Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bc1b1ca-a679-3ce6-bc63-c056d75deb0f.roa
File:                     0bc1b1ca-a679-3ce6-bc63-c056d75deb0f.roa (raw, json)
Hash identifier:          yjdTA75sSV21Lv+OCtJj9BioT1U2VZKbb/QCZeJIf1k=
Subject key identifier:   CE:00:D8:DB:AA:0C:80:D9:F9:9D:C2:0F:12:24:94:15:08:2C:D6:48
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BA3E9799F7F35F862C4456700
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bc1b1ca-a679-3ce6-bc63-c056d75deb0f.roa
Signing time:             Sat 25 Oct 2025 15:34:53 +0000
ROA not before:           Sat 25 Oct 2025 15:34:53 +0000
ROA not after:            Fri 23 Jan 2026 16:34:53 +0000
asID:                     9304
IP address blocks:        64.204.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:e9:79:9f:7f:35:f8:62:c4:45:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 25 15:34:53 2025 GMT
            Not After : Jan 23 16:34:53 2026 GMT
        Subject: CN=21db3b6f-c3c4-40c1-b564-c76c58c30990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d8:e9:c6:94:fe:9b:d5:f0:32:03:9a:eb:c7:
                    25:6b:f7:7d:63:5a:f5:26:e4:96:38:eb:1f:eb:fb:
                    57:6f:b9:76:bd:52:7e:17:78:ae:e8:cd:99:76:9a:
                    c5:8d:c1:6e:91:7c:14:aa:0c:72:4a:13:99:60:25:
                    66:c6:06:dc:ec:7e:24:55:f9:28:65:82:c7:8d:4c:
                    19:e0:01:ef:7e:05:2a:25:47:b7:c8:9b:ff:c0:b1:
                    14:7d:80:a5:d5:d7:07:6b:bb:fa:77:53:6a:75:0e:
                    29:3d:2b:31:e1:28:7b:6f:e1:da:c2:80:11:ea:4f:
                    b7:3d:10:6c:f5:8f:5a:f7:13:f6:7f:f6:1b:ed:32:
                    9f:21:0c:d6:6e:f1:c3:d5:57:fc:dd:ca:61:3f:94:
                    10:39:01:f8:3f:9b:c9:99:48:cf:69:0f:b3:98:06:
                    91:75:ce:74:a9:4d:5e:d4:95:13:b5:56:be:37:dc:
                    80:69:24:d5:4f:3b:cd:ee:f6:96:27:90:9f:a6:85:
                    62:82:37:b0:df:23:98:f8:6c:34:34:47:99:e7:3c:
                    15:55:31:12:6c:e4:48:72:b5:f0:9e:14:ce:44:f5:
                    98:d0:28:a1:45:45:96:b0:63:41:6f:5e:4c:4c:6a:
                    06:81:af:7f:2c:1a:65:73:ea:e0:cc:44:50:a8:10:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:00:D8:DB:AA:0C:80:D9:F9:9D:C2:0F:12:24:94:15:08:2C:D6:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/0bc1b1ca-a679-3ce6-bc63-c056d75deb0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:2b:d0:b0:4e:c6:26:ce:ba:f7:53:9c:3e:9a:53:26:bf:
         06:68:d5:6c:80:c9:2b:65:7c:a8:ad:5c:0b:9f:9a:86:92:7e:
         ab:1b:70:d7:e0:5e:31:d6:cc:ea:85:98:d5:95:2a:5e:42:1a:
         68:af:f3:9f:7f:15:78:da:89:49:19:50:61:a9:61:ae:a8:1c:
         a3:38:e5:8e:18:e5:7b:19:ba:d3:0f:7c:1d:53:02:56:11:8b:
         97:99:4d:58:df:1e:b3:52:7e:b1:fc:54:e6:67:2c:97:15:9e:
         31:6b:5c:18:dc:40:f3:87:5c:21:16:c7:e1:7d:b5:d9:b8:8d:
         80:0b:f7:29:fa:08:3a:ea:be:46:cc:c0:2b:3e:7d:15:75:3c:
         04:2a:a6:dc:24:5a:db:ff:75:6b:43:c6:5d:93:94:97:9a:67:
         c5:e7:e6:66:da:27:e5:dc:8f:b3:fa:b1:12:54:11:ec:88:bf:
         5b:b7:41:5d:3b:76:ac:68:4b:17:b5:d4:14:b1:c7:cd:b0:8f:
         32:e2:df:f1:fc:73:68:0d:a9:62:a2:3e:4e:25:3a:e8:ee:ce:
         06:78:f0:d1:02:95:a4:eb:f3:c4:d8:ea:55:12:88:ed:43:6c:
         18:0e:48:03:10:b7:82:de:b7:ed:ed:04:bb:0c:10:0a:eb:b7:
         ce:e7:b9:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:24:25 2025 by rpki-client