Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa
File:                     56e08686-3aac-35a4-8a7a-391ee16d7d17.roa (raw, json)
Hash identifier:          bhC9WodFK34V5a6X7JY4Bg7whSj27bW1LtnBrlkAxOE=
Subject key identifier:   A3:0A:FF:DE:F5:38:C5:A3:28:4D:45:E6:CD:54:F5:62:E5:35:8F:AE
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584AF5213140444F17A217D83800
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     400317
IP address blocks:        63.160.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:31:40:44:4f:17:a2:17:d8:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=602a9db8-5635-45e3-a133-5401e83c46fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:ad:b4:56:24:9c:6a:cc:25:6b:f9:eb:e6:
                    e3:6d:f1:86:08:5e:ee:d6:55:59:6f:fc:3f:a5:15:
                    43:53:71:89:fb:f0:96:21:f0:a8:d9:72:2b:ab:e5:
                    21:5f:70:68:24:ad:9f:a3:87:99:b1:20:e2:86:c8:
                    12:21:7d:18:45:30:eb:95:7c:de:6c:a9:62:0a:e0:
                    ac:92:39:ac:01:40:a8:ee:d4:fc:ae:50:0b:df:51:
                    73:06:1f:9d:90:3f:10:f8:5b:7c:f8:57:6b:2b:52:
                    20:98:9b:54:41:5a:5a:ad:48:cb:8b:c9:b8:b4:88:
                    ad:ed:f1:6d:08:4b:2e:f5:1f:e6:d8:82:e3:d8:8c:
                    d2:21:4e:e8:43:7a:4f:e3:50:c6:5f:66:6d:a8:57:
                    21:c4:82:8a:bc:75:36:1a:9f:a2:d2:a8:19:06:84:
                    16:fe:ac:92:81:3d:8d:2b:72:55:9f:b5:24:0d:75:
                    a6:8e:97:29:9a:7a:00:b8:17:16:8f:69:7b:56:e9:
                    32:21:a9:94:38:29:a3:ad:af:c0:7a:60:c9:36:1d:
                    f9:81:32:90:c1:b5:08:e7:28:69:a4:8d:92:a0:39:
                    58:90:ec:30:bd:3e:9d:05:40:f4:45:62:78:ac:89:
                    3a:f0:e2:06:1f:c9:d6:62:85:38:66:e8:d9:ea:22:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:0A:FF:DE:F5:38:C5:A3:28:4D:45:E6:CD:54:F5:62:E5:35:8F:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/56e08686-3aac-35a4-8a7a-391ee16d7d17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:92:57:04:6e:87:56:56:82:f7:55:6d:e9:7d:79:9d:6f:2c:
         ef:dc:23:d2:8a:db:9c:27:84:e1:c0:a9:ba:c2:3d:cd:ab:da:
         2d:65:28:5b:3f:86:04:61:50:0b:8b:37:f8:a0:ea:12:5b:c3:
         ac:ab:34:e8:25:50:da:35:06:80:32:10:10:a7:30:c6:7f:d9:
         12:c2:40:83:ef:d7:56:35:b3:4d:ce:24:f0:ec:78:78:74:df:
         17:19:a6:db:63:1a:f2:18:e1:80:ef:0c:60:84:0b:c8:3c:7b:
         c6:90:23:e2:f2:f1:09:b1:b3:03:14:32:e7:f3:75:d2:5e:42:
         4b:50:4b:eb:e5:ad:92:de:f9:9b:8c:88:67:d7:b9:47:84:15:
         75:26:ce:09:c1:2d:16:49:46:96:6c:7b:f8:fb:dd:5a:cb:e1:
         5f:8f:b2:24:72:4b:de:53:2c:dd:a1:2f:a9:4f:40:e9:92:52:
         69:18:ab:38:28:1c:78:40:9c:fb:c0:38:54:41:cf:1e:11:52:
         4f:cc:9b:7c:c3:ab:d0:34:6f:96:1d:ef:db:b1:be:cd:a8:9c:
         6e:d2:5f:70:86:f5:fc:aa:92:14:30:8f:38:76:a2:bb:c6:f2:
         f6:bc:5f:45:f9:d0:96:66:07:64:c6:d0:db:b8:de:02:76:22:
         79:ec:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:41:08 2025 by rpki-client