Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4aa72e-9c01-3b5d-af20-45f14ce7adf2.roa
File:                     7d4aa72e-9c01-3b5d-af20-45f14ce7adf2.roa (raw, json)
Hash identifier:          McxrQuRApFLmPuOruYn2aZ5MPUo+srz2rVufq1Ug3fY=
Subject key identifier:   B3:93:9B:E9:6E:EC:E8:97:26:07:43:0F:AD:6A:27:E0:0D:CE:C8:7B
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A969DECD1C9C8D35ADAAC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4aa72e-9c01-3b5d-af20-45f14ce7adf2.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33490
IP address blocks:        71.63.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a9:69:de:cd:1c:9c:8d:35:ad:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=94e78b86-1a18-4b1f-9dea-69d67d3e1767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d7:71:08:1a:6d:2f:7c:70:da:a9:52:2a:e6:
                    bf:34:3e:63:a7:e3:83:0d:d5:db:70:41:de:47:df:
                    1d:2b:3b:54:a2:8e:d2:ef:ce:6c:b2:80:e1:cb:22:
                    30:e2:38:84:1b:27:c8:bb:9a:e2:80:c0:36:bf:ac:
                    75:18:08:ad:46:79:fa:57:cb:50:2b:a9:14:8f:58:
                    08:ec:84:3a:d2:d0:5d:3d:08:d3:1d:1f:d4:c8:d3:
                    45:e3:f9:48:b3:0b:d6:5b:86:5e:fc:d4:bd:0c:25:
                    41:7e:5a:e5:5a:04:1f:e6:1a:89:8f:24:cc:80:3e:
                    f8:7c:2f:66:c6:50:a8:74:ed:09:10:b0:61:59:5b:
                    d7:86:d5:d8:8e:52:69:02:a9:ad:07:e4:66:d0:06:
                    9b:c5:31:34:0d:1c:b1:8b:75:76:79:0c:c9:38:85:
                    a5:a9:c3:18:2b:fe:57:80:c3:42:7c:6b:70:3e:64:
                    66:9d:5e:ba:66:90:6f:aa:be:fe:b2:0b:92:0b:85:
                    fb:7d:8d:7f:9b:ed:2e:01:e5:a5:5e:26:1e:b5:bc:
                    52:c0:ad:1e:8d:35:6c:6a:a2:93:9d:38:9d:ad:0b:
                    01:ab:07:7c:c1:37:49:24:c5:82:2a:21:60:5e:f3:
                    1e:7a:8f:78:13:f8:15:63:9e:6c:41:04:6e:bd:83:
                    8d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:9B:E9:6E:EC:E8:97:26:07:43:0F:AD:6A:27:E0:0D:CE:C8:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d4aa72e-9c01-3b5d-af20-45f14ce7adf2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.63.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:61:eb:a9:74:a9:e2:9e:b3:87:c1:ae:e4:29:f2:85:71:62:
         42:c2:31:f6:92:6f:61:3e:85:f8:3f:aa:40:41:a4:62:df:ee:
         63:dc:b8:05:7b:3e:1a:f1:60:2f:5e:cc:43:f8:84:89:1f:5e:
         23:06:32:31:17:48:83:4a:6b:1c:46:e5:d7:f5:a3:a1:5f:fa:
         14:50:e1:2b:4e:87:6e:58:9d:e3:bf:27:11:7f:af:9a:1c:01:
         0d:95:22:22:02:ed:d3:38:ac:0b:95:28:e3:78:9a:24:a4:7b:
         ec:8a:5c:71:35:1a:7f:cd:95:4e:8e:6c:fd:8b:49:c4:71:0e:
         6e:9e:ac:b5:c2:94:6b:2d:0b:90:e9:96:db:fa:8b:ec:e2:d0:
         af:c2:28:5e:17:b4:2c:a2:7e:4a:fe:cc:fa:36:65:70:07:e9:
         4c:34:92:ea:48:dc:7c:59:cc:8b:b2:34:a6:8e:00:40:d6:ca:
         ef:34:68:24:a2:ca:7b:64:73:be:2c:43:32:63:71:c4:30:46:
         45:8b:a6:63:70:e4:82:48:e7:f5:77:a6:a0:70:1b:d8:8d:ca:
         40:07:c4:6c:e5:94:4e:65:c4:13:af:67:8c:6f:c3:b7:94:e7:
         f0:d0:f4:f8:af:6d:d8:29:07:44:5a:1c:18:f3:d5:62:48:ac:
         62:b9:4f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:37:53 2025 by rpki-client