Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa
File:                     53432681-c412-3881-b43f-45740527d50d.roa (raw, json)
Hash identifier:          foIa3Id+Rb2ZFXIbCTLjE4BILZ5dntz2PBkRhpmM8L8=
Subject key identifier:   BC:E2:C5:52:A2:28:2A:9A:8A:F8:FD:3B:D7:50:EC:DA:33:9F:34:04
Certificate issuer:       /CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
Certificate serial:       010D0C9F4328584A8410C344BF4E88051EA9FAC0
Authority key identifier: 1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     21554
IP address blocks:        199.248.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:c3:44:bf:4e:88:05:1e:a9:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b81c928-08cc-4234-b15c-0f1a197c6e00
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=7b42d043-ec68-4781-a394-3d67ee1df8ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:88:78:02:21:d7:44:7a:e7:30:10:85:49:
                    41:fb:66:59:2e:fd:bc:5c:9e:51:7e:f0:68:44:a7:
                    09:85:6d:d6:5f:d8:e7:6a:2e:16:6c:3f:a8:3c:c6:
                    1c:50:8e:c7:99:89:c3:18:60:a1:41:a6:66:a3:af:
                    16:a1:00:52:e9:f5:ac:29:54:ef:b3:e8:84:93:40:
                    a6:78:dd:6b:a3:23:2d:b5:a9:3e:05:e5:f5:97:d5:
                    54:5a:62:5a:5f:1e:f7:f9:cc:79:43:95:03:b7:db:
                    05:45:a4:16:64:35:d5:26:c2:5d:6c:a2:cd:34:11:
                    0d:2b:f5:61:66:54:a3:e4:c4:51:2d:8f:29:e5:e7:
                    52:80:81:c7:9d:ae:52:e3:61:3a:0b:e7:62:f1:c3:
                    ad:56:8f:ac:c2:3f:37:ee:f8:89:a7:f4:cf:51:67:
                    be:56:3b:37:ab:83:3c:d6:4d:cf:ae:1b:66:9a:19:
                    b4:35:9e:df:a5:4c:3e:9a:74:d6:3f:97:a4:20:26:
                    4a:84:f5:cd:78:04:97:b2:88:ae:d3:89:6b:ac:64:
                    e4:44:68:5e:50:e9:a8:fb:cd:32:5d:00:2c:d7:95:
                    ba:43:42:15:4b:27:c0:b2:26:d8:ce:6e:80:c4:7e:
                    fe:6f:b1:71:8a:57:5f:60:d2:2c:e3:d0:66:f8:40:
                    2a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E2:C5:52:A2:28:2A:9A:8A:F8:FD:3B:D7:50:EC:DA:33:9F:34:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/53432681-c412-3881-b43f-45740527d50d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00/4b81c928-08cc-4234-b15c-0f1a197c6e00.crl

            X509v3 Authority Key Identifier:
                keyid:1B:22:75:A2:6A:D3:64:4C:85:63:84:DE:EB:D0:4C:56:67:2E:C8:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b81c928-08cc-4234-b15c-0f1a197c6e00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:23:c7:f8:a7:fc:b9:e3:bd:1d:40:1d:b7:93:49:71:bc:d7:
         69:f3:f1:80:f9:04:c8:6a:7e:3f:e0:99:1d:79:ed:59:3b:7b:
         b3:0a:d5:ba:91:2e:c9:e0:08:53:8c:83:49:f3:3f:f6:a6:64:
         b1:a0:7e:e3:ee:d4:49:4b:38:ab:34:18:bb:9d:14:3f:24:0a:
         0b:0e:92:79:b4:10:8b:0e:2c:25:e3:36:2f:eb:39:95:4b:d8:
         42:ec:86:00:e6:41:06:50:4d:1e:d0:b3:34:7f:47:0f:fa:fd:
         de:8b:6e:a4:ca:9d:bd:03:47:f7:9b:1a:25:6c:35:da:68:89:
         25:b3:b7:43:e6:47:ae:7f:5d:ef:67:43:f9:23:59:b0:17:0d:
         d8:b1:e4:23:46:ca:b4:a2:af:b4:81:c5:b0:b0:93:32:fb:47:
         d0:8d:e0:ee:10:a4:86:17:e1:04:7f:10:7a:7d:10:50:85:8a:
         38:46:b2:97:d3:c7:64:45:b4:1f:03:35:8d:a2:9f:86:a5:51:
         bd:92:3d:17:14:d7:17:4e:f9:43:6b:8a:91:3a:4f:1f:d3:d5:
         08:e0:38:80:b1:87:37:9d:ee:15:12:4a:cc:fd:6f:51:8e:34:
         e2:06:21:0b:2a:c0:33:72:cc:ee:33:74:2e:e6:b1:d7:70:9f:
         f0:60:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:38:40 2025 by rpki-client