Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ec4ba677-d105-3924-bcd9-086053660eda.roa
File:                     ec4ba677-d105-3924-bcd9-086053660eda.roa (raw, json)
Hash identifier:          iStYQ9qFJXf8+9vpm/dQqwfTlvS7qSaQOB8rBuHqFFk=
Subject key identifier:   38:DF:0F:61:7B:3D:CA:6A:7C:98:92:23:08:62:95:95:2C:12:BC:C0
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F4328584B0A11613CAA3D46EC8FCB0980
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ec4ba677-d105-3924-bcd9-086053660eda.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     13414
IP address blocks:        64.63.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:61:3c:aa:3d:46:ec:8f:cb:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=80a3ea11-9c89-4227-94c5-b3a149ec4bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:94:9c:16:56:b9:80:87:ed:bd:95:03:7c:
                    8f:73:fb:f5:b9:d6:90:1c:b0:fe:76:1e:94:f0:ba:
                    e7:68:c2:31:59:73:34:05:9c:0d:8d:d9:19:5c:94:
                    88:54:a2:47:a3:a7:e3:51:06:c5:ea:a7:dc:1c:d8:
                    c8:7c:9b:bf:c4:0d:6d:26:54:03:7b:06:90:4b:49:
                    a6:0f:a3:59:3f:f2:99:17:00:fd:cd:7b:64:e7:a0:
                    50:97:d5:bc:9c:91:67:df:82:a6:b4:ea:6f:2f:d4:
                    f5:f4:ff:c6:9c:3c:6d:7f:c2:ea:bd:e8:b5:e9:70:
                    d7:81:94:f5:c0:57:53:af:a5:73:d3:42:7a:04:02:
                    9c:79:94:50:2a:8d:2c:bc:91:68:c0:ec:57:12:6a:
                    4b:b8:7c:01:13:d6:64:b1:ad:69:97:ea:75:d0:27:
                    57:f8:8c:34:cc:ee:5f:a7:2e:63:82:ea:4c:0c:5d:
                    a6:a6:b0:1d:23:15:82:65:21:c5:b0:ac:b8:96:d0:
                    2a:76:17:9a:89:c3:25:8e:bf:82:9a:77:92:38:24:
                    03:34:ef:9d:ae:42:22:45:11:05:08:bb:3c:e7:5f:
                    27:37:d0:fd:4e:0a:f2:16:89:aa:60:28:9e:3c:b0:
                    61:40:6f:b0:f4:a9:32:ce:ce:7c:6c:98:02:0f:22:
                    e6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:0F:61:7B:3D:CA:6A:7C:98:92:23:08:62:95:95:2C:12:BC:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/ec4ba677-d105-3924-bcd9-086053660eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.63.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:3e:0b:bd:8d:be:93:e5:18:10:59:21:fb:d7:17:40:02:
         8a:64:0f:19:5a:27:c1:6a:d6:57:3f:65:21:ad:62:c8:b6:04:
         ce:32:c3:02:4f:1d:34:a0:8d:4f:66:af:b1:ab:db:0d:23:2e:
         a2:f4:87:17:49:dc:6c:17:47:4f:ec:16:50:ff:0f:8a:d2:f0:
         45:41:3d:2c:2f:d8:0f:fe:fb:23:4c:52:74:cc:7a:a3:e3:2e:
         9c:51:af:37:3b:3d:85:9c:b1:9b:82:19:85:5e:54:8f:53:e9:
         10:e5:39:67:64:92:ad:4e:c9:08:c7:2a:e9:68:70:9b:aa:98:
         8b:13:2a:77:6e:d2:a4:c7:bb:61:5e:58:5f:29:6a:af:a5:93:
         96:8b:5e:79:43:0b:d8:a7:ce:1e:b4:86:f5:27:ec:eb:c3:3d:
         80:fc:f4:67:f3:09:f4:ff:5d:52:db:83:f8:b9:76:ca:88:f4:
         21:7b:2e:bd:8e:6c:a3:8e:fb:da:f8:39:14:2c:b3:2b:a1:93:
         2b:7e:df:22:6b:1f:dc:1d:01:5d:ed:2e:0e:81:04:37:f6:1a:
         23:a0:da:31:2e:a9:a2:34:72:ca:80:7f:63:b2:28:6e:5b:24:
         8e:b9:78:68:3b:ec:45:75:6b:77:11:d4:23:55:c6:c4:cf:ba:
         51:5a:b4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 21:33:00 2025 by rpki-client