Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa
File:                     e22cc87a-26d1-352c-a851-40ac9097a36b.roa (raw, json)
Hash identifier:          OElnysXLNz4QxpoGZVj9V+jAwDeU55OyaIlunFHffO4=
Subject key identifier:   5B:BE:1D:4E:98:74:6F:E5:87:02:95:83:FB:C2:D0:13:E1:75:1D:4C
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584AC2E0F4C2CDDDB4DD0E150680
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        64.112.112.0/24 maxlen: 24
                          64.112.113.0/24 maxlen: 24
                          64.112.114.0/24 maxlen: 24
                          64.112.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:f4:c2:cd:dd:b4:dd:0e:15:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=e5f4f269-82d8-48a7-8706-7a15be32af89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:c2:0e:54:16:2b:dc:bc:3a:77:8f:ed:a7:
                    94:7c:7f:bd:76:ac:c9:6b:a1:a8:83:81:57:3e:51:
                    31:b3:13:a0:57:28:04:41:e0:d6:c0:eb:62:54:fe:
                    93:8f:01:7f:d1:58:f3:2a:95:41:a1:9b:58:f1:f9:
                    9d:2a:f3:36:ae:64:fb:1f:f9:25:5e:a6:90:aa:19:
                    8d:f2:e7:ec:f3:64:21:59:0d:cd:5c:34:6f:55:8c:
                    c8:69:e5:b1:40:ac:6c:5b:15:cc:e5:a9:18:84:98:
                    fa:96:01:35:d1:9c:b9:c6:06:2e:f4:0d:a8:8c:e3:
                    59:0d:55:27:ec:cd:bd:a0:d4:0c:35:c8:5a:13:ef:
                    cc:e0:da:88:ad:b3:18:a8:fe:29:aa:0d:e5:ef:0f:
                    e7:77:89:32:df:9d:27:f7:1d:1f:ae:cc:f9:79:6e:
                    0e:2d:aa:5e:40:40:9e:dd:aa:cf:23:2c:12:25:5c:
                    ee:3a:e2:73:5e:e9:19:5f:c3:18:e7:86:1b:ef:a6:
                    44:30:21:35:b6:90:7d:76:e8:e7:e9:98:ec:28:cd:
                    da:67:47:b9:77:45:bf:b7:87:3d:46:c0:ae:d0:f6:
                    80:50:c2:04:37:34:1c:fa:e8:d6:c7:3d:3c:c8:7f:
                    9c:d5:c4:8f:9c:eb:8c:b3:e6:7a:72:0c:02:6f:34:
                    7b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:1D:4E:98:74:6F:E5:87:02:95:83:FB:C2:D0:13:E1:75:1D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/e22cc87a-26d1-352c-a851-40ac9097a36b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:60:42:04:2b:3f:46:c3:13:cf:34:98:36:9e:1f:ee:c7:84:
         8f:a8:e8:60:f9:33:31:47:75:27:ee:9d:ce:d3:ea:4b:56:2f:
         16:e2:ce:4d:92:5c:c3:34:c6:24:b8:eb:ca:41:2b:e6:76:e5:
         75:60:c8:08:e4:9b:de:89:29:9a:73:85:cb:0e:09:bb:d5:35:
         34:d2:8f:60:08:79:fa:2f:fa:df:e3:d1:1a:52:52:95:a1:4b:
         9e:15:a8:dd:58:2a:dc:20:4d:8b:20:f7:25:5a:f8:fd:55:8a:
         0c:d9:be:ab:39:13:ee:64:d3:52:c2:3f:42:29:f5:88:e4:b6:
         eb:a3:44:09:d1:fe:84:e8:22:c9:e2:21:f3:bf:4b:3e:ab:81:
         17:ea:3a:2c:71:e1:04:f6:87:96:56:87:cd:5f:7f:2a:fa:24:
         e0:82:73:5b:2f:dc:c9:aa:d5:af:8d:0e:72:d0:b8:f2:05:2e:
         6c:6e:36:89:fa:1a:40:0d:f7:a3:df:0e:79:db:0f:67:8c:d9:
         60:ef:be:6f:e3:2e:51:57:6a:a0:28:72:26:98:fa:b9:86:0d:
         3c:e4:5d:79:4e:bb:2a:51:d6:c3:84:4a:20:30:fb:24:46:c9:
         00:50:ef:4e:bf:82:74:13:eb:7e:c2:31:2d:47:1f:47:ef:61:
         5c:9e:c4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:14:10 2025 by rpki-client