Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa
File:                     ec051f15-d646-3325-aabb-bdf581238792.roa (raw, json)
Hash identifier:          07TlReHixQDcb8sDvTk/qzju23TmbyICUc1bcm2kgK8=
Subject key identifier:   1E:9C:54:06:F0:FD:AF:D4:D1:14:22:47:D7:54:D9:5D:21:89:94:F3
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584B0CDC1E1B6DC217B32B6FDA00
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     20473
IP address blocks:        107.191.32.0/19 maxlen: 32
                          108.61.0.0/16 maxlen: 32
                          140.82.0.0/18 maxlen: 32
                          144.202.0.0/17 maxlen: 32
                          149.28.8.0/21 maxlen: 32
                          149.28.16.0/20 maxlen: 32
                          149.28.32.0/19 maxlen: 32
                          149.28.64.0/18 maxlen: 32
                          149.28.128.0/17 maxlen: 32
                          149.248.0.0/18 maxlen: 32
                          173.199.64.0/18 maxlen: 32
                          198.13.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1e:1b:6d:c2:17:b3:2b:6f:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=9d5dc5a3-67dc-421c-97b8-492aac92b3c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e8:3a:f1:da:b4:de:45:2d:8d:09:ac:3d:32:
                    6e:37:d8:e0:94:c6:36:a2:12:a2:a7:22:ce:0f:e8:
                    cf:79:19:8f:b6:a8:83:e3:c1:c1:10:d1:0e:13:e7:
                    22:3c:c5:38:1e:eb:34:44:97:67:e1:2c:ad:96:09:
                    d0:42:89:fc:3c:c3:d4:49:97:1e:65:cc:61:9b:76:
                    f3:45:22:72:35:d7:75:1a:3e:18:6d:27:44:f5:ed:
                    79:74:36:cb:44:c2:0e:b2:ee:49:c1:1b:8a:97:8a:
                    f5:99:22:94:48:85:03:d5:82:91:7d:da:cc:d7:ce:
                    84:e2:08:47:ce:9c:0c:b2:7f:0c:7e:e2:34:32:03:
                    3d:f0:2e:c4:ac:78:d6:d2:22:1b:5c:10:ec:1c:56:
                    94:ef:85:9d:81:3c:05:31:51:0c:a6:dc:da:fc:a1:
                    de:77:c8:3f:75:5e:39:30:19:f8:3c:a7:22:ed:5e:
                    34:3b:72:7c:04:c5:17:5f:ea:ed:b1:d0:aa:80:de:
                    74:d5:08:e9:06:f8:a4:fe:98:04:87:2c:f8:0c:10:
                    26:72:64:42:cd:67:27:ed:69:a0:c0:eb:59:0e:16:
                    fe:9a:f5:43:0f:f3:0f:88:bd:dc:8e:d2:92:86:be:
                    cc:e7:16:60:26:5e:94:c4:7b:b6:52:a8:82:da:75:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9C:54:06:F0:FD:AF:D4:D1:14:22:47:D7:54:D9:5D:21:89:94:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/ec051f15-d646-3325-aabb-bdf581238792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.32.0/19
                  108.61.0.0/16
                  140.82.0.0/18
                  144.202.0.0/17
                  149.28.8.0-149.28.255.255
                  149.248.0.0/18
                  173.199.64.0/18
                  198.13.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:7d:39:ec:80:5b:24:d4:60:ce:bb:64:6f:18:af:11:86:73:
         a2:94:62:49:a4:5b:a9:3b:b8:70:62:e9:77:61:9e:2e:99:1c:
         ae:43:e2:ff:09:5a:55:b0:2b:5d:47:82:c5:3a:ba:8a:82:93:
         ed:a9:15:d7:2e:90:76:45:3b:2e:9d:66:fe:47:17:a9:43:8c:
         dc:d4:c8:2c:88:d7:3c:57:cc:2f:2c:a3:ad:c5:d1:2a:6d:f8:
         5d:04:78:8a:de:15:bd:9d:3b:d0:02:87:d6:98:0d:6f:d4:b5:
         92:6e:13:d0:f8:e9:af:3d:6a:38:94:b3:25:c4:33:a0:b9:55:
         1f:2d:af:46:9f:a1:8b:1f:9a:69:6a:43:36:1b:23:89:35:84:
         f8:8b:15:df:91:8c:18:ec:60:7e:21:ad:6d:8f:00:3d:a1:1c:
         37:83:aa:36:75:54:62:6e:de:e1:07:2f:12:c6:1d:93:a9:1d:
         24:99:46:0c:c6:bb:81:7c:7a:65:51:aa:df:86:8a:3c:d8:66:
         65:cb:7b:96:2f:24:1f:df:10:aa:54:4a:e8:c0:8b:b8:31:9e:
         ec:9d:c0:a8:a7:8a:40:ae:83:6b:c5:c0:30:13:49:95:bb:27:
         f0:8e:5c:0e:36:a0:98:a6:cc:97:ab:9c:c1:ad:63:ca:ff:aa:
         8f:e8:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:12:31 2025 by rpki-client