Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
File:                     3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa (raw, json)
Hash identifier:          RSi1EYakQEl22+rkZVK1iMfP9U1Nhz44EnFSNIq5UoM=
Subject key identifier:   5D:82:A7:98:CA:DC:DB:0A:A2:41:5D:4B:E0:B8:30:8F:57:3F:40:13
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584B76F22A6CE9CE1D5A58D47100
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     23520
IP address blocks:        63.245.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:2a:6c:e9:ce:1d:5a:58:d4:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=7a3d8b43-0f16-4b64-bc45-d2eb2922e094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:25:0e:27:89:50:0b:a0:d4:eb:6f:23:d3:
                    af:25:b6:ef:70:db:64:51:cb:73:a2:ce:d4:8e:c5:
                    a1:2a:a8:8d:b4:10:3e:1c:96:05:16:aa:b5:74:42:
                    a2:bd:de:09:2e:f8:20:f9:fb:fc:80:e4:ae:18:9e:
                    5d:a9:3c:06:48:b7:7f:17:ea:c9:fe:bb:ab:10:0b:
                    46:0e:f9:4a:99:6e:a1:f9:23:51:ca:1f:39:4a:b7:
                    60:05:4b:ea:84:00:53:37:98:da:a1:62:5c:46:d9:
                    4c:9f:a1:04:ff:a8:45:60:8e:82:5f:de:9a:ca:c4:
                    7d:43:39:77:63:f0:8d:ef:84:ad:9e:86:a3:a5:56:
                    82:c8:93:04:6f:6f:f2:89:ec:cd:2d:3b:bc:ff:03:
                    ed:88:f2:05:6a:07:82:63:95:03:9e:be:1f:d0:89:
                    4e:fe:c2:8e:40:6b:f1:7e:96:9e:ec:28:1a:f6:1a:
                    3d:45:18:2e:0f:52:c5:cc:ac:e8:d3:56:d3:88:f4:
                    77:07:15:2e:ec:ef:69:b3:82:9b:c2:29:07:4f:04:
                    c4:35:97:23:ba:b7:6c:db:3a:61:60:b2:5a:69:d4:
                    41:c5:b3:8b:85:d0:4b:07:81:bd:1c:28:12:46:11:
                    91:7d:8b:6b:1f:df:5b:63:8c:19:e5:e6:c4:98:65:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:82:A7:98:CA:DC:DB:0A:A2:41:5D:4B:E0:B8:30:8F:57:3F:40:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:87:fe:da:9b:02:a2:c1:97:4f:20:95:e3:d2:9c:e3:e0:29:
         bc:cb:a0:0d:c7:29:69:fd:20:6e:38:99:3d:ab:32:de:74:42:
         e5:3f:a7:2d:c0:b3:6a:35:8e:16:19:97:cf:9a:b4:d7:85:6f:
         ce:fb:75:6a:ca:60:c0:bf:76:24:3c:1d:56:62:73:d2:24:27:
         3c:01:c3:11:a8:aa:6e:b5:2d:5d:c0:29:2a:0a:c4:ae:f3:ea:
         53:92:57:92:b2:d0:60:68:34:03:54:ce:ca:0a:16:c8:11:73:
         70:08:7c:b8:ee:2a:8f:cf:f7:77:8d:c6:bf:96:ba:dc:e7:34:
         c7:f8:31:93:c7:25:2c:c4:e8:6f:89:a4:d1:fe:c7:ec:84:fe:
         c4:4d:d1:4f:59:af:63:cd:99:b2:e7:70:30:c9:f5:64:81:fd:
         12:78:b4:d9:66:a9:aa:a1:ac:d5:40:90:8b:d9:05:d7:73:d7:
         42:1a:b3:01:49:a7:e8:bd:2c:98:c2:38:fe:16:39:2f:e1:d9:
         5c:41:bb:e4:3b:09:48:87:82:61:bc:2b:67:7c:f4:6e:13:69:
         25:d8:0a:22:e2:ec:3c:ae:05:11:e2:f5:df:1f:44:3d:24:5e:
         2c:2b:43:e6:5b:18:fd:a5:88:24:4f:ef:ed:2f:18:60:50:42:
         78:b0:ff:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:44:47 2025 by rpki-client