Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa
File:                     aa20e92c-ef1d-3334-9d2a-c581e247163f.roa (raw, json)
Hash identifier:          bkMp+iLpdRZXjLyJ2YPhdGWboPdY2VLggW/mE2MlqX8=
Subject key identifier:   B9:F8:99:1F:78:3A:5D:76:ED:50:4F:ED:C6:84:00:0E:7F:82:19:94
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AC2E0E7A614A794F093C0E160
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     198148
IP address blocks:        63.222.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e7:a6:14:a7:94:f0:93:c0:e1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=629832eb-2066-4884-b898-a065296cec1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:25:e3:95:aa:0e:be:05:f5:01:01:e1:de:
                    8a:42:07:54:f0:aa:cd:e5:e7:06:71:5e:11:25:7e:
                    3e:62:bb:8b:fe:69:68:f8:af:66:06:0f:83:5e:83:
                    b7:fe:2b:d5:fa:0e:d0:26:f1:d5:0a:16:77:f5:f4:
                    39:33:91:57:ba:db:89:02:84:ab:99:be:58:71:ca:
                    36:64:02:ad:d1:00:40:a0:09:96:4d:15:85:d9:be:
                    ff:2b:71:f8:74:d1:5b:12:65:db:29:02:cb:94:0f:
                    6e:d5:dd:b2:51:bc:7d:6f:95:54:dd:ec:4c:72:14:
                    75:31:bf:b5:29:03:15:64:bd:cd:e5:0b:0b:97:3e:
                    5d:d5:88:01:84:20:19:77:81:b1:c3:e4:3f:c8:df:
                    21:9c:37:43:9d:94:f8:c7:64:cb:4d:db:59:d7:0f:
                    32:b3:f3:2f:a2:1b:d2:c4:32:86:17:00:b3:7f:11:
                    4a:32:bb:c8:1c:1c:1e:b0:f7:cf:90:df:d8:fa:5b:
                    7d:cf:78:9b:3d:d2:d9:43:2e:81:0a:01:a9:7f:13:
                    35:31:42:b7:6d:47:8d:eb:b1:cc:6c:3f:f8:82:75:
                    2e:5b:75:8c:90:6a:81:ed:e3:73:97:77:be:52:03:
                    68:47:97:87:b8:ab:8b:b4:e9:1b:52:3b:db:e3:19:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F8:99:1F:78:3A:5D:76:ED:50:4F:ED:C6:84:00:0E:7F:82:19:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/aa20e92c-ef1d-3334-9d2a-c581e247163f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:55:bc:7d:9b:26:c3:4b:1d:c8:35:cb:8d:7c:ff:80:49:41:
         00:1d:61:19:b8:0c:ac:df:6a:00:47:0b:99:2b:10:82:98:cf:
         1f:4e:ee:1c:87:cf:42:d6:98:5d:26:d9:eb:80:72:3e:a2:fc:
         5a:c9:f6:93:1a:8d:e2:ae:b4:6c:73:e2:7f:f8:67:41:5c:db:
         4d:93:f4:2a:3e:7a:31:fb:d8:f3:fc:1e:88:e1:25:46:0e:56:
         6e:e1:75:b5:2f:e2:5d:34:3e:7a:1e:51:aa:6a:24:26:1c:16:
         40:6f:d7:56:4c:68:67:4c:ed:bc:0b:31:70:9b:f1:16:4a:4b:
         4a:d4:b8:da:ef:eb:85:56:ac:87:12:c0:7d:ba:7e:bf:4e:7e:
         48:68:16:78:f6:46:53:5a:3d:7b:4b:57:9a:a1:f3:21:b9:54:
         dc:0a:60:1c:f3:09:1b:46:6f:8f:16:5d:ac:c9:e2:3b:2a:c2:
         b0:f6:51:89:50:51:8c:f9:9c:33:a6:bd:76:58:6f:03:9d:11:
         db:84:86:83:f7:1d:3c:78:e8:e6:35:4c:b8:62:93:1e:8f:d7:
         52:1f:c2:b4:a9:1b:c7:5b:bc:fb:fd:aa:1c:87:fe:0d:d5:66:
         7d:53:a6:ce:b8:a8:d1:c7:cc:9b:fd:69:18:58:d0:bf:96:57:
         e3:9b:6a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:55:40 2025 by rpki-client