Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3de9ed1-5899-3f35-b948-e6c62297e352.roa
File:                     c3de9ed1-5899-3f35-b948-e6c62297e352.roa (raw, json)
Hash identifier:          xo6tZKNvXNCvuTFcYwzQJyUnuWe3xM4pxo/h0P8O5vc=
Subject key identifier:   59:C9:05:93:AB:93:82:A3:1D:11:B1:96:E6:04:A5:78:7F:A9:0B:61
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B196C1B60590236D237A563C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3de9ed1-5899-3f35-b948-e6c62297e352.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     3855
IP address blocks:        63.115.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:1b:60:59:02:36:d2:37:a5:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=72567dfb-66e3-49c4-8fd7-e530aede46a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:80:fb:7a:0d:61:b6:3a:cc:7e:d4:47:8f:
                    d6:59:ca:e2:8c:cc:19:3e:44:6a:19:c2:a6:6d:89:
                    9c:24:c6:a6:89:88:7d:fc:80:d6:e3:4f:f6:f2:33:
                    32:54:c6:02:c0:f3:8f:dc:ad:22:2e:4c:b1:36:f0:
                    50:24:2a:00:78:ec:8a:29:c4:d8:22:24:52:da:c4:
                    f7:06:22:18:08:ce:d5:71:d3:f6:fb:ee:f0:33:c6:
                    0a:11:6e:b5:3f:85:21:57:e5:78:9e:92:36:41:69:
                    26:dc:63:19:6a:8d:94:e1:63:a1:00:0b:35:c8:5a:
                    9a:88:9c:b7:1e:c3:fa:c1:28:d0:7a:45:aa:87:36:
                    ef:f8:6a:c6:94:f7:4d:4c:19:ac:80:ca:fc:f5:3c:
                    ff:c3:08:20:f2:73:32:70:1f:6a:71:3d:2c:c7:2b:
                    a9:39:f4:b9:61:87:33:a7:e2:03:ba:14:be:8e:b6:
                    e4:14:ae:c1:a4:66:5f:6f:f2:30:89:ce:1c:f3:1e:
                    47:1f:26:47:1a:5b:82:e8:69:63:01:ff:80:92:13:
                    87:89:d1:39:b6:cb:84:6b:dd:3e:c8:f8:14:d2:e3:
                    69:50:fb:25:11:a8:3d:31:c9:e9:94:5b:24:df:89:
                    bb:fa:08:e9:e6:67:fd:d3:8d:dc:5e:b4:05:fd:59:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C9:05:93:AB:93:82:A3:1D:11:B1:96:E6:04:A5:78:7F:A9:0B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3de9ed1-5899-3f35-b948-e6c62297e352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.115.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:73:87:2f:38:33:dd:5b:a5:09:e0:4f:e1:1c:d3:31:72:b7:
         20:84:3e:44:d6:34:68:f8:66:57:42:f7:2b:60:93:f3:43:fa:
         12:67:31:16:c1:ef:6b:81:40:6b:7b:b8:27:7c:6f:f7:e3:db:
         b2:c5:53:14:54:f5:d4:09:77:f6:02:5d:a5:45:2f:30:33:b7:
         5a:b2:ef:be:39:b3:74:b3:fe:b2:46:26:ef:2f:8a:25:6d:0d:
         a5:e1:0f:bb:fd:2c:f4:c1:9a:0d:a7:e2:6f:c4:ff:b6:df:48:
         f5:da:55:4d:54:03:a2:89:e8:7d:0c:74:bf:2b:a7:0c:60:9e:
         27:d9:df:14:d0:ed:34:cd:bc:f6:df:73:e3:46:2d:da:df:0b:
         b1:98:84:90:5f:cc:09:5f:9f:8f:cf:76:74:33:c4:bd:8d:a9:
         1e:22:e1:cf:64:7c:61:9b:d2:a1:bc:9a:92:58:1b:0a:44:e7:
         86:c7:05:82:60:53:c7:e0:c8:20:9c:1f:71:c4:a3:39:25:8d:
         0f:f2:cb:2f:7d:3c:03:d8:fd:3c:24:00:f5:38:12:26:d4:28:
         b7:c5:ac:3d:f3:7e:26:2b:40:cb:e0:3e:b0:f6:ec:aa:43:db:
         f4:b1:4d:c8:a5:48:66:75:f5:55:e5:98:5e:79:31:b9:d8:9c:
         e8:e7:c3:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:06:36 2025 by rpki-client