Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa
File:                     0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa (raw, json)
Hash identifier:          e9yBREmGljnxtuRqoFehBjOhRkNiowjV4gHrL2kxoSo=
Subject key identifier:   44:EA:90:60:1A:8D:CE:63:EE:C9:56:51:8E:45:60:2F:5C:9A:EA:A5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B9E07A8D6F22E264AC65B35C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        63.142.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:a8:d6:f2:2e:26:4a:c6:5b:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=ec3466b8-7a9f-47c2-941a-2ee8d8fdfece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a1:33:22:0f:b3:53:5d:b6:5a:91:35:08:ca:
                    5c:77:42:28:27:39:ab:71:65:ae:11:30:6d:7c:ca:
                    38:c9:e1:c4:ae:78:36:a5:e1:82:4d:dd:98:73:54:
                    c0:d7:b5:19:52:e2:93:f5:b8:c2:59:50:f9:b7:c4:
                    ec:20:1c:59:47:b2:cb:ec:7d:33:a6:59:42:3f:b4:
                    e7:8e:ec:89:6e:1d:a1:97:35:a6:83:d3:ec:f2:d3:
                    61:2d:4b:3e:89:f9:42:7c:92:f6:3f:7c:26:cc:c5:
                    6e:31:c3:bc:55:d3:2b:3a:2f:88:51:a1:61:86:fc:
                    22:f4:99:d4:55:ef:44:c2:7c:d7:8a:48:71:7d:0c:
                    a0:dc:1a:d5:c4:c7:9b:8a:2c:44:59:98:8b:0d:68:
                    36:2a:75:7d:9f:19:56:fd:0e:f8:71:b6:31:0b:00:
                    5c:79:96:36:04:f9:34:98:76:c5:a1:6f:14:d4:ac:
                    5d:06:e4:80:3b:63:e3:bd:45:3b:4d:74:fd:68:bb:
                    1b:c7:da:de:24:9a:07:85:0b:3e:68:ac:f3:b5:85:
                    7e:67:f0:ae:b5:1a:46:00:73:19:dc:76:90:6d:64:
                    5a:90:4c:7c:4c:47:19:0e:6f:2b:ed:31:4d:a5:e4:
                    b2:71:80:c0:e9:6a:7b:e6:5d:7b:1e:59:ef:a8:2c:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:EA:90:60:1A:8D:CE:63:EE:C9:56:51:8E:45:60:2F:5C:9A:EA:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0a3be1b9-5faf-3314-abda-6b1ce0fcafe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:2e:68:6c:18:7b:e7:27:58:ad:8f:9e:52:34:b3:a2:64:39:
         5a:77:ad:f0:ac:2c:c8:b4:9a:93:a7:45:52:c2:12:40:1c:d0:
         28:98:f1:ef:dd:22:95:29:d5:d2:89:ae:a5:61:94:be:cc:02:
         51:98:ae:f4:36:70:19:ad:8a:c1:8f:df:d8:06:11:41:56:b5:
         d2:f6:88:5d:e9:01:b7:f5:42:f2:2d:8d:35:da:27:b6:10:55:
         ef:17:88:1e:dc:aa:00:d1:63:21:a1:f0:08:f5:8b:37:1e:82:
         29:63:84:bd:f0:4d:66:9a:e4:95:1b:cb:4a:fb:07:6b:53:35:
         6b:ea:3f:a8:af:b3:1e:59:83:9c:09:37:1f:f9:4f:61:3f:e2:
         21:e8:5b:3b:07:aa:3b:8f:a6:34:ca:a4:e8:88:14:7a:4b:e2:
         f1:ef:f6:fa:b3:04:2c:63:e9:66:e1:30:bd:e2:c0:9c:17:88:
         bd:74:55:f9:b2:9f:4b:2a:39:b1:59:1d:8f:4d:7f:32:6a:9e:
         c7:7e:08:19:e7:e2:63:13:7f:ee:c5:db:a1:5a:a5:d4:3a:34:
         c8:8b:30:71:7d:77:71:f6:6a:74:16:46:d2:80:68:1d:62:86:
         86:62:92:be:5f:8b:8e:cb:d0:80:2c:1a:bf:44:e9:d0:72:63:
         ab:21:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:49:38 2025 by rpki-client