Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa
File:                     aed34a51-5a96-3ead-b62b-a874c42008d6.roa (raw, json)
Hash identifier:          6dzZsea/kvth+bp6IGfFDcexP0OBCUZWD9wUmHdVg6c=
Subject key identifier:   BD:B8:34:BF:FC:BF:0F:99:E3:3D:7D:EB:9B:D4:BB:C9:B1:0D:E6:D2
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584BBE40461A9F38C06F832D6280
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        64.42.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:46:1a:9f:38:c0:6f:83:2d:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=ff687684-d03d-4007-bdcb-bf772c960ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:23:52:e4:20:47:c4:08:d9:28:ab:f4:c6:
                    ef:fc:e5:38:89:7b:cf:d8:bd:26:e0:4b:87:6c:7b:
                    89:ab:37:92:49:9b:49:b2:67:b3:8f:45:05:b9:4b:
                    69:56:80:ba:2b:33:7d:0b:81:fd:2b:8e:23:45:06:
                    2d:76:58:67:12:22:c6:86:38:26:d5:6d:5b:1b:42:
                    2c:e0:b6:8a:bd:05:52:c4:02:0c:fb:58:58:57:13:
                    1f:28:7f:bb:ac:75:28:85:9c:72:fb:7c:dd:97:e1:
                    ff:1b:cb:c6:b1:28:0a:da:6b:8d:26:4e:78:24:2d:
                    31:4d:fe:85:b7:d3:8e:db:27:c0:5e:1c:b6:5d:2d:
                    be:84:e0:fd:d4:2a:15:ad:69:22:f0:2a:4d:38:65:
                    4a:10:04:25:be:c5:50:02:93:36:dd:31:88:35:b3:
                    81:93:74:5c:63:8b:db:d2:25:ae:71:bc:d6:2e:db:
                    b2:4b:1d:b3:a2:37:87:87:0a:f2:e6:4b:2e:05:e3:
                    99:c8:2c:4f:2e:a8:be:53:f8:67:32:bc:98:5c:b1:
                    c0:4a:4f:d8:33:9b:83:38:27:c1:fd:2d:1f:34:55:
                    b9:9f:43:dd:3f:66:ad:e1:8b:a2:2c:25:52:e0:62:
                    71:89:1e:44:f7:0b:01:54:1e:ef:98:c4:64:be:09:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:B8:34:BF:FC:BF:0F:99:E3:3D:7D:EB:9B:D4:BB:C9:B1:0D:E6:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/aed34a51-5a96-3ead-b62b-a874c42008d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:d9:c3:97:b6:3c:79:4f:81:c7:74:2a:2b:02:39:9b:1c:c6:
         b1:2d:0b:5b:3f:3a:ce:32:d7:05:d0:2b:9b:ef:0b:10:29:a8:
         3a:a5:e9:71:9b:81:e5:83:41:30:73:70:80:4d:0e:c4:fe:a1:
         15:6a:c8:4f:57:c4:a9:b4:58:c5:fd:f4:15:3c:c4:ae:91:8b:
         0d:de:d8:9a:f3:68:db:10:92:7f:c0:ca:3f:7c:6e:93:14:a1:
         e8:a5:75:f1:1e:fb:cf:0d:c7:37:9a:dd:29:9a:19:5d:f3:64:
         38:bd:1f:95:31:7d:82:78:32:56:31:e1:ce:da:e8:c1:1e:b9:
         17:16:e6:ed:c1:65:e0:49:1c:d7:78:e9:88:fb:76:0f:dd:23:
         35:46:42:2b:d3:67:c1:12:f9:4c:a4:e6:7a:35:94:66:66:2b:
         d1:c3:0d:5f:ca:a4:01:b7:e7:c5:58:9e:f8:59:9d:f2:20:18:
         16:f1:1d:ff:12:cc:d3:23:6f:d9:84:91:4a:c5:7f:eb:70:2d:
         6f:66:99:9e:a5:c4:29:32:1f:11:df:9c:63:55:d5:c1:ac:8e:
         f4:b3:b8:51:5b:91:7e:da:59:a4:32:ee:41:9b:11:78:8a:41:
         be:90:7b:a4:f6:74:e1:3e:2c:e7:ae:b4:9e:27:1d:2f:b2:89:
         ef:a9:84:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:29:59 2025 by rpki-client