Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/42b97ea8-9b26-3084-8159-147a9b9273c6.roa
File:                     42b97ea8-9b26-3084-8159-147a9b9273c6.roa (raw, json)
Hash identifier:          oGpYuhV+7n7rsVV/4At9wUrAdf6yNAavm9dH7R51Bfs=
Subject key identifier:   3E:B8:D6:EB:CD:1F:2F:AD:C1:EB:E7:A3:68:2B:BE:F0:CE:CB:0F:DC
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584ADD6681610AF85ABFFDFDA4C0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/42b97ea8-9b26-3084-8159-147a9b9273c6.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     52286
IP address blocks:        63.245.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:81:61:0a:f8:5a:bf:fd:fd:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=cf15e807-a583-4a03-8f41-2a602347a670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:12:89:82:aa:c2:43:3f:39:67:48:e4:a1:
                    a8:be:05:6a:fd:cc:54:77:c6:42:b5:e1:e1:54:96:
                    ca:63:d9:20:d5:fc:c5:ae:ef:e1:09:8e:0c:09:2f:
                    1b:8c:6d:62:ea:f7:a1:d5:fc:e5:7f:35:42:46:2b:
                    3e:14:6c:ba:5a:6e:8a:9b:0b:fd:17:ed:25:26:e0:
                    91:2e:9a:50:43:0d:e5:bf:d0:20:f8:57:ca:2e:9f:
                    24:5e:77:53:9c:0c:fe:ee:25:61:70:30:3d:96:ae:
                    49:f3:89:8b:16:9b:02:a4:54:c0:1b:ae:8d:da:d7:
                    a6:39:c8:64:a4:0c:ae:6c:66:53:ef:5c:6e:7e:23:
                    ee:42:03:f8:ab:21:0f:d4:cd:79:a9:46:ba:db:f5:
                    c4:61:2d:a3:6b:de:d5:1d:c9:4e:65:6e:a4:68:41:
                    da:9f:fd:1a:28:cc:24:78:5a:22:3c:d8:07:8d:64:
                    37:7c:31:22:3b:2d:0b:8d:85:da:02:a7:71:e3:d2:
                    79:9c:9b:03:76:d5:ce:d8:ab:e6:39:64:73:ba:a2:
                    d7:86:18:1e:0e:5b:08:b2:7b:1f:fb:12:0d:89:d3:
                    4f:17:a8:38:94:4c:ea:19:29:aa:86:6e:7d:7a:ca:
                    6d:a6:d3:11:c4:d8:9e:be:dd:1f:69:9b:95:58:9c:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B8:D6:EB:CD:1F:2F:AD:C1:EB:E7:A3:68:2B:BE:F0:CE:CB:0F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/42b97ea8-9b26-3084-8159-147a9b9273c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:1b:d4:63:59:91:48:8d:6b:15:0f:dc:13:73:ce:ef:73:67:
         57:91:f8:5b:b0:f0:23:42:88:f8:89:de:ce:bc:94:e7:24:95:
         84:d5:ee:f7:0e:4d:4a:eb:de:3a:a5:9c:fb:d4:d2:93:e6:60:
         6b:6c:5c:a3:ef:a7:52:d3:55:d7:dc:cf:18:a1:5f:24:ed:25:
         5a:0a:75:16:a1:ef:50:2f:ab:dc:85:39:4e:e8:3a:f5:70:90:
         ba:33:0a:79:41:54:15:f2:02:c7:37:6b:3e:d4:0e:86:28:d8:
         93:cc:42:1c:4c:92:4f:2c:95:a5:e9:48:70:00:ed:87:48:25:
         7d:d2:0b:77:6e:bb:9e:66:e4:80:31:ae:92:5c:d4:74:09:f6:
         53:d4:00:48:49:ca:3c:ea:bf:97:29:8c:d1:19:92:a0:5c:03:
         4c:38:50:70:17:2f:e8:e2:da:fc:19:d2:34:a8:e6:b2:11:7a:
         ca:cf:6c:0e:5f:f5:75:48:ee:be:12:d3:f0:a5:1f:3b:89:e3:
         cd:c3:43:5e:b2:96:48:99:f2:6f:53:f1:8d:bb:a1:3e:52:cb:
         db:cd:f8:c4:ea:6e:bb:7e:0d:16:71:b2:32:f4:fc:b2:a1:c6:
         58:5b:fd:95:e4:b4:3d:28:55:3a:87:c3:a8:69:13:cf:0b:92:
         f8:4e:18:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:33:02 2025 by rpki-client