Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa
File:                     53691788-7df7-3281-b476-97cb21900b36.roa (raw, json)
Hash identifier:          2+9+jT27zkMDB8b0aGyQfAgrWA+vDGeirzejX0YloMY=
Subject key identifier:   F5:B2:0B:C1:AD:01:41:B9:0A:DB:80:05:E5:07:83:C4:58:31:A6:61
Certificate issuer:       /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial:       010D0C9F4328584B8EACEE430A2D621E07E67700
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     31898
IP address blocks:        64.39.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ee:43:0a:2d:62:1e:07:e6:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=54b34a15-eae3-42ec-a332-d8671c7e2c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:15:e5:9b:f5:27:15:69:c6:fa:51:1c:96:8d:
                    cf:33:e7:7d:05:67:db:1d:94:19:6e:f3:25:c8:a2:
                    15:85:ce:a4:f6:0e:cd:de:48:4a:ea:ff:a1:35:40:
                    af:0c:68:cd:0f:0f:86:58:6d:08:24:af:08:5c:c8:
                    82:bf:62:3d:91:ec:13:8a:27:3b:55:30:88:d3:b4:
                    a4:60:5a:44:a7:dc:1f:04:ba:f2:25:2b:a9:ea:2c:
                    3a:86:3a:29:36:e5:dd:23:e7:48:75:e8:5c:0e:4d:
                    92:29:a0:f8:66:d7:3d:5b:c7:d8:d1:d4:24:7c:fa:
                    6e:d4:89:74:25:8f:8f:9b:08:f6:df:51:2f:2b:4b:
                    91:b4:11:ce:4f:6d:9c:e4:d1:45:ae:13:7c:d6:98:
                    1f:55:25:3f:c9:17:b3:c1:c2:b2:4c:11:ae:e9:6b:
                    99:cd:ec:99:82:85:0e:9c:de:08:ae:04:cc:0e:3d:
                    96:c9:6d:59:62:c1:f8:f2:0d:a0:70:e7:bc:6b:4f:
                    80:7e:d7:2f:dc:50:19:09:53:12:d6:e2:6c:02:35:
                    02:a8:79:de:5b:7c:4d:18:68:19:ae:de:00:74:1c:
                    09:4d:c9:73:10:34:76:0e:36:42:06:1c:70:86:3c:
                    e2:7d:ef:ce:69:de:50:76:b3:a8:73:c6:68:f6:e7:
                    e4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B2:0B:C1:AD:01:41:B9:0A:DB:80:05:E5:07:83:C4:58:31:A6:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/53691788-7df7-3281-b476-97cb21900b36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl

            X509v3 Authority Key Identifier:
                keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.39.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ea:62:14:6e:4f:bc:43:15:b0:9f:31:d6:12:3f:0c:d7:3a:
         f1:66:db:ff:39:6c:0d:58:55:4d:e0:a1:a2:3d:d2:01:d3:46:
         e0:44:f5:fb:98:e6:14:b1:97:23:c7:72:f7:ab:bb:a0:ba:cd:
         de:d9:c4:88:16:62:54:c3:ed:99:78:d8:a5:63:2f:7b:4c:99:
         6e:b3:dc:fd:de:3c:e7:f3:6c:86:9c:e5:d5:00:6c:90:84:9d:
         1d:d8:01:a9:f9:d4:5f:91:d7:d3:37:b2:b5:2a:63:84:b5:cc:
         ab:0b:a1:b9:24:94:d0:70:92:fd:08:bc:c9:df:8e:1c:b3:24:
         5d:c1:94:92:21:93:65:5d:64:ff:87:cb:9c:fd:d4:52:a4:d5:
         75:8b:de:27:26:bc:ff:17:f4:15:1c:7b:a9:8a:da:9c:ad:91:
         02:ed:a5:a4:bc:de:67:de:12:a2:a5:d8:8e:e1:8b:9e:74:8b:
         63:13:0b:c4:bb:ad:2f:fa:54:f8:06:2e:10:09:4e:66:fb:61:
         44:a2:ab:20:ab:a8:0e:fe:8e:9c:08:b7:43:d2:63:9a:eb:10:
         eb:dd:27:06:19:36:50:10:8f:d6:d7:00:4b:36:aa:1d:c5:47:
         b6:96:75:09:dd:d5:9c:15:c0:c0:d7:b8:86:cf:c5:75:a6:ba:
         2a:89:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:00:22 2025 by rpki-client