Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa
File:                     6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa (raw, json)
Hash identifier:          BCmbjEVcbJCu3wLLkdfkztZtJhN/uxLpWZ45qTiRA+o=
Subject key identifier:   C4:CE:FB:56:79:1C:81:EB:21:5A:33:BC:39:F2:30:F4:ED:63:33:D5
Certificate issuer:       /CN=d23910be-77e9-4381-87eb-cb12cfc9b676
Certificate serial:       010D0C9F4328584BA932528BDCDDA90EBEF01490
Authority key identifier: F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     53766
IP address blocks:        64.186.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:52:8b:dc:dd:a9:0e:be:f0:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d23910be-77e9-4381-87eb-cb12cfc9b676
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=c267126f-4416-40e6-b2d4-7825ed766d8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a0:72:cf:ab:3a:7b:c0:37:f4:c4:c6:1b:74:
                    e4:96:b3:ff:4c:16:eb:b4:0c:03:91:41:76:e6:21:
                    78:28:d7:35:85:74:26:6b:06:ac:cd:06:66:7e:b4:
                    9a:6c:a8:91:3f:ca:f8:50:ed:40:a2:ab:ed:c1:75:
                    fd:8f:62:41:25:0d:2b:ec:e3:fc:3f:46:bd:1d:93:
                    af:00:27:f9:08:12:c3:d1:2c:06:64:ac:0c:bc:a4:
                    b4:51:5e:5e:2e:8d:38:91:a6:ca:a4:3e:b4:5b:7c:
                    00:54:99:4a:c8:5a:02:84:ca:82:1a:a3:a9:f1:42:
                    46:08:f3:7a:b3:ce:73:07:9b:ac:6d:56:ff:ec:ad:
                    c1:12:db:24:a9:16:b3:dd:67:b8:d7:33:54:cb:9c:
                    b0:07:76:7e:50:99:73:c3:7a:41:25:9e:39:cc:b1:
                    b7:a8:21:07:89:b6:b0:6f:a3:c9:7f:22:a5:51:71:
                    a5:e5:4c:44:40:fa:47:73:a0:15:12:00:79:8c:75:
                    11:c8:ce:c5:79:2c:38:2c:7d:02:33:98:12:49:83:
                    1b:eb:f9:5a:e2:f3:25:90:ae:fc:46:88:7b:05:87:
                    cc:b6:3f:c9:02:6b:30:68:5a:94:0f:7f:0f:86:5f:
                    bb:2e:f5:17:90:78:46:bd:7a:73:54:98:98:97:ad:
                    ed:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CE:FB:56:79:1C:81:EB:21:5A:33:BC:39:F2:30:F4:ED:63:33:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/6634debc-8ecc-3dbf-b574-fc8d9372a2e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676/d23910be-77e9-4381-87eb-cb12cfc9b676.crl

            X509v3 Authority Key Identifier:
                keyid:F2:EF:14:4D:25:A7:C4:18:7B:99:82:5B:6B:E0:0A:AD:42:48:6A:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d23910be-77e9-4381-87eb-cb12cfc9b676.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.186.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:71:e7:36:5b:35:ba:7a:15:58:a9:98:db:84:81:e9:d5:ba:
         d9:b9:ea:b8:9e:65:75:ff:51:58:1e:7d:70:7a:ec:ff:fc:ec:
         5b:04:0b:68:75:76:c7:fd:b2:e9:dc:1c:52:c4:e5:fe:a2:7a:
         26:80:23:23:fd:6e:cb:59:45:99:dc:65:8e:45:4e:b2:a9:09:
         be:47:ea:79:90:62:76:6f:92:1e:d6:70:b4:d5:80:0f:18:7f:
         7b:cf:49:30:3e:90:9a:82:c9:f9:cd:c6:30:7d:ba:6e:75:ea:
         f9:9e:a7:3f:fa:78:9c:a4:4a:66:cd:c7:a5:c8:00:32:bc:49:
         1f:4e:ef:1a:18:ac:58:48:03:c5:98:55:62:f1:91:3e:10:65:
         60:25:64:80:b7:2f:03:bc:a4:1d:3a:d2:17:06:d6:d2:b0:99:
         62:6f:81:69:1b:b2:65:8e:c7:4e:a3:a6:c0:2e:94:55:18:df:
         a5:d4:b9:e8:9e:17:bd:c0:1c:c5:6d:0a:10:8b:b8:32:22:c6:
         01:64:4b:9d:94:c7:dd:b3:63:63:6a:d4:6d:f5:97:75:36:37:
         a0:8b:14:51:c3:4e:a6:26:4e:b4:f3:2e:4c:36:df:5e:84:3e:
         b8:fe:b0:8b:5b:0a:3e:41:07:1b:97:ef:3d:a4:08:02:d2:79:
         81:71:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:38:52 2025 by rpki-client