Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90047436-f9dc-396b-b9e1-42de18740712.roa
File:                     90047436-f9dc-396b-b9e1-42de18740712.roa (raw, json)
Hash identifier:          i750geCfQjulRapf+b//cE+OaQ+PW1/kmOvOSTg1lvo=
Subject key identifier:   B4:D7:31:DC:A9:94:74:A7:97:2A:46:9E:6F:03:63:12:73:92:A3:C8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BAB83AEBDD665B64B479ECA80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90047436-f9dc-396b-b9e1-42de18740712.roa
Signing time:             Tue 28 Oct 2025 08:56:15 +0000
ROA not before:           Tue 28 Oct 2025 08:56:15 +0000
ROA not after:            Mon 26 Jan 2026 09:56:15 +0000
asID:                     401783
IP address blocks:        64.139.8.0/24 maxlen: 24
                          64.139.14.0/24 maxlen: 24
                          69.3.237.0/24 maxlen: 24
                          74.211.233.0/24 maxlen: 24
                          205.179.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ab:83:ae:bd:d6:65:b6:4b:47:9e:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 28 08:56:15 2025 GMT
            Not After : Jan 26 09:56:15 2026 GMT
        Subject: CN=e9ae0829-cfc8-4e29-b471-27a938655b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7a:97:1e:82:ee:ee:ed:92:47:a9:7c:a6:ed:
                    f0:3f:95:0b:60:1c:dd:d4:05:92:fd:3b:5a:99:51:
                    d6:08:10:31:f4:b0:cb:2a:7f:05:b1:a9:7b:8f:dd:
                    28:0c:42:59:c1:61:24:df:f7:3e:84:81:cf:89:96:
                    56:1b:ab:20:1c:8f:0c:d1:49:3a:8f:90:6a:83:35:
                    82:52:65:95:bc:9d:3a:db:67:9f:0a:2a:b7:65:cb:
                    ae:ff:34:15:95:57:74:58:46:90:71:87:2e:25:c0:
                    29:75:e0:de:c9:8a:13:5f:a0:67:80:28:22:83:72:
                    df:0b:38:e2:4a:9b:ec:e0:89:ed:82:9c:88:72:25:
                    5c:48:e4:13:d3:dc:da:bb:d9:e4:68:18:9d:41:5e:
                    4b:20:7a:0a:f3:7a:b6:20:58:a3:9e:57:06:63:be:
                    80:bb:e2:94:03:32:13:d5:16:ef:7f:62:8b:e9:63:
                    51:a4:77:33:d3:4a:59:45:9c:84:b2:11:6d:d2:07:
                    7a:96:16:68:04:69:55:7b:ff:c4:41:89:6d:19:9e:
                    69:27:ff:b5:fe:40:19:5b:f9:18:bf:9a:50:eb:b5:
                    41:13:f1:04:e0:76:ab:8e:b2:f3:bb:3b:b4:b2:e4:
                    ec:01:7b:f5:9c:db:6f:a5:06:6b:8c:f2:7c:6b:90:
                    89:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D7:31:DC:A9:94:74:A7:97:2A:46:9E:6F:03:63:12:73:92:A3:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/90047436-f9dc-396b-b9e1-42de18740712.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.139.8.0/24
                  64.139.14.0/24
                  69.3.237.0/24
                  74.211.233.0/24
                  205.179.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:03:00:f0:10:69:b6:78:a5:71:19:45:70:41:76:da:e3:61:
         81:c7:aa:48:f6:ea:eb:be:18:1c:40:5a:f8:2d:da:d2:be:46:
         2f:b5:1f:67:f2:ea:5d:06:fb:48:6a:f6:98:ad:c2:a5:01:7b:
         5c:88:91:0b:87:e1:da:bf:1b:c6:73:29:42:2a:16:9e:47:e9:
         14:73:a0:60:ff:73:19:06:2c:ff:43:ac:97:1d:57:51:95:49:
         b1:23:fb:fe:9a:e5:c0:45:82:6b:79:10:4d:9f:9b:ab:af:7d:
         b7:e5:e5:5f:b8:6c:10:75:dd:3c:85:48:39:c5:1b:09:8c:c2:
         82:de:0a:3a:e2:c5:8d:f0:3b:16:61:08:38:bd:e4:78:cc:ad:
         0e:29:d3:9f:ec:71:ed:36:84:bb:24:0e:ff:0c:77:b7:64:a7:
         b0:f5:63:9d:2e:17:6f:a1:c4:9c:1f:d8:10:3a:66:24:21:08:
         e3:3b:a2:1b:76:f1:5e:64:25:31:10:11:b6:6e:b9:ae:14:ec:
         cf:3a:8b:89:4e:9d:29:3a:b9:a3:05:e6:a8:74:68:1e:10:96:
         33:da:bb:e7:5f:60:ce:17:35:7c:e7:4b:b4:28:ea:1c:1c:4e:
         35:39:63:be:d7:d6:75:de:0b:da:91:fd:13:e7:eb:65:98:09:
         75:11:ac:3a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:45:48 2025 by rpki-client