Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0ffd8cf9-edd6-308f-8b13-d5ddd53a116e.roa
File:                     0ffd8cf9-edd6-308f-8b13-d5ddd53a116e.roa (raw, json)
Hash identifier:          Ea0V99R7UV9GRaugeTDhEJrQ8v2bgzuRj3TV5aE0c3I=
Subject key identifier:   18:26:0D:67:7E:1F:EE:D7:08:BD:34:71:36:EA:0C:98:1C:A3:1B:50
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584B0A115C32FC1549295BD42F80
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0ffd8cf9-edd6-308f-8b13-d5ddd53a116e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5c:32:fc:15:49:29:5b:d4:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=a59bc510-a1ca-4c71-ab76-a23638edccf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a3:2a:ca:ee:ba:b3:36:0a:b0:d6:64:91:b9:
                    72:ac:a8:c7:b3:40:74:ab:9c:a4:92:a2:e6:94:82:
                    df:cc:15:d2:40:1a:a8:28:73:ea:4e:10:1f:87:69:
                    03:83:6c:b5:07:05:80:ae:74:87:de:06:19:cd:5d:
                    68:49:0b:b6:68:44:31:72:e6:77:36:2e:a1:82:0a:
                    53:ab:a8:85:ab:37:b7:9d:ed:2b:c2:3c:d3:08:2b:
                    41:7a:85:e4:88:10:f0:6a:0e:b9:61:da:8e:0f:96:
                    27:40:bb:8a:3d:38:67:80:ef:7e:37:f2:88:90:dd:
                    99:50:93:fa:80:38:77:dc:13:5a:c8:82:c4:74:9c:
                    4b:8f:ab:47:4d:b7:14:16:6e:08:23:ca:fa:fe:57:
                    48:ef:73:7f:ed:bb:1b:2a:87:3b:96:df:a6:34:ec:
                    dc:a4:28:35:70:85:e6:9d:5f:f3:24:8c:6d:d6:8b:
                    e9:0f:9e:f8:9b:5e:fa:86:9b:a0:25:02:a0:62:5a:
                    82:12:28:15:56:4b:02:f5:a8:ea:fb:60:66:62:17:
                    3e:94:86:62:94:fd:f2:f8:c4:39:10:80:f3:f1:55:
                    ab:a9:8d:c6:e0:bd:61:bd:23:23:cb:cf:73:3f:d7:
                    2b:19:d0:3d:68:6a:0e:a8:70:1c:fd:f4:f9:84:c9:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:0D:67:7E:1F:EE:D7:08:BD:34:71:36:EA:0C:98:1C:A3:1B:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/0ffd8cf9-edd6-308f-8b13-d5ddd53a116e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:25:b4:c2:2b:76:3b:13:df:05:a4:69:71:20:4d:8b:5b:0a:
         98:64:3e:8e:6c:87:b3:7f:1b:16:43:37:be:84:4a:c1:30:d6:
         7a:f8:ad:8f:e7:94:84:9a:1d:71:f7:f3:f4:1a:ac:53:12:cc:
         d0:ac:cc:86:fb:ff:f5:da:c8:f4:9f:9f:b0:54:45:57:13:1d:
         f6:61:b5:26:35:1f:fd:7c:23:a6:5e:99:4e:51:57:20:70:b2:
         17:1f:cd:86:65:b4:12:69:a7:e3:6b:ae:fd:e6:9f:4e:a6:36:
         19:46:c5:90:f1:ec:f0:f6:ed:c3:b7:40:b2:85:8c:91:68:36:
         58:e2:1f:7d:69:ba:8d:b7:e4:6b:6f:6a:99:39:08:6d:38:10:
         99:be:66:3f:29:70:4d:dd:22:eb:fe:ef:40:f5:12:21:3c:28:
         9b:7f:d4:86:94:c0:ff:a8:d0:22:33:1f:13:81:30:76:73:d4:
         fd:36:37:3d:76:b7:ee:05:fb:a7:e5:95:27:91:d2:15:16:9d:
         62:1e:c3:bf:2c:16:b4:8f:45:9a:75:f3:af:70:03:66:8f:15:
         ec:6e:b3:c8:62:de:e2:44:65:65:91:e5:77:eb:4c:24:29:45:
         ef:bd:64:13:65:85:db:88:f8:60:13:b5:a6:12:50:d7:40:77:
         c1:b4:52:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:39:11 2025 by rpki-client