Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
File:                     34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa (raw, json)
Hash identifier:          M03ol/3gjSQ0IcZCA9ExemquWtsNv0ZA9XuC4S1CJfA=
Subject key identifier:   3B:85:EA:3B:23:35:55:D5:E3:F9:AE:48:1B:1B:FF:B2:A0:63:15:EE
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584BBA10378F693FA45C2A916980
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     20205
IP address blocks:        64.246.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:37:8f:69:3f:a4:5c:2a:91:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=cd45912c-c4a1-47e4-b111-0a876f15e990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f2:dd:46:fd:ed:9f:c2:7b:f1:b4:5d:d9:3b:
                    94:1e:ba:25:9d:2f:48:11:1a:7f:44:c5:ca:df:f7:
                    92:48:97:c2:c5:02:8e:65:26:eb:70:19:84:a3:68:
                    23:02:13:cb:2a:f7:71:cb:d2:43:e6:02:11:93:6b:
                    78:94:8e:12:23:dd:52:03:3f:70:51:0f:01:37:5b:
                    69:0d:ee:b5:ea:b2:ca:eb:64:40:e5:5c:05:ac:d8:
                    68:7d:31:eb:c6:07:e4:07:3d:02:e5:ef:6f:af:71:
                    01:89:95:76:6c:0a:e0:f7:28:87:2a:4f:75:68:a9:
                    e2:39:81:1b:22:f4:2b:3b:ef:75:9e:c8:33:a3:83:
                    e2:f2:a2:58:bb:87:c0:1c:56:f7:59:b6:d7:b3:69:
                    73:34:2b:bf:bc:37:fe:fc:0f:af:d3:6f:c9:e4:51:
                    1b:1e:b1:86:bb:c3:1e:85:e8:4f:a7:f3:7e:d2:f2:
                    09:0a:95:fc:65:51:ba:af:fe:b9:bc:68:2e:3f:8a:
                    9e:aa:a3:3b:0c:f5:c1:24:5e:4a:f6:0e:94:a9:4c:
                    bd:91:df:5d:17:ed:1e:f0:c5:22:44:7a:4b:19:3f:
                    be:b8:55:17:96:aa:60:94:db:7a:77:6d:3a:dd:a2:
                    1d:88:47:ae:08:9f:cd:e5:ef:70:23:06:f6:b4:73:
                    d7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:85:EA:3B:23:35:55:D5:E3:F9:AE:48:1B:1B:FF:B2:A0:63:15:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/34af55c9-2b58-3f1a-9296-3ed31b7e8d01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.246.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:a1:e1:66:35:a4:32:b7:18:16:bb:0f:28:23:df:1d:c1:bd:
         20:5d:1e:68:35:32:e6:76:d1:a4:e1:a9:93:f9:2f:6f:f7:a6:
         6d:52:34:72:d8:93:f8:4b:37:13:2c:4b:40:b9:29:a1:09:55:
         72:d5:3a:6f:c2:a2:6f:d4:f7:56:29:c1:f6:03:2b:18:50:af:
         36:1c:9e:33:11:17:ac:a0:db:89:12:12:c8:e6:15:08:12:21:
         74:6a:68:11:bf:09:3f:39:68:38:09:34:f1:30:0b:9e:90:54:
         82:13:80:a9:d7:be:29:f3:2b:ac:f8:d0:4b:c2:ff:ae:96:c6:
         f1:41:bd:59:1f:81:24:b8:f6:c5:ea:7a:8a:f4:e0:f9:2f:2a:
         58:ad:d4:8f:10:93:eb:d3:77:a7:c9:65:cb:3c:d8:8b:b6:f5:
         eb:96:0e:60:59:de:32:73:e7:2d:52:c6:e6:85:1b:88:d7:d7:
         5c:fd:ad:da:0a:b1:47:b2:9c:16:2d:78:95:7a:45:77:ac:ad:
         4b:e4:33:d0:fc:df:ab:02:96:24:1d:91:af:2b:bd:94:37:58:
         b1:8a:9e:23:9d:7b:12:5a:8a:f7:9e:cc:16:95:e7:e5:eb:d4:
         0c:ec:89:3d:b0:a5:9c:a3:dc:bb:1e:32:7e:f6:90:04:5a:f5:
         ca:e3:6d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:16 2025 by rpki-client