Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
File:                     fe55b376-4f8a-303c-a275-778287cb6142.roa (raw, json)
Hash identifier:          w8+f9adE7GhIYwaK61egTdC19W91aXSN+oT8BRoryhY=
Subject key identifier:   05:8D:32:C2:88:96:99:04:6A:E9:12:CC:96:7F:A1:74:12:25:87:37
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584B84E77A0536E602CCE5D3D400
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     2906
IP address blocks:        64.120.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7a:05:36:e6:02:cc:e5:d3:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=cbda325c-8f5b-48da-87d9-ad31fb24095b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:41:23:01:9c:c0:d9:83:2c:38:94:5b:cd:
                    73:1b:ab:e3:95:92:91:7e:bc:0d:1e:0c:a1:25:6a:
                    9b:28:2b:3b:2f:af:3d:5e:c0:31:c3:d6:c3:a1:07:
                    be:7e:e9:04:bf:6a:5b:9a:95:cf:88:d2:d2:ef:f8:
                    a2:b5:33:08:74:9e:51:db:aa:42:90:89:c8:6b:55:
                    a3:0f:3d:d3:56:58:d9:ce:66:a0:00:3b:fd:89:4c:
                    70:18:ff:a2:6c:bc:a0:01:a9:89:9c:ca:ee:05:bc:
                    5d:a8:f4:0c:a9:ec:33:0e:80:00:fe:f9:36:6c:98:
                    af:65:5f:3a:97:c8:2f:71:e2:65:7f:60:55:aa:2c:
                    6f:39:c8:a5:d4:f6:dc:a7:5f:8a:9f:44:51:1c:17:
                    21:25:68:d2:cd:49:07:77:0f:31:e2:ce:4b:27:43:
                    9b:41:79:16:1e:a5:3d:98:b4:87:c8:33:c8:0d:99:
                    eb:5c:87:5b:cb:1a:de:bc:a7:fa:36:3c:c2:af:2d:
                    b7:63:a6:55:66:1f:bd:a1:5b:7c:1c:e3:53:54:e8:
                    a7:e0:9d:77:d2:8c:75:01:5e:de:45:c9:b8:f5:ee:
                    d4:70:33:5b:4c:25:f9:db:12:e4:50:37:69:f8:ff:
                    42:a8:ec:da:2a:80:d9:f8:fe:d2:35:3c:89:84:ee:
                    b7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:8D:32:C2:88:96:99:04:6A:E9:12:CC:96:7F:A1:74:12:25:87:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/fe55b376-4f8a-303c-a275-778287cb6142.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.120.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9a:74:43:ca:3a:d7:2b:10:b2:42:0e:bc:bf:9e:d9:d5:3e:
         33:6c:1c:fa:bd:98:17:99:ff:fe:f8:b3:87:a0:09:fd:38:55:
         38:c9:ad:27:68:9c:3d:44:11:cf:81:eb:4c:86:4d:de:60:e7:
         03:a4:4f:f8:53:da:22:f3:83:5a:5b:cf:b1:7d:a8:b3:82:fd:
         c8:76:66:ee:be:6c:bc:4e:45:76:04:23:6a:52:cf:e1:15:94:
         bc:17:06:06:35:df:be:3b:02:f3:45:81:cd:da:57:74:aa:8e:
         bd:ed:d3:0b:99:70:4e:a6:eb:2e:04:08:1e:4d:b7:6b:3b:d2:
         30:c9:57:c3:a1:31:49:36:8b:fd:21:75:83:95:10:c3:94:1b:
         bf:de:79:18:ac:d1:08:7a:be:ac:44:41:4a:7f:f3:78:d1:c2:
         d8:cc:4f:23:1c:e0:b0:8d:b9:dd:ac:44:0f:88:74:eb:c5:56:
         f6:6d:7d:75:d2:cb:2a:00:9b:6d:6a:f3:63:d3:65:6d:fb:c4:
         e3:f8:1f:9d:14:f4:55:35:3f:77:1d:2b:96:6b:58:c2:7b:57:
         d9:4f:eb:47:bd:cf:bf:c9:d3:68:86:b3:34:f2:50:00:a4:f2:
         5a:55:91:9e:d3:ae:cf:21:a5:be:d2:fb:dd:c1:60:95:53:a5:
         d0:57:a3:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:22:01 2025 by rpki-client