Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
File:                     63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa (raw, json)
Hash identifier:          u5WcsL0JqbxlLpD8q7Xw0xlIugC3q7jwap/qS9oklfY=
Subject key identifier:   B2:A3:CB:81:19:3C:18:40:B7:51:54:6A:58:37:41:85:13:5D:7E:E7
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584ADD666D44B3126AB1F940C680
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     20299
IP address blocks:        65.182.8.0/24 maxlen: 24
                          65.182.31.0/24 maxlen: 24
                          200.12.224.0/24 maxlen: 24
                          200.12.225.0/24 maxlen: 24
                          200.12.231.0/24 maxlen: 24
                          205.211.192.0/22 maxlen: 24
                          205.211.196.0/22 maxlen: 24
                          205.211.200.0/22 maxlen: 24
                          205.211.204.0/22 maxlen: 24
                          205.211.218.0/23 maxlen: 24
                          205.211.220.0/24 maxlen: 24
                          205.211.221.0/24 maxlen: 24
                          205.211.224.0/24 maxlen: 24
                          205.211.233.0/24 maxlen: 24
                          205.211.234.0/24 maxlen: 24
                          205.211.244.0/22 maxlen: 24
                          205.211.248.0/21 maxlen: 24
                          208.96.140.0/24 maxlen: 24
                          208.96.141.0/24 maxlen: 24
                          208.96.143.0/24 maxlen: 24
                          209.124.96.0/24 maxlen: 24
                          209.124.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6d:44:b3:12:6a:b1:f9:40:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=de204e6f-6970-4269-99d0-e35cc287ae52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:7c:96:ac:c5:42:64:05:6d:05:cd:9f:a9:
                    74:bf:0d:58:a3:37:0e:32:5c:35:30:fd:aa:d4:13:
                    f9:2b:a2:ea:6c:0b:9c:93:46:3f:58:cd:a4:b0:f6:
                    26:ea:52:21:98:a8:9e:6a:ff:a1:ff:ae:35:d7:44:
                    34:2f:33:e2:21:05:03:a9:82:c0:5a:12:b7:ee:77:
                    50:6e:c3:4e:65:5c:af:cc:9d:ea:3b:77:f2:c9:62:
                    1d:a9:8f:cf:8d:e5:cd:0c:7e:bc:08:3b:fe:f6:e2:
                    c4:bc:53:b5:ae:aa:26:5d:5c:88:eb:15:2b:5d:41:
                    25:9c:4c:c2:b8:ca:ac:99:ae:bf:32:6c:4d:01:80:
                    41:16:a0:fc:80:1a:8f:84:8e:9c:91:47:af:46:c7:
                    0d:eb:bd:92:ba:42:4a:61:98:c3:97:50:16:ce:92:
                    15:3e:fe:de:69:fd:8a:a5:82:1c:f1:2c:c3:e7:49:
                    7d:33:af:9b:6f:0c:c1:04:fc:25:67:13:c1:53:3e:
                    59:59:d9:c1:8d:82:31:71:6d:fc:e8:76:09:99:dd:
                    c1:f4:1f:49:73:99:bb:52:c7:15:14:4e:7a:66:90:
                    4a:e5:cc:a2:08:4a:e1:37:22:7b:11:68:98:64:3b:
                    68:64:7b:92:7f:c3:d7:f0:fa:c4:24:32:97:f2:f3:
                    fc:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A3:CB:81:19:3C:18:40:B7:51:54:6A:58:37:41:85:13:5D:7E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/63f893e9-f16a-3c41-ba4a-bedd0b845a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.8.0/24
                  65.182.31.0/24
                  200.12.224.0/23
                  200.12.231.0/24
                  205.211.192.0/20
                  205.211.218.0-205.211.221.255
                  205.211.224.0/24
                  205.211.233.0-205.211.234.255
                  205.211.244.0-205.211.255.255
                  208.96.140.0/23
                  208.96.143.0/24
                  209.124.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:e8:92:10:d4:f3:c1:15:c0:0a:73:c8:57:c9:68:ac:c9:31:
         8b:7f:97:d4:32:81:2b:48:bf:4e:0f:65:2d:6b:b4:43:28:0e:
         ac:49:48:47:56:62:2c:a2:c5:8b:ca:78:13:d7:c2:a5:90:b4:
         54:30:65:ce:d8:97:e7:83:c5:10:f4:63:96:f0:f8:d1:c6:24:
         96:24:50:bd:73:83:dd:99:e3:90:a0:51:43:6f:23:46:b6:b4:
         de:0c:dc:35:98:98:c3:51:7e:56:01:3c:f2:57:38:da:8e:12:
         72:c8:1a:32:d9:62:05:6c:db:0b:93:66:4d:be:41:bf:99:ce:
         73:ff:8d:74:92:fa:fe:d1:79:a5:3c:cd:f6:dd:51:a7:53:1a:
         3d:cc:26:3f:d1:06:f3:e5:10:43:9b:dd:d2:ca:6a:b1:ad:7d:
         25:e2:82:3b:dd:bd:18:71:c7:77:35:f2:5a:3a:5e:f2:aa:0b:
         c1:da:09:2c:f2:92:a9:7a:99:00:46:3a:f6:ce:3c:d6:aa:c7:
         c7:16:37:80:23:4f:c4:13:e4:9f:66:58:af:e1:aa:7e:cf:b7:
         9a:b1:e7:53:3e:b2:96:ca:cd:a6:34:5f:0d:b7:15:18:c3:5c:
         6f:b6:aa:aa:a8:ff:c6:f4:0f:a0:81:5b:cf:fd:4c:cc:42:d2:
         95:ee:35:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:02:46 2025 by rpki-client