Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
File:                     0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa (raw, json)
Hash identifier:          96bzsxYj/6ilGRie2/eIPqZKOd8v8dN+IIWTvp1rXj0=
Subject key identifier:   7C:DE:B8:8E:F1:E8:2D:E9:CA:C0:C1:0E:34:04:C0:A0:66:E0:11:89
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F4328584BABFCFFF105F87B145866F680
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa
Signing time:             Tue 28 Oct 2025 13:00:38 +0000
ROA not before:           Tue 28 Oct 2025 13:00:38 +0000
ROA not after:            Mon 26 Jan 2026 14:00:38 +0000
asID:                     55002
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:fc:ff:f1:05:f8:7b:14:58:66:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Oct 28 13:00:38 2025 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=4dee862f-0f11-4c79-94ea-acbae0d1215c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:43:98:2b:8e:82:10:fa:17:8e:95:2a:cd:34:
                    cd:7a:4b:86:6f:3f:99:5b:a2:fc:06:6a:d2:22:30:
                    16:54:4b:50:ed:4b:00:ff:b3:8d:79:3f:5a:59:85:
                    03:6c:e8:59:dd:e0:96:56:cf:22:8e:78:5b:4a:ff:
                    a9:36:7e:09:a2:12:36:bf:cb:8e:29:65:3c:62:da:
                    e4:51:55:76:f9:04:e1:99:01:82:a8:3e:40:45:27:
                    cb:58:b4:d9:0e:ad:b9:50:78:f1:78:59:bb:d4:40:
                    b7:90:fe:3e:ad:bd:4c:c3:6b:08:b2:56:c6:b8:94:
                    ab:25:c0:be:08:c8:56:83:a8:ae:a2:0a:c1:de:e5:
                    e6:d6:49:70:f4:e0:4c:32:f0:f0:25:dc:a6:c5:04:
                    8b:59:97:31:2e:9e:86:15:ca:99:da:cd:70:c3:7a:
                    ea:65:53:4a:d1:05:e3:d4:fd:85:2d:8c:98:21:b8:
                    0e:73:20:9f:4e:76:3c:32:74:38:15:5a:df:56:4c:
                    77:7d:e1:61:b5:ba:70:95:6b:54:f3:98:a1:74:cc:
                    a4:80:9a:11:50:f0:0f:9f:b3:08:dd:d6:7b:f7:44:
                    b1:5d:2d:66:c0:03:dd:ee:86:86:3f:bf:65:7e:e5:
                    20:52:3a:34:15:21:bc:cd:92:3a:95:51:7a:97:aa:
                    75:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DE:B8:8E:F1:E8:2D:E9:CA:C0:C1:0E:34:04:C0:A0:66:E0:11:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/0ffd60c1-8af6-3de7-8553-1cefd1bc3f26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:41:1f:6d:eb:95:84:85:df:e5:9c:6a:a0:ce:10:6c:a5:be:
         7e:65:6e:50:13:2c:0c:85:75:3f:77:7b:38:61:7d:ef:e6:c1:
         33:af:c8:e1:57:c9:8c:2d:38:9f:70:4c:a1:20:81:9e:fc:a2:
         a5:91:d1:4f:bd:e1:ad:51:35:9c:73:af:d3:71:5b:b8:3d:44:
         de:73:9f:bf:b4:cb:22:a7:7b:0a:fc:56:55:c2:1c:05:e2:e3:
         0f:f3:d1:9a:9d:e1:e1:e1:79:6e:fa:86:b0:55:b0:11:d7:a1:
         d2:d8:40:45:fc:62:4e:7c:03:e3:32:7f:76:08:43:39:8a:0c:
         ce:8d:69:be:a4:43:00:e3:5c:4f:d3:cb:48:63:9d:57:9b:29:
         e5:9a:25:7c:15:77:77:d3:6a:5a:67:1f:10:1e:c0:91:86:93:
         1f:1a:42:44:e6:d1:53:a7:a4:0c:54:02:c8:12:2b:6f:be:59:
         a1:78:3a:1d:22:4a:fd:76:c5:aa:80:80:46:0c:04:0a:27:12:
         46:9a:99:84:9b:d1:36:51:85:70:a4:db:bc:28:41:58:ca:ef:
         da:2f:f7:ac:70:69:c7:ef:aa:fd:08:cc:ea:22:39:99:cd:a1:
         0d:44:25:6f:96:35:8c:25:b9:43:49:ff:36:07:fc:1f:8a:87:
         5c:d5:8b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:58:49 2025 by rpki-client