Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa
File:                     63aee57f-ea1e-3244-9dc6-9d601b827d14.roa (raw, json)
Hash identifier:          ZeKzwMypwugtDRl7qx+Qb68JyXZdUpbPsSQl/d6hNXU=
Subject key identifier:   A4:3C:98:E5:75:8E:5D:3B:4F:0D:E7:F3:B2:88:71:13:E7:52:C0:A0
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584B58287769805D53585B7F85F8
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa
Signing time:             Sun 28 Sep 2025 12:20:22 +0000
ROA not before:           Sun 28 Sep 2025 12:20:22 +0000
ROA not after:            Sat 27 Dec 2025 13:20:22 +0000
asID:                     5650
IP address blocks:        207.180.16.0/24 maxlen: 24
                          207.180.17.0/24 maxlen: 24
                          207.180.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:58:28:77:69:80:5d:53:58:5b:7f:85:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Sep 28 12:20:22 2025 GMT
            Not After : Dec 27 13:20:22 2025 GMT
        Subject: CN=fe083531-e6b5-491c-b1c8-e26db0b59cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3c:29:c2:f0:17:2b:1f:44:36:a2:e2:1e:ec:
                    ac:00:13:76:62:33:ef:3b:09:cc:33:55:e3:d5:94:
                    72:0c:fc:a9:e8:be:40:21:da:9a:27:3c:b2:a1:6a:
                    97:d4:5f:2d:e6:60:5f:59:94:50:58:cc:1e:96:79:
                    93:d9:d8:d0:ed:5d:22:4b:09:0f:ff:b1:c7:f6:a6:
                    f3:a1:dc:0f:ca:39:d7:d2:15:f3:f9:0d:dc:48:d8:
                    d4:3c:d8:74:80:ca:52:df:bf:d2:8f:8e:1d:5d:15:
                    87:3b:9a:86:b7:91:ff:5e:19:18:b7:b1:2f:d5:49:
                    4c:61:d9:1f:1b:0b:98:60:e5:76:90:a3:bd:7f:f1:
                    ea:68:2d:65:2d:be:19:82:31:04:da:04:d2:03:bf:
                    74:c1:52:17:09:ce:c5:50:5b:90:ae:73:47:9a:46:
                    9e:d3:90:43:74:9e:51:6d:68:80:02:c3:70:e0:7e:
                    5a:cb:98:c7:63:89:fb:7a:f0:95:d8:54:b3:31:b7:
                    a3:d9:3b:86:28:79:0e:f2:29:6c:e5:da:18:dc:5c:
                    dc:35:8e:13:88:a8:a8:72:72:41:1c:b4:75:c4:00:
                    06:e7:49:79:be:08:e8:62:62:c8:92:0d:fa:84:95:
                    eb:5a:84:04:45:49:c5:02:cb:f9:15:9c:73:73:5b:
                    b7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:3C:98:E5:75:8E:5D:3B:4F:0D:E7:F3:B2:88:71:13:E7:52:C0:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/63aee57f-ea1e-3244-9dc6-9d601b827d14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.16.0-207.180.18.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:84:55:fd:79:32:36:20:71:02:b3:23:bc:4f:f7:1b:41:3c:
         f6:ad:79:5c:ea:38:01:eb:2f:ae:03:5f:ae:4f:dd:28:55:7b:
         75:bd:00:58:9e:83:99:95:b3:1b:9e:15:14:99:76:99:25:05:
         ca:b1:04:ea:06:2b:f3:85:ef:37:ec:8c:2b:30:d9:81:d4:4b:
         f5:0e:38:e5:f8:e1:9b:73:07:25:bc:58:4e:70:0a:fe:f3:f7:
         49:96:da:cd:95:db:2b:ae:21:29:e5:52:d3:b3:e6:ae:cd:94:
         d8:ce:7f:ce:c4:77:47:37:6d:eb:86:14:df:4c:48:34:89:34:
         3c:63:59:ee:96:37:43:19:ee:a9:06:6e:ae:e7:f3:1c:e9:50:
         1c:12:d5:38:89:4d:ac:71:1d:f4:7b:45:61:30:75:cb:3b:45:
         e0:ff:a1:f8:fd:bb:06:f5:13:4b:40:6a:fc:50:66:a1:3b:81:
         20:da:9d:ed:7a:86:e0:f8:e8:44:4e:47:6f:a9:4a:30:51:96:
         ce:0c:75:f0:81:84:1a:79:8b:37:15:68:15:49:ef:d6:6a:5b:
         6b:a6:61:57:14:e2:77:2d:29:9e:cb:f4:59:1e:21:e0:29:9a:
         59:4d:5a:b7:11:14:65:e7:c9:86:62:2b:72:58:40:9b:59:fe:
         b5:13:f4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:04:59 2025 by rpki-client