Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/7d719031-3e41-3095-9a4f-0a35ce02e1ab.roa
File:                     7d719031-3e41-3095-9a4f-0a35ce02e1ab.roa (raw, json)
Hash identifier:          UhKE1lTVsiuFMpARdXUEPupT6a5T2zD1vriz5AxXTZU=
Subject key identifier:   CE:20:1C:E1:3A:7B:36:53:67:27:74:FA:31:7C:4B:E3:88:39:99:D3
Certificate issuer:       /CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
Certificate serial:       010D0C9F4328584B2CF71B1767E2890738354540
Authority key identifier: F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/7d719031-3e41-3095-9a4f-0a35ce02e1ab.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     14230
IP address blocks:        97.64.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f7:1b:17:67:e2:89:07:38:35:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=efaa4905-e029-4be9-9d88-8f47ec0cd2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9f:7c:de:f2:e0:c9:ce:ba:0f:a8:19:31:22:
                    a8:0e:c9:80:d9:bf:de:f5:fc:d4:a7:09:15:6a:e6:
                    5b:0e:21:4d:9a:7e:9b:ed:63:2a:1b:39:e5:89:0e:
                    97:5a:5e:04:4f:e5:37:d3:d0:41:cc:2a:53:ff:62:
                    4e:b9:7d:20:11:d9:de:67:c1:c8:27:a5:ed:b8:7b:
                    87:ae:e1:f4:86:e4:54:89:0e:9b:4e:26:69:a7:b0:
                    56:97:f8:ee:73:7c:f2:77:b9:45:a3:5b:2e:40:59:
                    bc:91:01:d1:43:e6:14:6c:e9:57:94:7a:2b:99:61:
                    31:1e:9b:bb:30:a4:02:ad:7f:76:8f:2e:28:7c:a5:
                    1e:a3:df:36:32:ab:6a:dc:95:fd:63:94:a0:28:a9:
                    4b:8c:f8:49:e8:e1:52:88:5d:4e:ce:5b:56:c4:83:
                    a0:5b:23:b2:1e:2c:c0:a8:be:4a:7d:29:8a:b9:d1:
                    d9:13:19:3a:58:38:dd:24:68:c1:e7:d5:43:0d:43:
                    4c:d6:7b:7c:85:70:13:2b:e7:e2:14:8c:1b:3b:7c:
                    8b:3d:d6:80:82:1e:7a:d8:97:2d:16:94:86:10:26:
                    f3:9b:9f:13:32:97:a6:5a:67:d2:ea:29:d1:e3:b2:
                    f9:88:8a:dc:be:cb:fb:bd:3f:43:e8:94:b6:dc:ed:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:20:1C:E1:3A:7B:36:53:67:27:74:FA:31:7C:4B:E3:88:39:99:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/7d719031-3e41-3095-9a4f-0a35ce02e1ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.crl

            X509v3 Authority Key Identifier:
                keyid:F0:EC:7E:79:B5:BE:C8:B4:67:5A:7E:05:A2:B3:78:43:7F:14:28:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e6fb6966-e6e7-4cb2-bdee-8d26e59d9a14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.64.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5f:cc:3e:3d:10:c4:c5:26:7c:82:c8:20:93:72:d5:78:ee:
         05:32:30:66:23:38:f8:10:36:7b:cc:a3:40:e7:82:99:2c:78:
         95:d4:5c:37:6b:8d:1c:40:27:f9:49:c6:54:cb:c7:79:a8:0a:
         3d:11:d8:ea:59:78:a2:8e:8b:66:e2:ee:82:ea:db:c4:d9:5e:
         bc:eb:42:85:cf:88:8a:9c:65:d7:86:55:67:3d:96:3b:92:a6:
         95:11:7c:32:b3:31:12:0c:69:5e:33:39:f3:2f:39:2c:ee:f2:
         2f:0f:7e:9a:6e:02:5a:26:93:d8:f6:f5:3c:6e:63:ac:8a:c9:
         aa:bb:59:2f:e0:6a:6c:4c:d7:05:19:5f:e1:0e:a9:f8:f1:30:
         07:06:db:e4:44:62:08:bb:94:f1:62:9d:73:f6:d4:ff:18:46:
         53:5c:5d:37:48:02:47:e6:88:ff:c1:cf:fb:34:2a:51:c1:7a:
         3e:57:e0:1b:4a:63:4a:73:35:23:d7:e5:59:4e:a0:9f:86:f6:
         82:d8:90:5f:1f:25:35:10:9b:52:ab:ff:3e:d1:be:d7:c2:36:
         15:fc:da:67:13:14:57:e2:aa:fa:bb:a1:1c:c9:37:59:e5:21:
         28:37:f0:56:48:7a:1b:b6:63:1b:7d:ba:f4:a5:37:ec:6f:e7:
         3e:57:a7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:07:59 2025 by rpki-client