Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/63faf176-974b-37b5-afc9-e0bb2d472da2.roa
File:                     63faf176-974b-37b5-afc9-e0bb2d472da2.roa (raw, json)
Hash identifier:          MCd+dzR6mEa9iYrcZpJNKEYjRSFzhDuRJDqd7QmjXCU=
Subject key identifier:   63:E9:39:07:18:19:A3:46:CE:AB:4C:79:B0:91:95:FB:89:17:48:1E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584B0E41651F763A1DD7076966C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/63faf176-974b-37b5-afc9-e0bb2d472da2.roa
Signing time:             Tue 02 Sep 2025 01:00:32 +0000
ROA not before:           Tue 02 Sep 2025 01:00:32 +0000
ROA not after:            Mon 01 Dec 2025 02:00:32 +0000
asID:                     3949
IP address blocks:        165.254.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0e:41:65:1f:76:3a:1d:d7:07:69:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep  2 01:00:32 2025 GMT
            Not After : Dec  1 02:00:32 2025 GMT
        Subject: CN=0341be04-b25f-4e08-b6a7-9b98640aae1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:8a:a5:b3:a0:04:fd:97:d0:42:43:92:b9:
                    39:31:d0:ce:38:41:64:6b:0b:a8:5c:c1:3c:d6:a6:
                    d1:70:e5:72:56:35:a4:af:1c:58:7c:ff:62:55:25:
                    27:b4:57:1c:c8:11:30:98:e3:a7:c9:b6:f0:03:89:
                    77:ac:d4:65:7c:7e:40:3f:b1:52:a4:58:07:61:ca:
                    f4:b0:f1:77:90:c5:4a:b5:4e:65:14:91:01:aa:e6:
                    2b:d5:3d:98:66:96:1a:03:6d:d5:7b:9f:a6:5d:90:
                    20:66:43:55:b9:24:d8:be:27:54:f7:e2:a0:72:14:
                    b7:00:06:39:ea:8f:f8:ee:e2:44:54:b9:bf:18:41:
                    c4:0b:28:04:a2:1e:87:02:83:56:42:fb:a6:75:52:
                    96:f1:20:40:ce:84:4a:86:3c:bc:62:4c:cb:cd:10:
                    cf:86:1a:8d:21:29:ff:9e:86:bb:41:7b:9c:4d:e5:
                    5a:83:d2:77:f2:66:8b:f8:3a:1c:e2:15:26:d2:f1:
                    a0:fe:dd:1b:98:b5:76:1d:51:fc:5b:5a:97:70:9e:
                    a0:07:46:a7:ac:99:da:48:5f:eb:d0:0a:48:a8:ae:
                    91:e9:38:8c:c6:ea:58:9a:ef:c1:0c:da:5b:b7:fb:
                    89:2b:ca:51:b5:76:b2:d7:26:68:dd:25:db:3d:0f:
                    ca:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E9:39:07:18:19:A3:46:CE:AB:4C:79:B0:91:95:FB:89:17:48:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/63faf176-974b-37b5-afc9-e0bb2d472da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:46:28:60:15:54:53:80:fd:d6:bb:51:bc:9b:3f:fb:d6:1f:
         10:86:0b:33:56:8e:c8:16:65:f4:3d:9b:2e:3f:ed:be:a6:58:
         8b:31:dc:45:1a:53:24:e6:f6:99:ba:be:19:c5:d4:17:bc:fe:
         e1:ab:a1:9a:2f:b4:a7:e2:4a:ff:b2:0f:6c:26:df:dd:0c:6d:
         c2:68:8d:ec:72:b5:be:57:2b:d8:d0:bb:65:c7:3d:46:67:46:
         35:71:a3:90:91:16:6b:5c:ce:c5:e4:85:84:84:d2:a5:bb:ed:
         73:e1:c3:e2:7d:c4:92:29:02:88:30:5f:24:c3:55:00:3a:3f:
         10:5b:3d:a1:ea:7f:8c:8e:9c:83:81:82:1a:8b:67:72:62:e1:
         c5:dc:e0:ed:ee:b6:66:cf:57:1c:08:91:ac:d9:91:63:8d:f6:
         a0:d9:73:d9:71:1f:eb:b9:1b:e5:e3:ea:d6:f0:e6:db:c8:39:
         63:49:99:59:10:da:bb:a9:d5:67:e2:69:ae:ad:d7:c4:11:42:
         76:6c:0b:f4:67:11:d1:15:d5:59:d4:ab:fb:4c:2d:36:52:15:
         6e:44:06:cd:af:da:b5:33:4a:a7:03:c4:e7:fa:79:32:a3:f8:
         3a:b9:c5:76:3e:a4:b6:eb:8a:bc:4a:d0:c3:6d:44:22:a8:67:
         11:82:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 10:48:08 2025 by rpki-client