Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a764e3fe-6b66-3050-b310-c6455c046115.roa
File:                     a764e3fe-6b66-3050-b310-c6455c046115.roa (raw, json)
Hash identifier:          /468WyxYM06CIeEIFc5Iwwz0m4JfqyFrEjqPncpPTzg=
Subject key identifier:   1F:07:5B:0F:24:97:5B:3F:51:74:DD:0E:62:BB:46:E5:15:58:04:44
Certificate issuer:       /CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
Certificate serial:       010D0C9F4328584BA9325EDF72E7E9585AE12900
Authority key identifier: 83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a764e3fe-6b66-3050-b310-c6455c046115.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     399814
IP address blocks:        64.29.134.0/24 maxlen: 24
                          2607:f3a0:a006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:5e:df:72:e7:e9:58:5a:e1:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f735b6-0ae2-4c2a-826b-7e8b126a4b73
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=bdce8df8-5401-4451-86c4-2daca4dbb76d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:b6:12:79:28:b2:4c:8d:83:cd:cc:27:52:
                    9b:43:52:1a:19:1c:3f:b1:65:86:f4:6e:8d:d8:a0:
                    64:00:97:29:35:38:19:86:79:42:e5:e4:b9:ea:cc:
                    f7:6e:be:c4:8c:14:a2:c3:28:d1:31:86:23:ea:ac:
                    81:8a:8d:64:d6:88:89:be:97:dc:2f:c6:47:98:16:
                    80:d6:ac:62:fe:f2:ce:bb:36:a7:69:98:79:fc:3a:
                    3a:d7:e1:1d:1d:b7:5f:9f:59:f7:fb:45:9d:db:6c:
                    fe:04:b1:fc:8c:bf:ca:16:b4:19:6d:d4:37:83:df:
                    59:13:19:6f:ce:a0:10:19:8b:aa:39:0c:eb:03:dc:
                    a4:6e:a1:e9:52:a2:7a:5c:7e:55:12:38:af:a9:df:
                    aa:a0:7f:68:e5:aa:a6:9f:96:f6:03:ee:b4:b9:1e:
                    9f:ef:3f:08:80:e8:99:83:54:62:b6:92:81:73:be:
                    73:c4:44:dc:0a:59:89:af:46:b9:f8:64:f8:f1:8f:
                    f0:bd:39:cd:ca:1d:32:ac:8b:48:55:ed:ce:d5:41:
                    8c:b6:39:5f:e5:27:7a:1b:4a:11:c8:73:e1:03:df:
                    1d:72:fe:84:6a:84:7f:dd:47:9c:a2:11:5f:93:71:
                    e7:66:30:39:bc:ac:a1:24:36:aa:a9:bf:12:01:fb:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:07:5B:0F:24:97:5B:3F:51:74:DD:0E:62:BB:46:E5:15:58:04:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/a764e3fe-6b66-3050-b310-c6455c046115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.crl

            X509v3 Authority Key Identifier:
                keyid:83:9A:1D:01:FB:C9:06:43:91:78:BE:A4:D3:D4:17:A4:7C:94:9B:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/85f735b6-0ae2-4c2a-826b-7e8b126a4b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.134.0/24
                IPv6:
