Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
File:                     73f5f923-a145-3582-a788-fe56fb4baa8c.roa (raw, json)
Hash identifier:          DLGh+LUK334UEaUAXh1p/abLFSaTPD323w+qLD2fqtc=
Subject key identifier:   D4:E6:07:0E:61:ED:62:F1:45:A2:D9:09:5A:DC:04:F9:11:DA:19:74
Certificate issuer:       /CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
Certificate serial:       010D0C9F4328584B609C8DA78E61D95C3D485B80
Authority key identifier: BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     3580
IP address blocks:        63.133.224.0/20 maxlen: 32
                          69.172.128.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:8d:a7:8e:61:d9:5c:3d:48:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afa62758-b3d6-4d3d-a3e5-3ce61baf9c81
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=e47bf19a-7e5c-4758-8ece-fcec4c8c31f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:31:54:b4:3e:a7:a0:e9:d6:3f:09:a6:d5:
                    24:1b:9f:d5:31:b7:84:e9:1f:60:9a:5c:cb:cb:3c:
                    84:d4:8e:8e:b0:80:cb:6a:9f:0a:78:50:40:b6:0c:
                    76:1f:45:00:da:55:8d:de:97:3d:a7:2a:35:f2:74:
                    31:19:69:a1:55:d0:7f:36:a4:ee:04:4d:38:12:85:
                    94:16:7b:98:08:4c:51:01:8c:68:52:fd:1c:71:f3:
                    88:fc:2d:f2:78:f9:b0:aa:cf:01:fe:af:9a:bc:19:
                    49:c1:b8:8b:8e:b5:ca:8e:5a:59:30:b5:87:35:03:
                    59:c5:f0:57:e8:23:53:62:1c:1a:53:eb:c8:4d:fe:
                    18:63:37:cf:ce:81:43:d6:39:66:b5:ce:ef:37:12:
                    85:31:f3:62:4f:1a:34:f0:3b:77:7b:37:d4:b0:51:
                    74:fd:00:1f:4f:c7:6e:4e:9f:0d:f5:56:a7:be:40:
                    92:7a:42:ea:83:67:a5:58:2e:3c:f5:0c:34:eb:9e:
                    5c:bf:fe:a4:ec:0f:e3:3b:79:f6:40:37:ca:4a:a3:
                    a2:e7:a2:b4:f7:a7:55:9f:17:59:1c:9d:2b:bc:f0:
                    30:ca:ce:5a:b2:28:e1:e2:b0:eb:07:4d:46:93:60:
                    4e:f7:ca:21:9e:15:d0:7d:0f:37:f1:f2:2e:c0:19:
                    45:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E6:07:0E:61:ED:62:F1:45:A2:D9:09:5A:DC:04:F9:11:DA:19:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/73f5f923-a145-3582-a788-fe56fb4baa8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.crl

            X509v3 Authority Key Identifier:
                keyid:BB:49:04:60:8C:E3:C8:A3:8E:36:0B:0C:C5:2B:33:6B:98:17:22:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afa62758-b3d6-4d3d-a3e5-3ce61baf9c81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.224.0/20
                  69.172.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:cb:aa:4e:fb:b7:34:1b:c9:53:11:34:23:a7:71:eb:36:
         6e:3a:b5:64:65:21:85:40:79:c1:79:9d:8e:9f:44:f9:27:b7:
         9f:74:a3:6a:ab:67:ca:90:90:91:b0:5c:48:fd:33:2b:a4:b9:
         83:11:6d:c2:55:38:c4:39:4d:b4:18:ad:35:d7:f1:9f:40:bc:
         43:1f:bf:93:28:d3:7b:cb:56:00:56:a3:cd:d2:a0:96:b9:56:
         76:19:5d:1b:93:58:27:2a:b3:16:d1:85:97:08:4c:b4:6c:2c:
         7d:3e:24:ed:1e:24:14:f5:03:b8:e2:8d:24:13:c0:5a:dd:3a:
         4a:f7:0b:1c:42:2e:64:39:e8:fa:64:c3:52:2a:ac:ab:df:8d:
         db:c1:9c:70:7a:47:02:78:ae:03:5d:4c:ca:00:b1:37:7a:2a:
         56:6f:ae:95:02:62:8f:fb:84:e5:85:ba:a9:8f:7f:3b:28:fd:
         27:7e:ee:9d:05:ea:09:41:7c:0f:8c:01:c5:68:fe:5b:a3:0f:
         4a:1f:80:89:fd:5a:cb:c9:f5:e1:ea:fb:22:8f:2a:a0:f9:d3:
         95:b5:81:2b:d5:ae:fe:83:e0:d3:5c:48:85:80:5b:34:94:fd:
         23:88:13:23:d4:9f:12:56:91:9c:ee:5f:91:7e:57:a0:74:10:
         7e:e2:23:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 05:21:17 2025 by rpki-client