Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ae4515b9-d128-357f-b173-4215cf949671.roa
File:                     ae4515b9-d128-357f-b173-4215cf949671.roa (raw, json)
Hash identifier:          auACZ8lfGil5/LD2+at6DSg1NDhmv97KJcF8HflKko0=
Subject key identifier:   04:44:09:26:71:AB:D5:89:9C:3E:38:FC:0E:DC:58:A6:A7:E9:6F:5F
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584B52A7523898E4DFAA80DECF40
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ae4515b9-d128-357f-b173-4215cf949671.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     11090
IP address blocks:        63.135.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:52:38:98:e4:df:aa:80:de:cf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=964aa01e-8f77-4f2a-ae63-f51d547262e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:95:37:f9:35:30:b7:58:b2:e9:cd:e5:f6:55:
                    46:5f:b3:c0:00:5b:2f:c1:54:44:35:74:06:91:7b:
                    fd:5c:4d:93:3f:20:86:77:4e:25:25:58:1d:18:48:
                    91:69:ba:3e:5f:ed:28:c4:0a:c7:8c:3c:d3:34:06:
                    97:b0:ed:a1:a2:fc:6d:6a:98:d9:8a:d9:1c:23:93:
                    a8:ec:71:3f:d9:28:d0:9d:e3:e1:2d:ed:bd:a3:1c:
                    5f:cb:74:d7:31:9f:76:5c:36:8c:c7:9f:33:53:a7:
                    7c:ce:9b:af:0a:4c:e5:f1:3e:4d:19:22:ca:f2:b2:
                    33:5a:45:86:1f:85:c1:f6:38:68:41:f3:bf:ac:f0:
                    73:e6:d8:ee:3d:fb:5a:20:b2:7b:e5:6c:61:dc:a6:
                    63:75:b2:c1:a0:96:19:13:14:f7:55:97:5e:51:bf:
                    39:f0:54:43:21:c7:9d:b8:c5:67:01:44:b9:bf:03:
                    f6:fb:28:19:c9:f5:9b:19:af:5e:15:d4:72:37:a6:
                    44:f8:19:6c:e1:db:36:6e:b8:fd:ca:b5:e0:c4:60:
                    4c:23:e1:d6:56:a5:98:3b:47:1c:1c:30:cf:c4:69:
                    a7:f6:c4:d8:0f:a1:ef:bc:7a:22:22:23:ee:52:bd:
                    89:f0:1d:ee:d3:f5:e2:b2:a9:a2:19:e5:5a:b9:e7:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:44:09:26:71:AB:D5:89:9C:3E:38:FC:0E:DC:58:A6:A7:E9:6F:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ae4515b9-d128-357f-b173-4215cf949671.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:1d:fc:ec:bb:c1:3a:47:63:ec:e1:ba:d2:00:be:e7:0b:d2:
         e8:64:c9:5d:75:2e:9f:50:9c:e7:78:fc:bd:31:fd:2d:45:7b:
         42:bd:09:17:c4:70:41:d8:e2:56:62:2e:e6:9b:4d:e6:94:e0:
         ba:8c:c3:99:c0:a1:ee:b0:00:ad:78:b9:0a:d3:bd:82:77:18:
         b6:ec:d8:fc:d1:da:87:ba:10:66:14:9a:f4:93:fa:49:5e:38:
         08:7b:37:0f:f5:c0:6f:b4:10:6a:83:5f:de:6e:1e:7e:b6:d6:
         ff:91:1f:40:57:48:2f:5b:11:a1:78:f0:cf:4c:be:28:bc:bc:
         1a:99:8e:a1:ad:9b:1a:c2:5e:0e:42:2c:43:f0:8d:8f:1a:bf:
         37:64:71:1e:1c:85:b8:ec:91:24:d5:55:3c:c9:3a:d5:ae:52:
         84:4d:c0:35:fc:55:c6:7c:ca:fe:f8:55:13:e6:26:85:2d:6d:
         92:7d:e9:69:24:6c:06:76:bc:51:7e:bf:8e:70:f1:0a:1d:12:
         fa:2e:cc:97:e6:3d:05:ff:a2:b6:f5:3c:97:33:36:72:f5:08:
         67:fe:69:fd:5c:1c:95:ce:f8:b6:e1:4c:c3:ae:61:29:75:8e:
         03:6c:5b:d2:1f:ee:77:46:f3:d2:d5:48:1e:24:bf:49:2c:68:
         db:b9:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:43:55 2025 by rpki-client