Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa
File:                     e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa (raw, json)
Hash identifier:          ZD2AC0Fcudd0mGwCLR2q3lbklsAHeUoWiGpeCQQEKk0=
Subject key identifier:   38:FC:5E:52:43:D0:D6:DB:44:5D:4C:AF:28:5D:DB:D7:8F:40:71:66
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A7E7B61B2B686B7D416584D00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa
Signing time:             Sat 12 Jul 2025 13:01:04 +0000
ROA not before:           Sat 12 Jul 2025 13:01:04 +0000
ROA not after:            Fri 10 Oct 2025 13:01:04 +0000
asID:                     198148
IP address blocks:        63.222.52.0/24 maxlen: 24
                          63.223.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7e:7b:61:b2:b6:86:b7:d4:16:58:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jul 12 13:01:04 2025 GMT
            Not After : Oct 10 13:01:04 2025 GMT
        Subject: CN=7d516861-f5b4-4f3c-a419-57c3041a4cf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:79:d4:f4:cd:4d:68:c7:b0:92:00:3d:aa:
                    d9:8b:8a:76:37:be:d3:4d:16:9a:08:1f:e4:db:70:
                    83:89:98:ac:3a:9c:2a:01:c0:2b:1f:eb:4f:e9:6b:
                    85:36:98:b5:17:f5:c9:52:87:97:e7:5c:c4:85:c9:
                    ed:bd:b0:38:a4:08:df:a0:93:69:b8:e9:2c:5d:9d:
                    94:d8:e6:c5:ef:e2:78:95:2f:e7:0a:37:7f:f1:7d:
                    5a:30:91:b0:e3:87:6d:7f:25:c8:19:1b:26:c5:79:
                    40:51:e9:78:e2:e6:33:ee:97:eb:2e:aa:fa:b3:4d:
                    95:42:fd:bc:1f:41:92:07:e4:03:68:ce:3e:f4:b1:
                    fa:a7:b7:0a:32:d6:60:68:50:9d:ae:12:fb:53:ae:
                    ca:d8:8c:83:6e:7b:ac:ed:2e:d0:f0:57:bc:ab:33:
                    24:c8:47:63:9f:05:9a:d3:c9:90:29:45:7e:cf:35:
                    51:a1:10:fa:f8:cc:f2:a2:f3:89:fc:cd:27:9e:31:
                    6a:89:08:40:ec:ed:50:45:55:a6:fe:2d:65:e7:8f:
                    90:12:9d:57:8c:94:64:fa:15:d0:2d:55:b4:87:7f:
                    d3:d6:e8:3d:15:2b:38:29:cf:34:8d:8e:a5:de:46:
                    27:02:f4:03:e3:25:f7:2b:9d:f9:72:a6:83:2a:f7:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:5E:52:43:D0:D6:DB:44:5D:4C:AF:28:5D:DB:D7:8F:40:71:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.52.0/24
                  63.223.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:09:5b:07:07:da:f0:5b:e3:d6:1f:37:30:0c:f4:9e:de:
         0f:1c:48:94:58:50:11:db:32:40:69:3c:e6:49:54:28:a1:6a:
         bc:0f:11:9a:2d:7e:bd:bb:59:88:c5:7d:8b:93:ff:99:04:2e:
         47:7d:ef:2e:55:5f:9a:39:d6:85:4d:95:85:1f:a9:f1:46:96:
         f4:fe:0f:6d:5f:50:22:39:c6:d5:90:43:c3:8f:41:f2:3b:36:
         5c:77:fb:d6:ae:35:8a:63:da:38:ab:ff:e8:84:19:87:c5:95:
         bd:85:75:67:02:87:65:39:12:eb:a8:e5:2b:aa:6a:7e:55:17:
         4e:93:36:37:cb:02:8c:d3:d3:35:ca:da:3c:4f:ff:61:a0:0b:
         3b:4b:ed:a2:c9:53:00:79:7f:8c:f0:74:c9:f4:54:4a:91:2d:
         80:a0:e1:38:e2:8e:26:4f:af:42:28:27:2f:00:c1:98:37:bd:
         d5:9d:f4:6c:96:13:52:18:ab:db:8b:e7:77:fa:17:03:ee:47:
         c9:a1:26:b4:f7:6a:65:df:0f:86:00:7e:d5:90:9f:09:3b:3d:
         e0:fc:54:e7:74:ff:44:9e:c4:7d:95:c2:f5:f5:de:16:5a:96:
         49:7e:3f:5e:62:2a:91:5d:e9:57:ec:fc:63:60:74:0a:63:d6:
         6d:ea:cc:9f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEp+e2Gytoa31BZYTQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk
N2Q1MTY4NjEtZjViNC00ZjNjLWE0MTktNTdjMzA0MWE0Y2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKd51PTNTWjHsJIAParZi4p2N77TTRaaCB/k
23CDiZisOpwqAcArH+tP6WuFNpi1F/XJUoeX51zEhcntvbA4pAjfoJNpuOksXZ2U
2ObF7+J4lS/nCjd/8X1aMJGw44dtfyXIGRsmxXlAUel44uYz7pfrLqr6s02VQv28
H0GSB+QDaM4+9LH6p7cKMtZgaFCdrhL7U67K2IyDbnus7S7Q8Fe8qzMkyEdjnwWa
08mQKUV+zzVRoRD6+MzyovOJ/M0nnjFqiQhA7O1QRVWm/i1l54+QEp1XjJRk+hXQ
LVW0h3/T1ug9FSs4Kc80jY6l3kYnAvQD4yX3K535cqaDKvfrUwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFDj8XlJD0NbbRF1Mryhd29ePQHFmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvZTIyN2FhMjAtNmIzMS0z
NmNlLThiMWMtODBiMWEzMGRiYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAP940AwQA
P98bMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAH2vCVsHB9rwW+PWHzcwDPSe3g8cSJRYUBHbMkBpPOZJVCih
arwPEZotfr27WYjFfYuT/5kELkd97y5VX5o51oVNlYUfqfFGlvT+D21fUCI5xtWQ
Q8OPQfI7Nlx3+9auNYpj2jir/+iEGYfFlb2FdWcCh2U5Euuo5Suqan5VF06TNjfL
AozT0zXK2jxP/2GgCztL7aLJUwB5f4zwdMn0VEqRLYCg4TjijiZPr0IoJy8AwZg3
vdWd9GyWE1IYq9uL53f6FwPuR8mhJrT3amXfD4YAftWQnwk7PeD8VOd0/0SexH2V
wvX13hZalkl+P15iKpFd6Vfs/GNgdApj1m3qzJ8=
-----END CERTIFICATE-----
Generated at Sat Jul 26 09:10:32 2025 by rpki-client