Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa
File:                     04f8af44-22cb-3a08-b7f4-332ea1380b17.roa (raw, json)
Hash identifier:          44ZkJsPatrd9tVPF7boE6+oNu64gwyRH47Tgg4sI+xc=
Subject key identifier:   A1:E6:E6:17:6A:81:BA:B6:D6:3C:78:7A:CA:57:17:EF:79:C7:9D:18
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B2CF6D9865BDE8070EC8BDB80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     209
IP address blocks:        67.63.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:d9:86:5b:de:80:70:ec:8b:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=fee0bc86-a5fb-4872-8524-ae71d971f747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:43:27:4c:43:6d:6a:c0:00:a6:6a:e5:e8:28:
                    12:1d:f9:41:f6:4f:94:83:76:1f:00:50:49:fe:f8:
                    42:6d:73:56:86:30:21:9f:a9:52:00:59:c6:9e:ee:
                    5b:da:52:e8:89:dd:8a:8f:d4:5b:78:99:a7:91:bf:
                    83:99:48:cb:eb:1e:32:c8:82:86:ce:68:78:41:4c:
                    93:48:56:12:ef:0c:41:6e:53:95:7c:7b:93:5e:1b:
                    7e:84:b7:9c:04:1d:97:52:8d:c6:f0:6c:a4:ec:1d:
                    ac:55:68:25:b1:cb:5e:8c:c1:d9:21:12:57:61:1b:
                    46:44:47:e9:63:c3:08:47:ee:85:56:03:61:37:53:
                    40:e5:2c:cd:1a:dd:2f:98:37:3f:f0:e1:d9:4b:6c:
                    3c:e2:c0:09:b5:58:b0:11:07:53:90:c1:da:a4:24:
                    36:36:b5:76:83:b3:52:36:87:53:32:28:b1:92:eb:
                    60:11:6c:cf:96:84:1c:ff:56:c2:40:fa:7b:eb:4a:
                    80:9c:a3:ae:5e:d4:d6:04:f6:46:d6:82:5f:b2:e8:
                    1f:d9:ee:d8:30:aa:34:5a:e6:ad:44:dd:74:ce:00:
                    37:c5:b3:cb:0a:52:a7:43:37:44:f7:fa:62:7e:9c:
                    db:cc:81:a7:1c:4c:36:ee:45:91:2c:ae:29:77:ee:
                    0a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E6:E6:17:6A:81:BA:B6:D6:3C:78:7A:CA:57:17:EF:79:C7:9D:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/04f8af44-22cb-3a08-b7f4-332ea1380b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.63.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:55:73:25:b9:c1:61:66:e1:03:52:de:94:de:dc:44:4a:
         37:14:9b:fc:05:66:88:dc:39:96:6f:1a:23:08:ad:67:d1:45:
         fe:ad:f6:37:57:3d:bd:96:26:be:6f:04:f1:b8:17:55:e0:4b:
         f0:e1:6f:91:9c:45:85:9c:fb:f1:15:6a:79:b5:47:eb:6b:00:
         d8:c1:32:ef:2a:21:62:5d:0a:1b:0b:30:53:4c:58:a1:29:83:
         c0:94:9e:df:a9:f7:dd:1d:20:8f:04:d0:8b:e3:84:2f:98:02:
         0d:e6:82:50:a8:1c:36:5f:cd:79:15:7a:06:2a:aa:ce:f6:d8:
         7e:c7:9a:0d:0e:80:36:d3:b4:82:dd:c9:c2:f2:19:96:59:52:
         62:ff:19:e8:19:21:07:42:d0:c2:6a:22:bc:fa:2b:94:d5:eb:
         df:7d:50:29:36:02:ee:3a:22:a6:d7:61:e0:a9:1c:51:94:7e:
         5f:4c:63:a0:55:e4:8c:86:2a:fd:9f:80:4b:2e:cf:a0:42:23:
         0e:93:33:08:86:3a:a1:cc:08:80:d0:a0:fc:e6:9a:7d:35:af:
         50:9d:7e:48:98:e8:c0:c8:ef:57:90:02:82:f3:7d:33:e0:40:
         0a:ff:d8:1a:d3:65:cc:fc:18:97:f1:b2:e3:6b:7d:f3:e5:5b:
         c1:aa:d0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:33:28 2025 by rpki-client