Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ea79ab4-7ca6-3333-8379-da5530b841dd.roa
File:                     8ea79ab4-7ca6-3333-8379-da5530b841dd.roa (raw, json)
Hash identifier:          70OF33Lo2yMgWYGIQMNg8VpLsJBOaLK9BSu19HWE88w=
Subject key identifier:   C6:8E:32:FC:85:33:B8:55:6F:A4:89:0A:BB:27:D6:F8:08:F9:AD:91
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BB289C80A1A9A6185FDCEED80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ea79ab4-7ca6-3333-8379-da5530b841dd.roa
Signing time:             Thu 30 Oct 2025 21:19:12 +0000
ROA not before:           Thu 30 Oct 2025 21:19:12 +0000
ROA not after:            Wed 28 Jan 2026 22:19:12 +0000
asID:                     215607
IP address blocks:        64.204.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:89:c8:0a:1a:9a:61:85:fd:ce:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 30 21:19:12 2025 GMT
            Not After : Jan 28 22:19:12 2026 GMT
        Subject: CN=dc5f35b7-bcb6-482e-aecf-4731540814fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:54:14:84:98:1c:a3:35:a6:0e:24:85:2d:
                    1b:b6:2b:23:35:88:25:97:2a:96:4f:93:7d:5a:90:
                    56:cd:f9:79:0b:6f:d0:19:fd:f3:01:f6:2f:c3:f8:
                    1f:a5:8f:b7:62:05:bd:e0:86:99:47:72:4f:23:a9:
                    52:2e:65:3d:e0:62:7c:a9:62:b8:ed:18:a0:bb:c7:
                    48:55:bc:44:37:8d:b9:19:00:3d:cb:ab:fb:1e:30:
                    83:d7:44:fb:2c:33:13:5b:b8:d9:b9:74:e6:1d:3b:
                    17:3a:c0:6e:15:f3:b7:02:fd:26:23:55:e4:87:1c:
                    82:58:19:5a:9c:f1:a6:a9:da:c7:d5:5b:85:ca:06:
                    8e:c6:df:fd:9b:ea:fe:9d:79:2f:c6:49:21:d9:ac:
                    0e:b5:73:ca:f8:78:13:fc:21:57:54:d9:c7:c9:a1:
                    33:d4:bb:13:59:b3:aa:a3:64:d8:a2:fd:e1:ce:1b:
                    a0:62:f4:b4:e0:94:f5:ee:d6:3d:a1:26:9c:2a:63:
                    2f:d4:24:64:86:a3:db:ad:10:3b:37:00:ad:a8:8c:
                    7b:2d:06:30:af:7c:30:0f:24:2f:70:d1:5e:ff:ed:
                    9e:56:12:78:46:c0:66:2e:d9:c4:16:c3:69:61:08:
                    97:a3:57:4b:79:72:5f:59:1d:16:31:91:da:e3:d9:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8E:32:FC:85:33:B8:55:6F:A4:89:0A:BB:27:D6:F8:08:F9:AD:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8ea79ab4-7ca6-3333-8379-da5530b841dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ab:91:be:85:89:99:81:bd:94:aa:eb:34:6c:b2:e9:8c:17:
         9a:11:16:c4:ea:a3:4d:ab:49:14:1c:8e:19:df:1a:a0:c7:96:
         22:16:a2:d9:55:5a:b1:41:7c:dd:8b:e4:a6:05:40:ee:41:d1:
         de:73:96:15:47:8f:3e:54:80:90:5a:6c:c0:83:ba:fb:e6:cb:
         57:39:54:4a:c1:48:23:7d:85:c6:25:54:a3:7f:ad:3b:5f:09:
         aa:1c:36:be:e0:c6:7e:7f:fd:f3:21:8e:3d:e3:06:5a:b9:32:
         96:83:9a:6d:26:28:84:3f:19:e5:cc:38:fe:e3:4c:74:11:5a:
         ce:86:dd:9c:21:5d:b8:34:f2:d6:d1:18:38:78:a2:26:8e:7e:
         3e:9e:27:1e:1d:04:9c:76:84:27:e3:7f:4d:2b:dc:75:e2:4e:
         26:1b:7b:0f:23:7d:6f:52:6a:4d:fb:77:fd:da:e9:02:91:3c:
         d9:c0:0a:2d:11:5d:e0:e8:81:c0:b4:72:d0:0d:fd:02:1e:66:
         e0:68:80:a9:47:7a:cd:85:d0:2c:fd:dd:65:ff:a4:a2:8f:43:
         b5:7f:f3:20:7c:e4:e6:a4:1f:0f:c4:4a:61:57:80:b5:99:dc:
         21:a3:09:cd:32:34:d6:fa:8e:a2:53:2c:af:42:23:82:3b:1c:
         38:b7:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:00:56 2025 by rpki-client