:55:42:4c:4d:b0:2c:11:22:51:1f:a3:2d:
                    68:93:d0:f6:ce:c8:70:d6:ee:cc:5c:13:71:9f:e6:
                    01:d3:aa:9f:56:13:f3:cf:cc:6d:05:1a:b4:a0:da:
                    79:e6:db:4d:79:26:5a:7a:30:c2:a4:53:6f:08:d2:
                    74:3d:64:71:c8:60:0e:84:50:57:e7:77:59:f1:5f:
                    bb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:89:EB:95:76:30:8F:D0:D9:DD:D0:F9:2A:8A:7D:57:71:A4:67:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/34c11998-ca90-3ced-8946-ee40e3de932d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:19:5d:6e:ed:be:e2:74:d3:b7:2f:30:62:1f:f1:e8:8f:20:
         35:5d:02:a5:26:a7:22:b9:92:1d:ee:9c:a7:79:23:0a:29:c0:
         e4:a8:4e:b1:f8:4a:33:4d:21:cf:98:e9:26:e2:1b:b3:9a:88:
         48:25:f3:1b:28:41:74:d2:e0:d5:9e:b6:b0:27:40:17:75:e4:
         cc:7e:b9:9b:a1:c2:9f:60:09:54:8f:f1:21:c1:49:01:43:c8:
         67:f9:5b:be:10:74:8c:e6:dc:bf:4a:ac:ae:e4:f2:82:d0:90:
         a6:bc:98:a3:b9:81:e1:52:d5:6c:14:f2:3e:7e:c3:4c:fc:d0:
         cd:89:ca:de:de:3a:53:26:6c:d2:32:e6:b2:47:f0:0b:2b:1b:
         c3:62:c1:43:68:4f:7a:36:d4:8d:6f:5a:8d:59:a7:78:6b:f5:
         c8:cc:3f:e5:38:c9:00:fd:98:a1:3f:0c:21:3f:85:19:bc:16:
         34:78:91:16:49:79:ac:73:eb:be:1d:bb:a2:d6:34:ef:45:04:
         e0:00:11:75:af:14:31:d5:d2:e6:6a:53:cb:d2:af:03:ab:ac:
         ae:6b:8d:81:88:03:03:8e:9e:a9:b8:3f:f6:eb:ef:b3:b4:7d:
         d1:c8:24:ab:bb:a5:49:80:76:53:d0:6d:c3:24:ad:81:ab:24:
         3b:22:22:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:05:26 2025 by rpki-client