Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/0363f1ff-63ea-3fc6-9949-9efec22db3d4.roa
File:                     0363f1ff-63ea-3fc6-9949-9efec22db3d4.roa (raw, json)
Hash identifier:          tcTFCerrIhWrFX+iAb5xxOjWEeErojA/9CTHAjp9nK0=
Subject key identifier:   DB:6B:04:17:28:C4:85:04:58:53:6E:A0:6B:6A:A8:92:03:AE:AD:12
Certificate issuer:       /CN=233d8eef-51df-487b-9edb-f16ba403f442
Certificate serial:       010D0C9F4328584A9FFBA3611D0E0241990E2440
Authority key identifier: 56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/0363f1ff-63ea-3fc6-9949-9efec22db3d4.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     63297
IP address blocks:        192.102.254.0/24 maxlen: 24
                          2607:3380::/40 maxlen: 40
                          2607:3380:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a3:61:1d:0e:02:41:99:0e:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=233d8eef-51df-487b-9edb-f16ba403f442
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=9e0126a6-f82a-4812-a5d7-75fb4761c15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:17:fc:6f:8c:40:d7:7b:68:e3:aa:32:58:ca:
                    78:b4:b9:85:7f:d7:ba:3f:53:d2:76:d5:4a:2b:7a:
                    e6:81:f4:87:cf:4c:e5:01:17:27:82:0b:34:e8:9e:
                    ab:ae:01:db:55:6e:bf:cf:ed:d9:43:22:f8:6f:78:
                    9e:cf:b3:cc:cb:94:99:a7:60:7a:78:c0:8e:1e:50:
                    33:ad:5f:ba:56:14:d5:b1:4b:fe:ee:17:d2:9b:ee:
                    99:f6:72:46:4d:5a:52:c3:27:9c:eb:05:24:6d:54:
                    93:a1:30:b6:10:0e:fc:f2:45:3d:f0:0b:5d:e7:53:
                    8e:67:aa:67:aa:51:ef:23:cd:af:ec:57:78:25:a0:
                    6e:74:87:40:87:fc:79:2c:d8:fe:d1:78:f1:6e:82:
                    ea:61:04:0a:1f:7b:42:e9:38:f7:69:88:8a:5a:be:
                    c0:8e:70:40:1c:75:3b:90:19:dc:f4:49:13:e7:16:
                    5c:0a:df:53:d0:3f:3a:2d:90:6a:91:ef:a6:c4:9f:
                    7a:1f:b6:ff:a5:c3:68:a5:30:76:6d:7a:c5:86:f9:
                    02:76:c5:79:5e:c3:a8:bc:27:1c:48:e6:68:6a:28:
                    b7:ef:fa:a8:6a:7c:81:d0:f2:50:c2:96:b5:a5:52:
                    2c:32:fa:7a:41:9b:3f:83:55:91:89:43:48:18:5b:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:04:17:28:C4:85:04:58:53:6E:A0:6B:6A:A8:92:03:AE:AD:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/0363f1ff-63ea-3fc6-9949-9efec22db3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442/233d8eef-51df-487b-9edb-f16ba403f442.crl

            X509v3 Authority Key Identifier:
                keyid:56:85:06:EA:8A:34:47:B6:12:B1:A2:1F:DE:DD:5A:7B:60:81:6F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/233d8eef-51df-487b-9edb-f16ba403f442.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.254.0/24
                IPv6:
                  2607:3380::/40
                  2607:3380:1000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a2:e4:20:2e:a7:6b:ec:d4:4c:93:cd:b7:6d:86:94:6a:33:
         c5:5e:31:0e:a7:2f:0a:a9:c6:ac:90:ab:44:d3:11:17:44:f1:
         df:5a:52:55:38:c1:36:96:33:c8:61:f0:a5:6f:d5:a5:de:35:
         b4:b8:b5:9a:84:45:aa:c9:fb:24:3c:e6:1c:2c:1b:c2:d8:23:
         c9:e9:49:94:95:26:65:79:14:35:96:90:19:ad:a1:d4:fc:53:
         44:c6:d8:0c:db:a6:a0:cb:72:37:5d:39:a4:82:42:5b:5b:a2:
         f7:64:e7:02:73:f5:9d:36:71:11:8f:6a:12:24:90:ab:a9:ee:
         bd:95:ba:84:72:ac:95:63:54:ef:85:c9:be:5a:57:4e:76:b2:
         f8:30:a5:49:6e:62:ee:ca:99:ae:02:d3:b1:2b:43:db:f0:76:
         ef:73:89:04:1a:f3:af:f0:a3:5f:ef:63:f7:91:35:32:b6:b5:
         59:b4:b7:5f:57:78:8a:05:43:10:37:52:9b:65:a3:4d:0c:b2:
         41:5a:29:2d:15:d2:4d:75:52:12:9c:85:3b:6b:23:09:26:d0:
         3f:9b:02:19:98:f8:0e:e0:0c:07:2b:11:36:53:97:ee:15:5d:
         41:c3:e9:b6:e2:63:ee:07:43:48:46:f0:d8:4d:59:26:fb:5e:
         b3:5e:e1:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jul 28 11:16:56 2025 by rpki-client