Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e2af8c73-9e4e-3ac9-b847-7032e638546e.roa
File:                     e2af8c73-9e4e-3ac9-b847-7032e638546e.roa (raw, json)
Hash identifier:          dxpyOIRJjBB//LPNLehP9h9AT0bxs6VesWC3GIy6m7Q=
Subject key identifier:   63:68:E7:32:33:4D:AF:F8:93:0F:A6:10:AB:74:83:4B:2B:A2:39:96
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B944226F70E260ECC76555D20
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e2af8c73-9e4e-3ac9-b847-7032e638546e.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     13683
IP address blocks:        63.239.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:26:f7:0e:26:0e:cc:76:55:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=144a9ef3-5ca6-4bba-bb93-41de0b1f4487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:0e:9d:40:a2:58:68:69:2a:ce:57:61:41:
                    37:84:3e:13:2f:6a:2a:44:22:4c:b7:30:ff:09:4d:
                    75:8d:68:46:40:91:71:c1:55:3d:70:64:e2:5a:bd:
                    18:12:eb:37:25:f4:d2:35:41:c0:c6:17:d9:c4:4e:
                    a9:51:9d:59:dd:b2:0f:45:c7:6b:40:d5:9b:6a:5f:
                    53:e8:6d:69:62:c9:90:03:b9:35:92:dd:be:8b:a2:
                    38:1e:5b:8c:56:15:a5:90:52:27:4b:00:67:96:54:
                    88:d2:64:19:df:26:1f:7a:33:0a:08:9f:8b:c6:08:
                    a0:5d:6d:19:58:2e:74:86:54:7b:ea:66:77:63:c1:
                    48:05:43:c4:67:bd:8c:ba:d0:16:2d:a0:2e:49:8d:
                    55:0a:67:46:e1:40:18:69:39:52:96:12:fb:22:e3:
                    76:a6:9e:8b:29:12:97:a8:c1:5f:db:4d:5b:2c:e0:
                    a4:93:d2:b0:f4:2b:55:65:bb:11:e6:fd:77:da:e5:
                    3c:0c:21:0f:f2:57:56:af:95:88:5e:5c:e7:9a:bc:
                    6e:e7:5b:1e:11:52:71:f6:fd:0b:df:b3:d9:54:f0:
                    99:16:53:07:91:11:65:ab:fe:01:33:dd:83:a3:91:
                    73:5e:fe:29:da:51:89:1a:9b:6c:72:bf:ad:7b:b3:
                    7d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:68:E7:32:33:4D:AF:F8:93:0F:A6:10:AB:74:83:4B:2B:A2:39:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e2af8c73-9e4e-3ac9-b847-7032e638546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.239.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:0e:a7:28:8b:5d:bb:ae:51:a8:81:c4:5a:14:9f:7f:f7:
         14:88:86:17:df:8e:57:5a:c5:b8:59:ed:35:fa:26:a5:b4:95:
         74:e4:3e:0e:c9:1b:7a:26:3c:59:4b:67:2b:1d:7d:fc:92:85:
         37:09:40:34:fd:77:c3:af:15:58:bd:c0:e7:7f:be:d7:23:f2:
         c1:df:0b:89:82:e5:51:f0:6b:f4:ba:2a:1d:da:5c:78:40:e6:
         65:15:45:6b:c6:52:9c:db:01:2a:6f:aa:91:a2:fb:3b:84:97:
         49:73:9b:da:01:80:44:d0:01:43:82:09:43:9b:df:2e:f7:dc:
         3d:87:88:8a:12:41:bc:60:e7:34:89:8e:43:a9:d5:50:18:eb:
         7d:6c:c2:14:fa:51:c8:f0:bc:cf:ba:c8:58:69:a7:e7:22:45:
         76:40:8c:75:8d:63:fc:97:41:10:47:49:ba:9c:b3:44:88:21:
         90:bd:6b:e6:d9:a8:7f:fd:b3:d3:0c:b1:8b:c6:be:77:24:0a:
         5f:e4:6b:f2:b2:7f:34:56:90:85:17:e9:63:a8:73:60:f2:4b:
         bf:95:a3:bb:18:f9:6d:d0:e7:5a:86:0b:7b:24:0e:2d:0b:e4:
         e9:be:70:4f:92:51:32:03:4e:92:78:47:18:b0:cc:ba:12:7d:
         cf:69:dc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:42:41 2025 by rpki-client