Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
File:                     e2f738f2-29e9-3955-988c-62d352942d5d.roa (raw, json)
Hash identifier:          6mfSJNn4x0kulG3rLnqWEt8QReCdZzfHYUfjWPgC2Jc=
Subject key identifier:   87:47:7A:CB:44:88:B9:47:DA:25:F8:88:BF:E6:8A:65:EF:60:93:2E
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B970CD86B6956FD76E9AD7000
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16904
IP address blocks:        64.72.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d8:6b:69:56:fd:76:e9:ad:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=e7d20666-2e1e-4940-b19e-6c98d8a8a221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:58:c0:22:24:c8:01:4f:40:6f:f6:99:f2:
                    a8:aa:cb:22:94:3b:c3:48:0d:62:ee:bd:7a:cf:9e:
                    5f:65:7b:59:54:7f:3d:e4:cb:1e:99:0c:58:ff:e0:
                    65:32:b9:83:cf:1c:ab:21:67:be:48:96:73:f8:13:
                    c3:63:b1:c1:3d:33:c9:36:58:8f:5c:47:30:2e:61:
                    7c:5c:5b:9e:29:66:87:ec:50:37:53:c9:db:20:c7:
                    95:59:2a:a0:06:f0:29:90:5e:a3:cd:47:c7:14:ba:
                    d4:db:37:55:6c:8e:bf:8c:76:f6:bf:e2:e4:14:3e:
                    72:fb:41:a6:29:3f:9e:2e:f7:6f:31:5c:af:83:c7:
                    c4:98:07:7a:af:20:fa:28:9e:2b:2a:58:2e:4c:63:
                    e4:2f:9d:7f:b8:e3:e7:5d:3e:11:9a:63:69:13:d8:
                    4f:91:ab:41:7c:75:4d:0a:97:99:de:7f:0b:48:4d:
                    02:08:db:7f:87:07:74:2f:51:4d:ee:08:ba:90:a1:
                    4b:16:06:bf:86:0a:84:6f:8d:ab:86:3f:85:0b:66:
                    80:99:d1:fe:df:e1:6d:d2:3f:fe:41:e3:9a:b5:c6:
                    14:85:e5:49:e0:dd:86:e3:3d:f5:0f:31:72:59:74:
                    9d:a9:4a:05:71:24:e3:e3:ec:65:23:bb:bb:c8:8c:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:47:7A:CB:44:88:B9:47:DA:25:F8:88:BF:E6:8A:65:EF:60:93:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/e2f738f2-29e9-3955-988c-62d352942d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:26:b5:9a:3a:35:36:36:11:7e:88:e8:80:d1:05:6c:9f:ad:
         0e:37:09:fe:dc:be:b1:63:22:3a:e9:a8:8f:4d:59:ae:43:66:
         21:92:35:01:12:5e:43:d0:7c:33:bf:a3:5a:26:f7:a6:3e:04:
         5d:97:02:bf:f0:51:5c:8f:c6:f3:08:5c:af:e6:c3:1d:7e:78:
         82:98:26:6a:e6:ee:70:c6:cf:d4:c5:cb:70:d0:1a:57:eb:f7:
         25:c9:34:6c:4e:e1:50:11:c2:23:f8:a4:d6:ae:fe:ee:91:06:
         40:39:10:d2:a7:93:c1:fd:72:59:4e:ca:fd:c0:e1:ac:9f:18:
         f0:61:e7:65:96:e7:c7:79:21:5a:25:cd:95:41:11:71:e2:fc:
         2b:27:81:eb:c4:74:a4:6c:18:61:27:58:47:50:c8:15:25:2b:
         a4:0a:e0:25:30:92:a7:d8:ec:4a:fb:81:f7:d0:6d:90:79:1a:
         86:53:a4:26:e5:f6:e4:13:6e:da:a6:d4:c0:bf:66:6d:d3:18:
         b8:f0:40:8f:cf:4a:fc:54:0e:43:1b:51:8d:14:5c:77:b6:9d:
         d0:a3:e7:83:bc:da:8a:b3:2d:14:18:05:3e:01:cb:b6:f1:ee:
         b7:d1:b8:5e:b5:14:43:70:c6:d7:ab:0c:57:75:f6:c0:8b:60:
         ce:0f:67:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:30 2025 by rpki-client