Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
File:                     bedfd239-0021-3ee0-be05-d5cf473a267e.roa (raw, json)
Hash identifier:          S5U0ekiLYIuqFnOpw6KqjH2KKhpdgIfdHgo2ENaQ1zI=
Subject key identifier:   E8:6F:C3:2A:CD:39:87:9A:A7:73:32:F2:2A:21:34:60:01:6B:CB:FA
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584B0746AE760F5DC39ADBD01200
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:ae:76:0f:5d:c3:9a:db:d0:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=5c8a6b2a-447f-4807-9005-6062ccacf4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:f0:fc:ad:6b:5f:73:0a:6d:14:f2:96:7c:
                    a9:0d:c8:68:a4:b6:f3:4d:93:85:97:71:c5:20:bb:
                    45:76:e7:b6:ba:7b:dd:c5:a1:08:62:cd:1b:37:50:
                    24:a7:70:12:08:10:56:9e:13:00:fb:c7:2f:37:38:
                    d0:1e:dd:fb:fd:da:d9:06:ed:d4:be:1e:c2:f0:ee:
                    ec:37:3e:3e:2b:ae:55:d5:59:7e:4b:d8:f1:5c:0c:
                    cf:dd:36:c4:c7:a4:dc:36:44:21:14:e9:91:51:e4:
                    f0:d8:3f:cf:c7:a7:1e:4b:c4:17:46:b4:6a:d2:cd:
                    5d:ca:06:9e:c9:77:04:41:20:e9:ae:aa:54:74:83:
                    b5:4b:0b:55:46:f3:af:bb:54:fe:26:5e:9d:51:8c:
                    a5:4d:2a:3b:e4:ea:18:3d:33:b4:f7:80:1b:dc:e7:
                    ce:e1:b1:5f:ea:f2:08:56:61:06:15:3c:f4:73:95:
                    ef:85:06:2a:3d:eb:ed:e3:84:da:52:90:52:5c:82:
                    f8:31:66:64:d0:8c:a3:51:cf:a3:25:ec:52:65:71:
                    e9:75:20:e9:5a:13:a7:7d:8d:fd:ae:09:bf:5f:87:
                    b9:cb:cd:e6:e4:5c:98:02:12:75:ae:ac:5f:5a:cd:
                    b8:f4:05:88:1d:58:99:ec:3b:e1:1a:4c:c1:db:66:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:C3:2A:CD:39:87:9A:A7:73:32:F2:2A:21:34:60:01:6B:CB:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:11:ab:c6:0f:cf:28:09:cf:4f:12:3b:f9:ed:e7:f6:5c:dc:
         7b:f1:34:a2:45:70:5d:36:e8:e9:5a:ce:2f:f1:68:fd:e7:6f:
         45:39:30:3c:21:53:f1:0b:67:5b:cb:84:2f:ba:e3:fb:07:10:
         03:bb:85:64:0b:c6:6e:db:51:64:bd:eb:3e:d7:af:7d:ef:01:
         a5:11:a7:da:24:24:ab:1d:d2:70:b1:ca:73:45:9d:ec:77:e4:
         f5:fa:5c:0d:45:32:f3:66:8f:50:a3:c1:c2:c7:aa:02:a1:f1:
         b6:2f:29:33:e7:7e:ba:60:ce:e8:d2:ad:d9:46:9d:a9:f7:f4:
         52:48:40:a8:a1:2f:0e:f7:1c:c9:96:01:4d:36:be:ca:7b:ac:
         05:d0:45:d1:73:71:21:20:eb:6e:5f:07:5f:1f:6f:02:de:46:
         d8:8e:4e:4e:e9:c5:de:43:9f:55:86:8b:6f:db:c1:e1:fd:46:
         ee:c5:fc:6e:04:6d:72:c9:89:6e:06:a4:97:97:45:e2:9a:be:
         39:ab:ae:a7:90:d7:42:21:c9:11:4a:3d:8c:0c:e7:e3:44:9c:
         77:03:a4:72:ee:50:60:14:5e:00:8a:18:55:81:09:68:b1:d7:
         be:98:bb:04:78:27:b2:89:23:99:df:f2:2c:2d:0d:18:80:b7:
         3f:03:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:34:35 2025 by rpki-client