Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7167939d-8814-3d99-8ea6-8c14322c6a84.roa
File:                     7167939d-8814-3d99-8ea6-8c14322c6a84.roa (raw, json)
Hash identifier:          AJPxrSYdU1ZZZS8sVfJXN271D+Co8TkTTcG85ADkOs4=
Subject key identifier:   58:71:58:E6:3B:AB:62:8D:A0:AA:BE:75:A4:CA:68:D3:AC:80:EF:B0
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584AF5213497B3B7B1C6B3782900
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7167939d-8814-3d99-8ea6-8c14322c6a84.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     55720
IP address blocks:        63.135.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:34:97:b3:b7:b1:c6:b3:78:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=7400c88a-6787-4c36-b3cc-e39617faf02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:89:be:c6:0a:65:14:4b:80:0f:b9:fc:40:
                    38:36:e2:d9:89:3d:a0:28:6b:8f:3e:fb:5b:7f:1c:
                    8b:f5:cb:81:8d:d0:33:fc:b7:43:5a:38:ba:a8:62:
                    bd:46:e4:7f:25:19:b1:b1:69:bb:e7:94:48:3e:ad:
                    44:cd:66:4e:b9:64:26:af:83:1a:00:4a:e8:e9:22:
                    15:fe:b2:36:7f:d2:a4:ad:a8:cb:64:52:72:ac:85:
                    8a:65:ac:20:1f:32:5d:0a:9a:6d:df:77:73:b6:61:
                    ad:5f:6e:a9:a3:cd:e0:6f:59:78:11:df:c3:02:87:
                    dc:7a:c5:38:72:9f:8c:b6:cc:b3:08:fe:45:77:f3:
                    62:25:82:4b:0a:1b:bb:d3:32:c9:66:11:62:d9:17:
                    b9:eb:f2:c8:ac:b4:04:94:11:ca:9f:44:93:6b:1a:
                    6d:75:b1:0b:09:1a:88:77:d5:35:b3:85:62:bf:9c:
                    05:65:37:32:ff:34:4b:4d:d3:f2:3f:7a:fa:c9:79:
                    e8:5b:60:42:c1:c4:62:8f:84:b6:8c:5c:11:67:77:
                    76:02:15:12:9a:6b:fd:05:8a:44:b0:0b:64:6c:c4:
                    eb:75:58:b4:fd:17:42:50:a2:da:ac:e6:f2:95:da:
                    8e:ea:60:2e:b3:6c:fb:f4:25:92:3e:bf:00:c8:68:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:58:E6:3B:AB:62:8D:A0:AA:BE:75:A4:CA:68:D3:AC:80:EF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/7167939d-8814-3d99-8ea6-8c14322c6a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:9d:b9:b8:23:dc:9d:6d:72:02:5e:57:f2:9f:e5:0a:5b:ee:
         34:fe:89:95:ae:e3:e9:a6:42:a9:72:2a:57:03:ae:67:3d:73:
         b7:c7:c8:65:68:8b:ff:23:35:a7:09:d1:59:c0:1e:79:6b:e0:
         e5:bc:05:89:26:2c:3c:96:49:5e:71:a5:73:6b:8d:80:84:fa:
         38:7c:b2:24:da:4a:66:19:05:c8:46:7b:57:f5:86:80:33:7b:
         1b:02:de:22:8f:ea:92:4c:4b:a5:e9:e4:95:15:8b:cc:c3:70:
         1e:3b:3a:73:15:bb:d5:26:89:4c:95:1f:89:5e:6a:88:e9:98:
         48:1c:4e:e0:da:4e:b3:f3:8f:dd:59:cc:c2:1c:f7:ae:e3:68:
         78:c2:31:c0:43:92:96:d0:56:04:f0:30:d6:a0:72:3a:1d:10:
         23:e4:7f:97:0e:bf:4f:02:4a:6a:9b:33:98:fd:be:25:15:f9:
         63:d4:80:bd:c0:ab:5f:1b:b6:c4:fa:ba:b5:c6:8d:ca:dc:5f:
         16:65:37:98:8b:23:a1:41:68:29:fa:81:23:b5:50:b4:95:14:
         d5:0d:7d:0b:86:b4:2b:eb:48:c5:12:a9:69:39:1b:ab:55:35:
         3e:2e:ad:ae:da:fc:cb:ff:7e:54:9e:f6:78:e8:e5:b3:3a:f6:
         72:9a:c6:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1ITSXs7exxrN4KQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk
NzQwMGM4OGEtNjc4Ny00YzM2LWIzY2MtZTM5NjE3ZmFmMDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbGJvsYKZRRLgA+5/EA4NuLZiT2gKGuPPvtb
fxyL9cuBjdAz/LdDWji6qGK9RuR/JRmxsWm755RIPq1EzWZOuWQmr4MaAEro6SIV
/rI2f9KkrajLZFJyrIWKZawgHzJdCppt33dztmGtX26po83gb1l4Ed/DAofcesU4
cp+MtsyzCP5Fd/NiJYJLChu70zLJZhFi2Re56/LIrLQElBHKn0STaxptdbELCRqI
d9U1s4Viv5wFZTcy/zRLTdPyP3r6yXnoW2BCwcRij4S2jFwRZ3d2AhUSmmv9BYpE
sAtkbMTrdVi0/RdCUKLarObyldqO6mAus2z79CWSPr8AyGhTGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFhxWOY7q2KNoKq+daTKaNOsgO+wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvNzE2NzkzOWQtODgxNC0z
ZDk5LThlYTYtOGMxNDMyMmM2YTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4egMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGOdubgj3J1tcgJeV/Kf5Qpb7jT+iZWu4+mmQqlyKlcDrmc9c7fHyGVo
i/8jNacJ0VnAHnlr4OW8BYkmLDyWSV5xpXNrjYCE+jh8siTaSmYZBchGe1f1hoAz
exsC3iKP6pJMS6Xp5JUVi8zDcB47OnMVu9UmiUyVH4leaojpmEgcTuDaTrPzj91Z
zMIc967jaHjCMcBDkpbQVgTwMNagcjodECPkf5cOv08CSmqbM5j9viUV+WPUgL3A
q18btsT6urXGjcrcXxZlN5iLI6FBaCn6gSO1ULSVFNUNfQuGtCvrSMUSqWk5G6tV
NT4ura7a/Mv/flSe9njo5bM69nKaxpI=
-----END CERTIFICATE-----
Generated at Fri Sep 5 08:50:48 2025 by rpki-client