Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63d4181f-933f-3415-886d-c5816d0bad3c.roa
File:                     63d4181f-933f-3415-886d-c5816d0bad3c.roa (raw, json)
Hash identifier:          ziT7ySPdo0+351FYaYcn6dSYtr3pBdshzMihkXM5/FM=
Subject key identifier:   85:DF:CA:3C:51:EE:EA:DA:E4:CE:D9:F2:DB:1F:3F:FD:22:7C:A9:EA
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AFD43808E257033631180A600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63d4181f-933f-3415-886d-c5816d0bad3c.roa
Signing time:             Tue 26 Aug 2025 22:56:17 +0000
ROA not before:           Tue 26 Aug 2025 22:56:17 +0000
ROA not after:            Mon 24 Nov 2025 23:56:17 +0000
asID:                     31898
IP address blocks:        168.107.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fd:43:80:8e:25:70:33:63:11:80:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 26 22:56:17 2025 GMT
            Not After : Nov 24 23:56:17 2025 GMT
        Subject: CN=4441f925-419e-4279-ae16-8e721ba0f168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:c4:67:8f:09:73:73:ff:7b:75:56:50:24:
                    48:3e:7f:55:a2:da:3e:41:27:ff:54:23:35:8a:93:
                    20:9b:d7:c0:7c:84:02:5c:3a:4d:7a:fd:cc:48:b0:
                    51:9b:87:d2:a8:e4:76:ac:36:b1:c5:4f:19:96:5b:
                    ce:a3:3f:b3:1d:4d:c8:5a:b6:7b:89:51:3b:c5:06:
                    11:6e:ef:ba:f7:6e:3a:2b:54:9c:57:5f:80:a5:17:
                    b7:bf:96:8d:17:3b:4a:ce:d3:80:00:f1:85:a3:01:
                    11:bb:8a:22:a6:3b:db:48:96:a4:6f:a8:6f:5c:87:
                    6a:57:9d:79:be:4f:6b:49:4f:8b:ed:a2:ae:4b:c9:
                    07:14:ec:a7:dc:17:c1:c0:a8:d5:6e:99:e8:a5:24:
                    13:ee:70:70:19:27:10:e2:ca:bf:fd:f9:b0:b6:09:
                    73:42:1e:73:ca:ef:f1:2a:83:4c:2e:ee:02:d2:51:
                    d4:45:a0:6b:a3:04:c5:dd:eb:75:da:c4:dd:48:71:
                    0d:bb:1e:7c:f5:71:27:60:29:56:4c:7c:0e:1a:71:
                    3e:8f:a5:d8:d1:43:33:f4:1d:06:0b:a9:3a:9a:66:
                    8f:2d:5e:90:58:2a:c0:26:72:41:08:c8:24:39:8e:
                    6c:1a:67:b8:25:35:f9:e3:4c:6a:26:c0:ac:e4:78:
                    38:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DF:CA:3C:51:EE:EA:DA:E4:CE:D9:F2:DB:1F:3F:FD:22:7C:A9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63d4181f-933f-3415-886d-c5816d0bad3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.107.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:c2:f4:bd:05:fb:cd:0f:69:c5:d3:ca:18:49:ec:11:0e:
         6b:16:9a:96:79:28:5d:c9:fc:4d:c4:c5:16:bf:3d:65:ef:cb:
         3e:d8:6f:c0:4d:01:de:a4:ae:65:3d:9c:44:e2:a7:e0:9c:84:
         1c:8b:af:ae:2c:77:9f:14:e7:6a:7f:88:44:f7:5c:eb:58:6b:
         11:40:8d:b9:99:59:72:5c:7f:f9:9c:ac:17:73:2d:3a:51:ce:
         87:6a:a5:1c:6b:cb:f5:eb:5e:9e:36:d0:e7:05:35:25:37:4d:
         7b:ba:3b:b5:38:db:02:60:21:a2:c3:09:d2:37:9e:7c:6d:f1:
         3c:a2:ab:65:d5:d4:e8:25:27:c5:82:a0:fe:8d:82:50:65:8f:
         2a:11:2a:99:d4:f4:da:8a:21:22:8e:61:0c:2c:3d:76:21:7d:
         e0:30:af:8c:50:12:c0:62:d3:7c:1c:a5:45:6a:62:99:96:f6:
         54:af:89:21:83:a6:48:7d:39:00:55:15:51:ad:23:58:45:f7:
         cf:91:24:a3:e8:e3:ed:74:a4:c3:ba:d0:63:0a:82:6d:45:28:
         da:83:3b:75:36:3b:02:28:5e:e1:7a:64:e2:93:d5:4e:29:69:
         bb:00:7b:99:69:09:10:a9:63:23:e9:7f:54:50:b1:9e:e9:5c:
         3c:f6:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:09 2025 by rpki-client