Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/02bb3acc-9650-3879-b0c7-87f11279aa37.roa
File:                     02bb3acc-9650-3879-b0c7-87f11279aa37.roa (raw, json)
Hash identifier:          K+vmP07gFof8eqq82vW74P7zsyHhvW0biHnGlu7iOVk=
Subject key identifier:   CB:5D:39:0E:28:3C:D0:50:CE:DB:DD:BC:FF:9C:BC:BF:50:E0:0E:CC
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584ADECBB6630B7E9ECECFA9D3C0
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/02bb3acc-9650-3879-b0c7-87f11279aa37.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     396922
IP address blocks:        63.160.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:b6:63:0b:7e:9e:ce:cf:a9:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=b770421e-7e1f-4489-bfd7-b5fce6c1b50b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:c4:0f:52:85:e2:b5:63:fa:f1:d5:ef:a3:
                    ff:e8:44:57:7f:f9:16:2c:15:17:05:cc:3b:a2:f5:
                    3c:43:65:bd:c8:e5:e4:fb:b2:02:65:84:f8:87:73:
                    ee:77:63:42:33:56:60:bf:34:ba:e8:61:a0:5d:02:
                    85:28:97:e4:28:c5:ea:10:3d:1d:9f:0b:b6:81:0d:
                    12:ed:ee:77:0f:d3:85:a8:01:40:36:f1:9f:80:06:
                    08:f5:a4:cd:f4:d2:56:05:c1:39:af:7c:7c:f5:ef:
                    bc:fb:4b:29:9d:f6:0f:d3:8c:f3:61:f7:fb:af:17:
                    6f:26:df:ac:7c:88:0c:d3:7e:59:62:5e:f9:72:cd:
                    b0:75:9b:67:7c:8f:a5:78:2f:2d:19:68:da:bb:c6:
                    e3:1d:f4:1a:7f:c2:70:45:c0:22:c2:0c:5f:fa:ad:
                    d8:46:ad:72:54:cf:5f:ce:9a:fe:b0:22:ad:e8:81:
                    fa:15:41:61:ee:01:9b:b8:32:98:54:a0:39:b1:ea:
                    16:c7:33:ed:d4:5e:45:af:75:b2:e2:45:89:52:05:
                    fb:4e:32:1f:7d:61:ce:a1:8c:7a:c0:f8:6d:9a:ce:
                    b6:d5:6a:75:07:b4:e6:d6:5d:70:cd:a5:5b:e2:c3:
                    d1:34:85:4e:da:4b:e5:38:0d:5a:b0:ca:ca:34:1d:
                    f7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5D:39:0E:28:3C:D0:50:CE:DB:DD:BC:FF:9C:BC:BF:50:E0:0E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/02bb3acc-9650-3879-b0c7-87f11279aa37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:54:42:31:23:02:66:f2:7e:12:d3:65:5d:da:36:dd:04:
         ba:66:f8:81:17:49:7e:ee:0d:43:85:87:b0:0b:ed:2e:83:4e:
         19:e1:02:1a:d5:f3:01:f9:27:1e:05:e3:a5:9a:8e:54:40:77:
         16:f0:75:c7:d5:63:27:9e:af:ee:b6:96:f7:c3:41:78:bd:ca:
         04:2a:29:f5:05:b2:55:b2:73:e9:53:12:4a:9d:2f:d6:4c:8a:
         2b:3e:0c:54:f5:a5:86:27:bf:32:d6:d3:33:19:e8:81:8b:cf:
         4b:51:8f:05:72:f3:15:99:e9:77:ff:15:04:a8:17:2b:79:60:
         dc:14:73:c4:4a:b6:31:71:dd:06:66:27:b8:83:26:3d:41:ed:
         66:88:d4:f4:eb:6a:99:71:d0:1d:4c:b7:94:54:4d:4a:6f:03:
         f6:0c:4e:8b:3f:7d:28:ba:0e:92:64:61:1b:51:92:d1:2a:1f:
         79:69:3f:a4:af:7a:f9:5e:70:7b:92:f7:c7:6e:8b:5f:44:00:
         ba:36:91:bb:9b:19:81:be:ea:df:05:15:e0:5b:28:6a:51:03:
         a9:2a:07:b3:d7:fe:02:d4:aa:b0:63:6e:8a:0b:5d:38:26:18:
         eb:9d:34:08:34:c2:31:17:e5:45:36:dc:82:65:1b:8f:42:d3:
         a8:ac:af:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:17:18 2025 by rpki-client