Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/2138a40e-1c46-3884-b1b0-687cb915d88f.roa
File:                     2138a40e-1c46-3884-b1b0-687cb915d88f.roa (raw, json)
Hash identifier:          vyDlveA6LRnUUFGlyerXB+d95wp9Jv104NDzkRnsq8c=
Subject key identifier:   E5:81:4A:2D:9C:88:95:AE:D0:87:6B:B0:A1:0A:E9:AA:81:B9:21:85
Certificate issuer:       /CN=e8a5a257-a121-41de-b0be-6ab191fc4486
Certificate serial:       010D0C9F4328584B5141EEE5378803FD7D1A9A40
Authority key identifier: 32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/2138a40e-1c46-3884-b1b0-687cb915d88f.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     32709
IP address blocks:        63.134.128.0/19 maxlen: 24
                          63.134.160.0/20 maxlen: 24
                          63.134.176.0/21 maxlen: 24
                          63.134.184.0/23 maxlen: 24
                          63.134.187.0/24 maxlen: 24
                          63.134.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:ee:e5:37:88:03:fd:7d:1a:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8a5a257-a121-41de-b0be-6ab191fc4486
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=84d08df7-a40b-48e2-b84f-672f43527f4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cb:f2:36:14:b0:98:3f:ea:a6:79:17:fc:7e:
                    e0:e7:3f:5b:76:ee:84:63:71:59:c4:70:18:92:dd:
                    3e:4e:ac:6f:0b:2f:ac:df:a4:55:c8:e8:05:09:13:
                    dc:e7:8b:0c:d4:4f:df:b3:56:e7:ec:61:86:5b:06:
                    36:23:63:c9:68:c1:d6:c8:c6:f5:79:fc:ff:9b:74:
                    1a:6d:fc:df:84:2b:0e:1c:40:df:3a:6b:db:e7:e7:
                    38:89:a1:f9:de:7b:3c:a0:18:58:d1:28:d8:52:be:
                    3d:6f:9f:35:60:bf:d3:a2:43:f8:01:7d:82:67:37:
                    7d:83:e6:64:b9:f5:37:4c:13:91:10:27:05:e9:25:
                    5a:dc:3d:20:80:ec:b7:3a:8f:2f:75:0e:71:e6:38:
                    e6:8c:2b:a2:df:61:1b:dd:81:a7:5e:38:dc:4a:43:
                    21:23:ae:5b:8a:35:84:35:04:83:09:e3:50:f2:41:
                    71:2d:e6:2e:1a:08:1e:a9:e8:af:aa:5d:c6:b9:5e:
                    c4:bc:f5:24:08:f9:8e:7d:f5:db:8b:49:8e:0d:cf:
                    5b:6c:08:1e:66:ef:49:61:db:94:8f:6a:51:86:87:
                    a6:ea:17:65:b2:5a:4e:d1:6e:6a:bf:2c:03:7e:78:
                    2c:db:b6:26:1a:8d:bb:70:a5:67:07:79:43:5f:25:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:4A:2D:9C:88:95:AE:D0:87:6B:B0:A1:0A:E9:AA:81:B9:21:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/2138a40e-1c46-3884-b1b0-687cb915d88f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486/e8a5a257-a121-41de-b0be-6ab191fc4486.crl

            X509v3 Authority Key Identifier:
                keyid:32:81:01:00:24:EC:B3:91:D5:9F:6C:62:90:9F:C1:0B:6C:1E:05:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8a5a257-a121-41de-b0be-6ab191fc4486.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.134.128.0-63.134.185.255
                  63.134.187.0-63.134.191.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:46:2e:62:d7:91:84:73:e0:a6:a0:ee:18:92:6a:08:a6:93:
         d0:14:18:37:ca:27:8a:1a:f5:a7:ed:df:79:7a:db:de:e1:c5:
         d1:53:6f:ab:e1:5a:9c:cf:10:fb:33:dd:5a:42:52:ea:08:c1:
         eb:f8:a8:3b:dd:06:08:f6:25:62:a3:2a:2e:a3:22:da:54:29:
         40:83:51:78:9e:11:53:71:fd:06:3d:a8:ed:ff:ff:a2:21:48:
         ef:84:9d:9a:5d:43:91:e9:21:c2:84:16:64:ed:34:75:8d:e4:
         b8:1f:f5:50:4d:2d:f7:72:f7:3c:e5:0c:74:75:9c:6c:5d:1a:
         02:85:f4:fc:53:6a:c5:93:da:a2:5c:ac:d2:06:60:6a:fa:07:
         cd:1e:37:43:19:8b:06:8f:ed:79:47:4e:e8:f0:d9:f9:ce:53:
         46:12:28:51:65:38:05:9e:bf:90:cd:d0:9c:00:bb:74:b8:2b:
         1a:cf:9f:df:8c:b5:26:3d:5b:f6:ef:c5:30:07:ca:3e:48:77:
         ae:bc:24:c9:fa:d5:f6:aa:df:ad:c0:bc:d9:e2:e8:3f:22:8f:
         f6:d9:2d:4e:29:5d:cd:0b:b0:67:b6:be:a4:10:e8:24:47:4a:
         c8:49:c6:7f:1d:1f:95:8f:44:64:84:13:25:b0:db:dd:62:85:
         61:8d:f7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:58:53 2025 by rpki-client