Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa
File:                     586a1feb-bb22-34cb-9210-9a24796c79ad.roa (raw, json)
Hash identifier:          qEEiBWkWfCd98tTAKFc4jbHgU1qQcuDfRoE8rENvq3Y=
Subject key identifier:   7E:77:30:9D:6D:8B:4A:2F:49:D6:8E:0C:FF:24:03:5E:0B:8E:F8:E3
Certificate issuer:       /CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
Certificate serial:       010D0C9F4328584BBB758E3907EDB379A8D02280
Authority key identifier: 70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     1820
IP address blocks:        64.49.64.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8e:39:07:ed:b3:79:a8:d0:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b798aad-2a8d-4cd5-9517-6a28890ad4ec
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=1fe64cf8-6313-40d2-8f53-097798ae0acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:c6:e7:12:ac:8a:98:dc:8e:6d:78:b2:3a:d6:
                    5a:23:ad:43:80:f5:47:0d:d6:05:57:88:b4:6b:1b:
                    73:f7:f8:dc:f6:8f:d0:d6:08:4a:fb:ad:a2:a0:f9:
                    49:0e:0a:84:95:4d:13:35:8b:83:a0:f1:92:1f:41:
                    b9:be:15:22:31:11:25:d0:4c:8c:7f:87:15:f8:ea:
                    02:56:9d:fc:75:21:91:b2:24:58:9a:53:23:6e:df:
                    b0:1a:14:c7:0e:f9:73:ac:38:91:cd:18:f6:c7:61:
                    8f:74:40:5b:00:23:33:80:97:4e:02:3a:21:a6:eb:
                    9f:81:f8:e7:1b:0e:80:2a:56:3d:3b:c0:34:e1:f7:
                    53:24:6b:35:43:5a:ad:2d:ee:49:b1:4c:14:df:c6:
                    f3:16:74:b9:5e:02:e6:7f:c7:49:24:ee:98:20:78:
                    af:ca:fb:13:ca:03:74:70:18:03:f1:32:f5:ce:7d:
                    c6:68:58:e2:a3:55:c8:26:f5:66:55:ec:5e:26:55:
                    9c:f6:06:19:98:e0:8b:1a:86:79:69:3a:ac:54:97:
                    19:67:b3:af:0e:12:10:37:39:a7:42:74:93:02:19:
                    7e:05:e5:7f:5f:b2:be:41:e8:c5:fe:82:14:96:45:
                    0d:10:56:26:aa:d7:8b:b5:8e:9d:9d:56:ac:e5:b8:
                    9f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:30:9D:6D:8B:4A:2F:49:D6:8E:0C:FF:24:03:5E:0B:8E:F8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/586a1feb-bb22-34cb-9210-9a24796c79ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.crl

            X509v3 Authority Key Identifier:
                keyid:70:47:80:1F:33:E1:6E:80:79:11:34:F8:9C:AE:B1:CC:56:47:BF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b798aad-2a8d-4cd5-9517-6a28890ad4ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:12:7f:01:69:c7:f9:05:77:1d:3d:3d:29:56:af:1a:6b:bd:
         ef:e5:f3:1d:06:a9:2d:5b:f0:a7:1c:44:00:b5:b5:68:9a:0d:
         8a:b0:0b:0d:c2:4f:2e:24:ed:f5:c7:a8:32:20:bf:ba:e0:08:
         69:72:d3:c1:20:0d:2b:a7:72:89:f4:f6:0a:ac:5e:32:1e:44:
         f7:9d:32:cb:ee:16:71:89:dd:9b:42:4b:15:b9:27:a3:4b:0a:
         b6:a2:56:be:f4:aa:ba:2c:07:18:63:5f:7a:99:97:72:e0:56:
         4c:05:91:16:27:40:27:02:8c:d4:6e:33:b5:e5:d0:55:4e:d1:
         00:c9:0a:5d:3f:dc:ba:94:85:b3:a8:51:9f:02:8c:de:b9:06:
         b9:7a:3c:ce:1b:7a:18:6e:87:c3:9a:c2:df:9d:14:94:b7:a7:
         89:9b:78:e1:34:1d:f1:39:38:8f:d7:23:c0:38:ff:0e:32:dc:
         c7:11:9d:69:ea:f2:a8:34:93:ae:a1:e3:c1:31:bc:98:98:1e:
         73:28:d0:4e:8c:b4:6f:dd:01:3d:1e:44:c3:68:67:ba:0d:ed:
         72:c6:fe:68:f6:ed:8f:2c:14:ba:54:a5:36:91:1f:4b:44:0f:
         af:18:f3:3b:70:45:93:6a:28:7e:94:80:c7:9e:9a:27:4a:b0:
         ab:e9:8d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:32:19 2025 by rpki-client