Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa
File:                     af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa (raw, json)
Hash identifier:          rztx3FysNpvHe74hibPjBA5DLzCxGcOLngsaNhmkiiw=
Subject key identifier:   CE:CF:1C:76:1E:83:D2:0D:09:FD:D3:59:37:D9:4C:62:DF:6C:60:F1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BB20ECADD08D2C7F2C8977340
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa
Signing time:             Thu 30 Oct 2025 17:11:23 +0000
ROA not before:           Thu 30 Oct 2025 17:11:23 +0000
ROA not after:            Wed 28 Jan 2026 18:11:23 +0000
asID:                     213990
IP address blocks:        64.204.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:0e:ca:dd:08:d2:c7:f2:c8:97:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 30 17:11:23 2025 GMT
            Not After : Jan 28 18:11:23 2026 GMT
        Subject: CN=3a783238-3f6d-4572-8d3e-dd9d473db066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:38:ae:96:45:82:a4:aa:45:71:00:73:62:
                    66:17:be:5c:92:3e:3a:cc:9f:b3:4d:bc:eb:71:b5:
                    70:14:7e:b8:ec:13:a1:b3:3b:d7:52:60:c0:6f:cf:
                    0b:41:8e:bb:28:ed:aa:30:cb:0e:f2:80:15:bc:95:
                    c4:c2:64:75:1f:90:cd:5d:4a:26:9f:17:ba:bf:04:
                    f9:04:25:f0:dc:d2:e3:a4:04:9b:f6:ef:23:4f:65:
                    95:9b:75:21:ca:78:8c:d0:96:63:ba:30:b9:2f:59:
                    5f:7f:52:e4:a9:b1:31:40:ff:d1:0b:88:3d:db:5c:
                    8d:fc:0c:66:e6:f7:f2:eb:15:57:11:a2:5c:26:1d:
                    a6:88:dd:68:a2:b4:d3:23:d2:82:fa:07:5c:b7:94:
                    55:23:d9:3b:8e:2c:69:16:a6:71:6f:15:13:e3:06:
                    57:f5:07:78:f5:9b:aa:d8:ef:36:35:65:3e:45:24:
                    3d:b2:5a:fd:ae:32:84:e3:40:5a:b4:f1:1d:70:aa:
                    1a:81:cb:2e:a0:a7:f7:d1:6e:00:e5:d4:85:8a:87:
                    0f:2b:23:27:d7:0d:90:01:9e:62:a5:21:fd:90:f4:
                    73:e6:99:87:4e:29:bc:db:99:f6:ea:b8:25:27:49:
                    68:12:4e:2b:87:0c:c0:94:17:a9:90:03:ae:66:f5:
                    a7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:1C:76:1E:83:D2:0D:09:FD:D3:59:37:D9:4C:62:DF:6C:60:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/af5c94db-4dbb-36f9-a04a-abaf324f57b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.204.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:b9:31:70:89:75:6b:b8:71:41:82:c1:9c:24:cd:1b:3c:c8:
         99:f9:83:9f:11:ef:b2:ee:d2:c1:85:fb:2c:07:90:1a:9c:6b:
         06:cf:e3:80:fa:c8:62:20:4d:c9:80:5a:5a:3e:0e:39:eb:28:
         69:57:b1:93:8a:3b:75:a3:8c:7d:2a:fe:7b:c8:6a:4f:7f:00:
         08:c1:23:b0:b9:93:2e:c5:5f:92:cc:bc:03:d3:5d:ff:61:c5:
         7e:b9:28:0c:bb:77:1c:fc:c7:98:1c:b2:a4:43:cb:c2:22:93:
         fa:76:13:7c:4e:4e:e2:81:62:15:33:e3:3e:3f:ab:65:ad:ea:
         90:f0:71:61:79:7c:de:3a:56:d9:ad:99:e1:56:70:ee:ea:d2:
         fb:07:b1:11:bc:5a:03:d9:63:3d:e1:d0:5b:1e:77:fc:cc:09:
         b8:5a:5c:14:fa:95:12:1f:c1:00:7f:59:78:c5:fd:8d:5f:fd:
         23:88:18:44:1a:94:1a:38:eb:c1:93:d7:01:09:f0:00:fa:a6:
         7c:d5:60:f7:f2:d5:d9:f8:df:17:bf:97:b6:92:85:cb:de:e0:
         f2:23:c5:b1:95:38:99:ad:e4:b1:9d:c1:92:15:91:3a:d3:48:
         40:e5:7c:c4:62:71:fe:77:19:cd:e1:da:46:b5:f5:06:bd:8d:
         44:2b:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:14:12 2025 by rpki-client