Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/83a3e281-65b6-3115-bc46-ab2881061cad.roa
File:                     83a3e281-65b6-3115-bc46-ab2881061cad.roa (raw, json)
Hash identifier:          wQBgOu0Cs/fT+noeKP8CMp+KwSkodCp9an6zZeoprYI=
Subject key identifier:   A0:19:2B:23:0D:FC:7D:CB:B1:29:2D:02:C7:4C:19:E2:6F:80:51:E1
Certificate issuer:       /CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139
Certificate serial:       010D0C9F4328584B153C1B2645417041AB8D9240
Authority key identifier: E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/83a3e281-65b6-3115-bc46-ab2881061cad.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     55504
IP address blocks:        164.63.202.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1b:26:45:41:70:41:ab:8d:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f4d2ef2-fbc2-4b15-8104-e53c358cf139
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=15bb910f-e71b-4ee6-9cce-98d0d4c40c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:9d:b4:53:72:21:56:21:da:1e:73:68:eb:
                    ca:ba:05:e0:b8:75:c2:77:9a:3b:e3:78:3f:25:36:
                    09:8e:d6:ff:29:46:8e:6f:06:eb:da:55:eb:78:4d:
                    a6:ca:d0:ff:bf:7c:00:f6:52:36:88:5f:ac:d1:a7:
                    f7:df:01:09:8c:77:b9:7f:59:9d:10:37:53:a9:4a:
                    52:e3:8b:3b:88:20:66:98:d8:43:8e:60:3a:d0:f2:
                    7c:4e:ba:ec:20:42:b0:ca:a1:b0:6b:f5:0b:b3:83:
                    a3:92:ba:03:27:f7:f2:b3:7f:2f:df:60:1d:ae:69:
                    11:6c:13:86:47:37:cd:67:27:6a:4e:3f:88:fc:da:
                    65:a8:8e:74:7a:8f:cd:09:f6:82:5e:f9:cb:38:12:
                    d9:d8:ef:a4:f9:0f:45:4d:03:ac:fd:9a:b5:4f:ea:
                    ed:33:0d:b6:7c:1d:9e:de:b5:ce:37:2e:7e:f5:07:
                    0a:41:aa:4e:8a:a8:a9:a7:3c:cd:56:77:ac:60:ce:
                    e2:d0:d0:1a:27:97:f7:e0:9e:a4:15:c0:ca:21:31:
                    69:2a:f2:ff:a2:c8:df:ea:e0:70:ad:37:05:0b:a9:
                    db:18:58:14:19:70:d5:9a:8a:5e:a7:ce:a5:01:39:
                    34:92:67:ca:70:e7:8a:f6:ce:e8:41:34:09:04:cc:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:19:2B:23:0D:FC:7D:CB:B1:29:2D:02:C7:4C:19:E2:6F:80:51:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/83a3e281-65b6-3115-bc46-ab2881061cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.crl

            X509v3 Authority Key Identifier:
                keyid:E6:A8:C2:3F:B5:82:80:19:7E:FB:33:A1:EF:7D:30:DC:A9:BB:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2f4d2ef2-fbc2-4b15-8104-e53c358cf139.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.63.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9c:37:41:f4:b0:1b:1b:1f:8c:94:30:72:39:33:a0:d4:3f:
         6a:04:e2:e9:bf:81:fe:9c:e0:c2:9a:94:a8:bb:18:23:c1:a2:
         56:a0:ba:b2:5b:f1:53:02:7c:12:6c:9b:5e:01:cc:c0:07:d2:
         31:e2:ff:70:a9:7d:72:2b:f6:65:42:e4:74:4d:79:cf:68:b4:
         b0:9f:8f:95:a1:fe:05:52:a3:da:03:48:15:01:d2:28:aa:8b:
         60:49:c4:a4:a3:ba:86:ee:e5:b4:e9:e8:11:02:5e:fd:c8:61:
         1f:ba:58:8c:96:5a:a0:31:b4:11:8e:25:67:c5:f7:66:3b:cb:
         2f:f3:85:ca:72:73:af:15:6f:71:a1:1e:3c:c8:61:25:6c:d2:
         df:c1:31:c8:01:0f:0d:f6:bf:50:7c:30:a6:bf:f5:ca:eb:f2:
         a4:b3:ec:9b:fc:3c:ea:75:6d:f9:a3:e1:e6:c3:a5:fd:4b:6c:
         15:d2:ab:83:b6:9d:ab:2f:32:5c:63:29:ef:82:85:78:2c:b2:
         83:a1:1b:0b:b3:67:06:87:c6:48:2f:42:6e:4d:8a:d0:45:a7:
         92:2e:fc:90:9e:23:bb:98:82:be:09:32:84:07:6a:0e:c0:9d:
         c6:d9:74:44:8d:69:96:ff:61:e6:23:56:7b:02:cb:91:a8:1d:
         ef:36:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:49:26 2025 by rpki-client