Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f0cf3e68-8036-36c1-a62f-1499f410161c.roa
File:                     f0cf3e68-8036-36c1-a62f-1499f410161c.roa (raw, json)
Hash identifier:          hvqLtkleruwwQY8zFeZQcp/rSsxBvuyA0lBXdAmvB6c=
Subject key identifier:   29:DA:91:B3:DF:99:03:BF:4B:80:AA:20:7D:4D:ED:4D:7D:72:29:09
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F4328584B99D79BFE78AE791E61825560
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f0cf3e68-8036-36c1-a62f-1499f410161c.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     14618
IP address blocks:        69.64.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:9b:fe:78:ae:79:1e:61:82:55:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=bfc174a2-0d70-46a5-89c2-6b02e9a1a7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f5:48:f0:43:4c:b6:55:15:86:6d:26:f6:f2:
                    68:f2:b5:b6:2f:2d:32:50:25:ea:0e:26:65:00:53:
                    46:77:71:44:7b:b2:ae:6f:cf:76:34:60:c5:c4:36:
                    57:09:fe:f5:42:2d:f7:00:c7:5d:c2:c5:53:1e:70:
                    5e:b8:0e:9a:e4:1c:64:df:c2:db:a2:e1:e5:23:c4:
                    c3:cc:72:2d:38:18:7a:b2:fc:4e:a2:7e:ae:c4:0d:
                    4e:45:bb:2c:f4:a1:f7:c1:0d:31:ae:04:54:eb:80:
                    81:ce:64:76:bb:c2:ff:e4:08:53:87:8d:86:b6:8e:
                    e4:13:a9:14:e5:89:62:31:a7:29:d0:27:a0:eb:14:
                    48:00:1b:25:dd:5f:27:6f:21:bc:31:fa:f3:95:03:
                    e5:92:fd:d5:9f:b0:73:46:e3:79:75:14:78:8c:51:
                    d3:b9:e6:a1:83:07:94:a0:9b:ee:7b:06:25:8b:d1:
                    9a:73:62:0e:3e:a7:94:ed:e0:18:4c:15:67:42:62:
                    df:e3:2a:49:0e:62:79:25:02:cd:8c:3d:b6:d3:87:
                    fe:29:9a:a0:a4:64:b7:46:3e:9f:c0:c5:31:80:e3:
                    16:70:d8:40:b2:7d:2a:c2:47:2b:f9:9c:40:59:4f:
                    77:c2:f5:65:23:0b:86:2a:ed:19:d7:14:86:47:14:
                    92:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DA:91:B3:DF:99:03:BF:4B:80:AA:20:7D:4D:ED:4D:7D:72:29:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/f0cf3e68-8036-36c1-a62f-1499f410161c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:11:95:44:ba:53:fc:6c:be:4a:fb:5e:46:f1:0f:b8:17:d3:
         38:41:c6:8e:f2:51:d8:5f:2c:30:63:67:03:df:20:9d:3f:72:
         9b:54:d2:9a:04:b6:d6:ee:76:5f:b7:f5:9d:b5:8f:54:3f:f2:
         dd:a7:17:0c:a2:dc:c8:2e:f8:ad:2b:5d:06:6b:d9:0c:80:18:
         cb:14:55:4c:ee:79:b1:5c:58:36:a8:e6:38:bb:af:d4:5e:71:
         44:83:1d:15:59:35:72:09:17:6f:cf:cc:b5:d8:fa:85:36:a2:
         5f:20:64:af:16:33:29:88:3a:b2:ea:11:90:93:3e:41:82:c8:
         57:c1:44:1c:89:f9:0d:e8:a5:fb:21:94:b1:32:69:9e:bd:0c:
         00:ca:5e:25:d8:97:52:c9:d0:71:8a:44:70:39:0a:ce:b0:d5:
         f3:b4:78:20:59:bf:56:66:42:de:a3:1d:d4:06:58:4a:ed:22:
         90:ff:96:46:95:ce:5d:09:c4:2a:7a:b0:4a:35:b1:b1:30:e8:
         b3:33:8d:84:b5:ed:2a:13:fd:cd:e8:74:80:bb:e9:d1:01:01:
         72:f6:7a:8c:ea:24:42:0d:53:8d:de:43:69:2d:da:a2:8f:b3:
         a4:e6:aa:9e:7f:80:94:5a:72:4d:a9:95:9a:7a:e9:5f:a6:e1:
         fa:a4:26:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:27 2025 by rpki-client