Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/0dbf6853-4b5e-358f-9a99-40b9718f8ffa.roa
File:                     0dbf6853-4b5e-358f-9a99-40b9718f8ffa.roa (raw, json)
Hash identifier:          G0XM+ZZfXM1NyWW1nqdS7XFNlUh/XPOAYe9/7JzC8fQ=
Subject key identifier:   CC:38:7A:4E:4B:A2:90:00:39:23:E5:46:09:EC:E0:11:E0:D1:4F:4F
Certificate issuer:       /CN=7478c754-137f-4ef1-a8b5-aa954253fb79
Certificate serial:       010D0C9F4328584B970CF0C026CB311F6FD2BA00
Authority key identifier: E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/0dbf6853-4b5e-358f-9a99-40b9718f8ffa.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     18474
IP address blocks:        64.22.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:f0:c0:26:cb:31:1f:6f:d2:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7478c754-137f-4ef1-a8b5-aa954253fb79
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=6330e234-b609-40d4-b2c5-d6c05887bfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:70:cb:99:d7:00:81:6f:1a:ee:a3:2e:37:
                    38:e6:d6:ab:aa:85:fc:63:d0:4b:21:64:21:e2:f5:
                    cd:a0:00:af:b1:96:2f:48:53:a1:c4:e5:fd:a3:95:
                    22:26:c5:16:64:55:dc:0d:f4:da:ca:71:69:81:8c:
                    73:2c:cf:8b:cd:fc:a0:c4:33:ed:e9:2b:e5:6b:4a:
                    1d:67:f5:3e:e7:49:fb:a3:cf:54:10:32:d0:75:9b:
                    db:0d:98:74:ce:43:18:fc:ad:d6:3f:f0:e3:03:18:
                    8d:20:62:38:e8:a8:4a:fa:4a:d6:a2:24:3a:bf:da:
                    41:00:f6:98:ac:a0:d1:65:69:ef:84:87:83:5c:4a:
                    5f:b8:ef:61:8b:1b:c0:93:c8:98:de:b5:a7:51:27:
                    b3:7a:b7:09:90:47:35:25:94:eb:70:1a:f4:e2:61:
                    0b:99:68:3e:cf:cc:7b:94:7f:68:26:d8:96:1d:14:
                    39:1c:e3:ac:3c:89:40:2d:95:6b:05:cc:a7:31:b3:
                    f5:7f:e3:ac:25:b4:e2:63:86:ec:aa:90:0f:40:6d:
                    4b:0f:4d:6c:96:8e:3f:ed:95:21:c6:25:7c:c1:2a:
                    40:eb:63:9b:68:13:03:5b:ec:fd:4e:f9:bf:56:a9:
                    36:0d:d9:d8:cb:4a:a5:0a:a3:05:96:0e:f4:81:50:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:7A:4E:4B:A2:90:00:39:23:E5:46:09:EC:E0:11:E0:D1:4F:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/0dbf6853-4b5e-358f-9a99-40b9718f8ffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79/7478c754-137f-4ef1-a8b5-aa954253fb79.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A1:63:1D:2D:78:FC:91:26:02:97:AE:83:13:BE:E6:6C:D8:7C:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7478c754-137f-4ef1-a8b5-aa954253fb79.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.22.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:9e:8c:16:58:31:43:41:2e:78:e5:40:5c:ee:84:b3:a2:
         de:63:99:2c:8a:77:a6:6e:5f:4f:03:00:42:9e:13:27:f0:68:
         7a:88:92:7a:4d:4f:e1:86:a7:ea:b6:d0:30:19:d8:d3:b6:ad:
         dc:8d:22:49:6a:9d:b4:ab:9e:cb:78:9b:0c:c5:8c:0b:18:8a:
         f5:03:f1:3a:16:f8:ea:db:43:77:43:0c:3f:87:52:2a:0c:9c:
         6d:63:c3:8f:78:a7:cb:b4:74:23:da:70:2a:c4:ff:ba:52:31:
         7c:56:fb:52:50:58:70:39:f8:f6:90:ad:56:45:a5:0f:af:50:
         3a:7f:46:3f:f0:13:3b:62:8e:a3:52:18:b9:74:bd:d3:02:c9:
         9b:12:0f:fb:f7:f2:f0:0c:a5:30:f3:f1:74:39:eb:b7:69:e4:
         96:99:52:bc:7d:4a:26:29:2a:89:c9:76:f4:b2:06:40:88:80:
         56:ec:99:2d:56:fe:1e:1c:2a:ba:ec:f3:7d:ce:68:e5:5d:20:
         b8:ad:15:dc:ed:6b:09:16:c8:11:28:14:52:60:ee:a2:95:4f:
         52:b7:56:78:3a:be:3d:45:b1:28:95:8a:c8:2e:06:93:20:fe:
         68:5e:98:52:8e:be:97:cd:82:12:68:2a:e8:82:fa:35:a4:35:
         53:e5:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:01:06 2025 by rpki-client