Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/dc0c99d4-36ad-32d6-83cb-7149687a7e51.roa
File:                     dc0c99d4-36ad-32d6-83cb-7149687a7e51.roa (raw, json)
Hash identifier:          /xKQpRHysLnrMMbjjB7LAKnHMZ/UQ+oKxMiJ/PMYNA4=
Subject key identifier:   A5:15:DF:DC:C4:CC:AF:28:6F:20:F2:1C:61:2D:FB:0C:F7:F6:C4:39
Certificate issuer:       /CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
Certificate serial:       010D0C9F4328584BB7147215CD60EF999F010880
Authority key identifier: C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/dc0c99d4-36ad-32d6-83cb-7149687a7e51.roa
Signing time:             Sat 01 Nov 2025 12:20:58 +0000
ROA not before:           Sat 01 Nov 2025 12:20:58 +0000
ROA not after:            Fri 30 Jan 2026 13:20:58 +0000
asID:                     5405
IP address blocks:        64.255.14.0/24 maxlen: 24
                          2602:812:c001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b7:14:72:15:cd:60:ef:99:9f:01:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743d3e7e-7c36-48e5-942f-c28c4741bf5b
        Validity
            Not Before: Nov  1 12:20:58 2025 GMT
            Not After : Jan 30 13:20:58 2026 GMT
        Subject: CN=96768810-d961-46d0-bdf7-0518f26ff7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c4:d0:0c:66:e8:4b:09:cd:81:c9:ca:03:e6:
                    a7:3e:66:dc:52:62:9b:a7:4a:67:25:c7:2d:43:3a:
                    5e:ec:23:0b:97:1b:d3:64:d4:77:33:d2:0c:cd:30:
                    f2:1b:08:90:d2:1d:cf:17:1a:ab:7f:3a:03:b5:ab:
                    64:1f:f9:e6:07:f0:16:b4:d0:94:f7:50:79:bd:37:
                    e1:32:18:98:52:f6:64:5b:60:83:9d:99:4c:cb:a3:
                    ea:d6:2f:3a:10:29:e4:2e:f5:22:40:f5:de:69:70:
                    48:e7:df:dd:4c:2b:0e:0a:03:f6:da:0e:f2:c9:70:
                    09:81:43:c3:28:6a:40:d8:7a:30:e3:d3:29:e9:54:
                    3f:71:c4:86:c0:b2:14:ef:15:f4:46:8c:4d:e2:a2:
                    a3:6b:84:9c:ea:14:07:77:7d:b6:fd:e7:6b:c7:b0:
                    db:87:e4:4e:ee:07:39:88:69:16:3f:6e:97:1d:ae:
                    fc:82:7f:78:f6:33:da:b6:f8:d2:ef:d5:28:90:1b:
                    15:5c:02:4b:96:34:cc:6f:ac:c6:7b:46:80:e2:05:
                    90:b4:2f:b7:43:1f:d6:71:e4:9b:15:9d:52:7a:87:
                    f1:cd:ed:73:11:9f:5b:a3:35:dd:21:f6:9e:33:70:
                    48:43:01:cc:4e:c8:74:fd:46:3e:a7:97:83:29:f6:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:DF:DC:C4:CC:AF:28:6F:20:F2:1C:61:2D:FB:0C:F7:F6:C4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/dc0c99d4-36ad-32d6-83cb-7149687a7e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b/743d3e7e-7c36-48e5-942f-c28c4741bf5b.crl

            X509v3 Authority Key Identifier:
                keyid:C5:17:B2:2E:5C:1F:CD:23:E5:4C:4E:D8:CD:7B:41:F5:8A:1C:1E:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/743d3e7e-7c36-48e5-942f-c28c4741bf5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.14.0/24
                IPv6:
                  2602:812:c001::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:18:31:e6:ea:39:5d:14:1a:03:17:81:a1:94:1c:1e:d3:c8:
         e9:6a:1a:eb:cc:84:ac:35:da:e4:9b:72:fe:a2:c3:17:33:01:
         b8:ce:5f:08:d5:1f:84:81:74:bd:5c:89:6a:1d:de:bf:e4:fe:
         ae:3f:e0:b4:ec:7a:72:f0:1a:b9:99:12:e8:2b:90:c4:45:5a:
         f1:57:22:34:c4:f5:ba:98:c6:c8:68:80:34:95:8f:93:30:20:
         7a:28:82:f7:f4:f3:ae:ce:0a:a7:ad:7d:aa:b9:fd:93:7e:92:
         f3:5d:3a:0b:df:d2:e3:e7:5b:fd:4f:c8:c3:ac:c5:3e:f8:b3:
         91:ae:e3:b1:4f:df:51:b2:fa:b6:34:a0:23:8d:34:2e:46:ea:
         a1:9e:cb:86:04:2d:2b:6c:67:87:61:70:1e:91:51:f2:8c:c9:
         46:82:ce:26:22:35:86:44:e5:e7:d6:45:7e:7d:61:68:07:9f:
         8c:d7:ad:7b:22:7c:94:2b:86:0c:60:ac:0f:46:0a:60:83:e1:
         45:02:02:19:6d:69:99:89:92:53:37:50:91:99:e2:fb:a1:f2:
         ba:d0:cb:07:7e:86:b3:a6:97:6d:9d:d0:cd:9e:3b:d6:45:f4:
         28:20:56:e1:94:20:5d:84:56:d2:b3:9a:83:79:05:3f:b1:d2:
         ce:b6:77:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:35:22 2025 by rpki-client