Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9e578108-65f7-3a5e-83c4-3d755ed70936.roa
File:                     9e578108-65f7-3a5e-83c4-3d755ed70936.roa (raw, json)
Hash identifier:          akjCM4Tn9v0TfvZATesB/ff156MgSll0pioWFYqofRs=
Subject key identifier:   3C:B7:FF:6D:56:DF:45:2A:71:5E:DB:08:4F:C3:B8:42:73:BE:FA:70
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584AE5B55CF12E54B22DF5F22D60
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9e578108-65f7-3a5e-83c4-3d755ed70936.roa
Signing time:             Mon 18 Aug 2025 12:26:18 +0000
ROA not before:           Mon 18 Aug 2025 12:26:18 +0000
ROA not after:            Sun 16 Nov 2025 13:26:18 +0000
asID:                     834
IP address blocks:        64.22.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:b5:5c:f1:2e:54:b2:2d:f5:f2:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Aug 18 12:26:18 2025 GMT
            Not After : Nov 16 13:26:18 2025 GMT
        Subject: CN=9af2831f-df15-432c-b1f9-61be9de59363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:8b:c7:55:ef:86:13:d4:70:bd:ff:4a:1e:
                    09:d1:a2:de:d2:b1:8a:5f:8a:f3:1d:b6:14:ab:fa:
                    ec:50:d4:31:22:88:ad:80:35:13:a2:4b:c5:80:21:
                    31:1d:bd:2d:8f:80:31:7a:c4:70:95:4b:47:b3:5e:
                    58:56:7a:9f:23:f1:1c:cc:95:43:24:3e:6d:ad:a7:
                    c6:dd:91:32:bd:64:4c:3f:80:80:64:09:42:f9:75:
                    73:68:df:ca:8d:24:ca:df:b0:b2:8c:e3:f6:15:0f:
                    45:0e:b5:da:16:16:5f:61:40:de:92:ea:3a:39:e2:
                    b2:12:6b:ce:47:22:64:63:9e:1a:86:80:a4:d6:3b:
                    3f:18:de:9e:ea:36:c0:30:60:b1:e3:29:c6:2b:e6:
                    32:6a:0d:e3:0a:20:84:4e:f6:92:eb:3f:11:e5:f5:
                    86:6c:52:77:60:a4:ed:d6:25:ae:a2:41:75:b3:d1:
                    40:b1:b1:8d:2f:bb:ff:8d:2b:c1:3d:13:f1:ad:ec:
                    45:84:d8:94:a1:cf:d2:a4:29:3d:14:f7:a7:01:27:
                    9b:65:7b:35:f1:4e:1e:4b:c4:dd:7b:0a:9e:4f:6c:
                    0c:79:50:85:f3:8c:f1:0a:de:55:a5:1f:72:9b:0c:
                    d1:38:09:6e:62:11:2b:3a:f0:0c:a8:cb:66:4f:8e:
                    e2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:FF:6D:56:DF:45:2A:71:5E:DB:08:4F:C3:B8:42:73:BE:FA:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/9e578108-65f7-3a5e-83c4-3d755ed70936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:7b:0f:e6:ba:6d:63:ec:fd:c6:35:9d:4a:18:4d:da:03:
         e7:72:c5:52:8c:86:9b:37:4d:e8:1e:60:9f:28:c0:99:d2:87:
         1b:3e:71:a5:d1:82:56:f7:fa:2b:b3:a6:e4:29:f3:f7:67:6d:
         5f:41:b9:c4:25:a8:91:e8:58:48:6b:b2:04:4e:4c:19:5a:26:
         bd:24:f1:c4:6e:94:86:bf:32:43:7b:9d:33:95:28:85:33:bb:
         fd:79:02:fa:d3:3c:2d:84:d8:d9:eb:02:40:54:8a:fe:80:56:
         ba:10:4a:8c:3d:08:1f:8c:79:34:7a:30:71:a5:e4:aa:ad:b8:
         6a:2f:99:00:07:c5:c6:c8:b8:79:62:ac:dc:db:56:fa:7b:9e:
         1c:82:d8:d5:73:41:63:18:e7:60:e8:e7:3a:3f:6e:7e:b5:43:
         f2:fb:81:de:1e:08:60:e7:34:e0:d4:b9:f9:d6:27:01:c4:ae:
         01:04:33:16:83:83:e8:c9:d2:a4:e3:21:34:d5:3d:e8:42:b7:
         f1:0d:58:0c:87:08:74:a6:77:5a:0d:e3:a4:cf:cf:e6:2a:e4:
         d5:43:f0:74:ac:e9:41:f9:76:0b:17:0a:93:7d:11:dd:9b:37:
         c8:40:a1:99:89:be:59:87:1d:5d:a6:4e:e0:ea:95:b7:d0:d3:
         1d:61:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:41 2025 by rpki-client