                  2607:f3a0:a006::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f4:03:f2:7a:d4:3a:47:cc:9f:47:2f:13:b8:59:cb:70:08:
         be:bc:68:75:2d:60:8c:80:55:28:30:e6:45:fa:f5:cc:b1:15:
         20:70:22:f3:97:19:fa:68:5a:f8:46:3e:22:82:79:96:45:80:
         67:13:ee:69:15:09:1e:6e:28:17:02:2d:24:37:1d:06:d7:ba:
         c1:7c:86:7b:1c:dd:34:6d:0f:66:db:86:9a:ca:98:1d:f3:80:
         ec:c1:24:0e:56:16:48:c5:c4:e9:7d:00:51:c3:2f:0a:67:ed:
         51:81:20:18:62:84:2b:fb:35:57:50:2c:79:83:0e:06:fd:bd:
         e4:e9:3d:d5:13:24:0a:94:ac:e2:3f:24:19:c7:39:8b:d7:08:
         0b:fe:1f:11:ae:3c:49:d7:02:a4:da:06:e6:b8:a3:4a:3c:e4:
         ff:f5:bc:3b:05:c4:68:f0:93:e2:5b:7d:53:45:06:c5:b8:83:
         17:8a:e8:23:55:7e:e9:30:00:d2:ad:f6:9f:d3:be:5f:a6:ea:
         1e:6c:2a:bb:0f:16:a4:0c:d3:a7:7d:94:4f:84:e4:08:49:52:
         98:8f:30:c9:57:11:77:f0:c6:8b:f7:7d:76:37:15:25:24:65:
         ec:42:fb:d5:06:30:02:06:96:52:a6:c1:47:44:3c:cd:e7:ca:
         dc:c5:40:45
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEupMl7fcufpWFrhKQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNzM1YjYtMGFlMi00YzJhLTgyNmItN2U4YjEyNmE0
YjczMB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk
YmRjZThkZjgtNTQwMS00NDUxLTg2YzQtMmRhY2E0ZGJiNzZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyq2EnkoskyNg83MJ1KbQ1IaGRw/sWWG9G6N
2KBkAJcpNTgZhnlC5eS56sz3br7EjBSiwyjRMYYj6qyBio1k1oiJvpfcL8ZHmBaA
1qxi/vLOuzanaZh5/Do61+EdHbdfn1n3+0Wd22z+BLH8jL/KFrQZbdQ3g99ZExlv
zqAQGYuqOQzrA9ykbqHpUqJ6XH5VEjivqd+qoH9o5aqmn5b2A+60uR6f7z8IgOiZ
g1RitpKBc75zxETcClmJr0a5+GT48Y/wvTnNyh0yrItIVe3O1UGMtjlf5Sd6G0oR
yHPhA98dcv6EaoR/3UecohFfk3HnZjA5vKyhJDaqqb8SAft/uQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFB8HWw8kl1s/UXTdDmK7RuUVWAREMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3
MzViNi0wYWUyLTRjMmEtODI2Yi03ZThiMTI2YTRiNzMvYTc2NGUzZmUtNmI2Ni0z
MDUwLWIzMTAtYzY0NTVjMDQ2MTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODVmNzM1YjYtMGFlMi00YzJhLTgy
NmItN2U4YjEyNmE0YjczLzg1ZjczNWI2LTBhZTItNGMyYS04MjZiLTdlOGIxMjZh
NGI3My5jcmwwHwYDVR0jBBgwFoAUg5odAfvJBkOReL6k09QXpHyUm9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84NWY3MzViNi0wYWUyLTRjMmEtODI2Yi03ZThi
MTI2YTRiNzMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAQB2GMA8E
AgACMAkDBwAmB/OgoAYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaPQD8nrUOkfMn0cvE7hZy3AIvrxodS1g
jIBVKDDmRfr1zLEVIHAi85cZ+mha+EY+IoJ5lkWAZxPuaRUJHm4oFwItJDcdBte6
wXyGexzdNG0PZtuGmsqYHfOA7MEkDlYWSMXE6X0AUcMvCmftUYEgGGKEK/s1V1As
eYMOBv295Ok91RMkCpSs4j8kGcc5i9cIC/4fEa48SdcCpNoG5rijSjzk//W8OwXE
aPCT4lt9U0UGxbiDF4roI1V+6TAA0q32n9O+X6bqHmwquw8WpAzTp32UT4TkCElS
mI8wyVcRd/DGi/d9djcVJSRl7EL71QYwAgaWUqbBR0Q8zefK3MVARQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:00:04 2025 by rpki-client