Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63b0d585-bad2-314d-b075-c13d8f485020.roa
File:                     63b0d585-bad2-314d-b075-c13d8f485020.roa (raw, json)
Hash identifier:          JWfeWpZUIK7zSuAeMGZwcSTRe0A6/B/cRPGgMFd6SwQ=
Subject key identifier:   8F:07:C5:10:4F:0A:D7:91:85:D2:6A:21:39:9D:58:80:2F:8E:59:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A7085FB2836A4E38F2D01ED80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63b0d585-bad2-314d-b075-c13d8f485020.roa
Signing time:             Mon 07 Jul 2025 13:01:05 +0000
ROA not before:           Mon 07 Jul 2025 13:01:05 +0000
ROA not after:            Sun 05 Oct 2025 13:01:05 +0000
asID:                     7922
IP address blocks:        69.252.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:70:85:fb:28:36:a4:e3:8f:2d:01:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jul  7 13:01:05 2025 GMT
            Not After : Oct  5 13:01:05 2025 GMT
        Subject: CN=28f20cef-18c3-4192-b058-be56ef878542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:59:01:b7:8e:07:82:05:ed:a7:b6:0f:9e:
                    07:e8:c5:c8:4c:ee:5a:2b:8a:81:f3:dc:da:4a:14:
                    b9:2e:1c:c1:05:bc:46:15:ad:2c:86:33:9c:0e:33:
                    61:f6:f6:9b:8e:b2:df:b9:16:b2:15:63:94:58:b2:
                    84:92:21:d3:07:70:38:83:01:0d:25:be:24:4f:6d:
                    82:c5:ec:0d:8f:2f:eb:55:41:b9:5b:ed:d3:db:a6:
                    7f:a4:86:b7:1f:8a:ef:08:26:2c:42:8a:79:59:b0:
                    8f:24:ff:87:91:38:78:21:d1:5d:ff:68:79:48:7a:
                    4e:6d:8b:f1:3c:54:72:8e:fc:28:7b:30:95:23:74:
                    c8:dd:89:55:e5:46:49:9a:ad:21:9c:2d:1a:a4:40:
                    c0:81:05:78:b3:f9:d7:73:49:9f:17:ab:54:f9:15:
                    b1:0c:ff:64:21:cf:aa:a5:d6:d6:c2:bd:16:52:60:
                    94:dc:3b:22:ff:4a:a6:84:fa:91:81:1c:1d:81:c0:
                    60:bc:43:01:10:dc:15:0f:00:b7:ec:03:28:4a:42:
                    62:dd:07:a9:91:4e:f5:73:ad:5b:c5:dd:0e:32:46:
                    fa:4f:d3:a0:21:58:22:c3:d9:26:95:ba:45:a5:e7:
                    34:c3:a8:45:16:d5:61:34:b3:df:7c:1e:38:5a:92:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:07:C5:10:4F:0A:D7:91:85:D2:6A:21:39:9D:58:80:2F:8E:59:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/63b0d585-bad2-314d-b075-c13d8f485020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.252.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:07:63:ea:f6:67:47:4c:84:c5:60:21:82:3e:4b:2a:20:55:
         ed:20:da:fe:87:12:0b:79:48:4f:ce:b4:d6:95:4c:f4:30:eb:
         77:dc:af:0f:31:3b:a0:94:79:22:c4:8e:02:7b:f8:36:94:1f:
         ad:43:ac:ae:37:c2:0e:6b:ea:35:18:b5:3e:40:03:f7:a6:06:
         31:84:ee:b3:58:43:d8:95:89:15:fa:ff:69:1c:9b:ab:c3:57:
         b7:5f:50:a6:5f:d6:18:0f:46:14:08:5f:ea:cb:42:45:42:02:
         5e:2f:dd:d4:02:74:ce:27:fd:12:0c:ba:01:0a:02:ce:4c:a4:
         04:e6:76:e3:62:76:d1:43:6e:1f:11:3a:e4:46:2e:42:28:dd:
         70:3e:08:2b:b5:75:7b:e2:e1:0b:76:84:74:06:a6:a7:8f:dc:
         00:db:c3:54:2d:fd:29:1f:9d:4d:32:7b:b8:5e:f6:b1:e1:39:
         10:de:e7:61:61:3c:87:32:a0:55:f8:f5:bb:af:5a:05:e0:4c:
         23:99:8e:3d:de:9f:52:c0:4b:60:7e:f8:62:71:d8:e7:fb:c7:
         18:21:3f:b5:75:3f:1c:89:19:c4:c8:51:9d:72:9d:af:fa:2e:
         08:dc:62:92:2d:b1:e5:76:43:db:8c:17:2b:03:50:50:79:94:
         18:d2:92:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 17:40:37 2025 by rpki-client