Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa
File:                     dd455689-082e-392c-88ad-5a693a5b24fc.roa (raw, json)
Hash identifier:          jMgPQ7Pi6oTBAq8sKgV+mJ9qyhWjrp1PM1LX0Usiyrk=
Subject key identifier:   F4:B3:ED:EB:49:21:C6:3E:0D:6B:33:F0:85:31:85:1F:A4:E7:8D:D5
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584B9E07938CA96F0A414B5C9E40
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        63.142.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:93:8c:a9:6f:0a:41:4b:5c:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=d30cfcdf-9572-44b6-b64a-bcee919d6333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:56:24:ac:45:dc:43:d6:be:75:fb:6c:af:f8:
                    1e:93:32:69:6a:9e:87:f6:f3:97:ba:5f:dc:56:5c:
                    f7:03:81:19:d4:4d:cb:3f:19:51:f9:2a:59:03:2c:
                    85:8d:8d:37:f0:64:68:12:4f:39:16:c3:68:9b:2a:
                    cc:a0:aa:fa:f2:ae:c4:80:55:0a:ed:4a:3c:37:a3:
                    25:6f:b0:d8:07:8d:e5:25:78:f8:98:cc:a0:4b:31:
                    fa:e6:48:50:69:cf:2d:07:8c:1b:89:95:89:4e:5e:
                    96:7a:72:c8:1b:de:be:59:1d:15:1c:93:61:e4:82:
                    fd:b2:3f:7b:fa:24:ef:bb:25:01:99:71:93:db:fc:
                    95:dd:a7:f2:eb:55:50:08:ee:68:92:12:f7:5f:0b:
                    c4:98:33:93:60:99:d5:58:da:bf:65:cc:26:43:97:
                    89:29:03:fc:43:2f:b9:ca:a5:c6:c0:1e:60:e2:83:
                    dd:85:3c:b8:10:09:33:55:1e:d8:af:be:2d:1f:41:
                    1e:3a:53:fc:30:ef:62:ce:62:1a:67:c2:96:cd:3d:
                    e4:27:59:22:e0:af:05:0e:7f:90:64:0d:4a:50:2b:
                    45:e7:60:ad:d1:fb:b9:b3:85:50:d8:ab:02:22:1e:
                    91:a5:e8:4e:70:7e:55:34:bc:7f:ff:39:98:8b:02:
                    a8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B3:ED:EB:49:21:C6:3E:0D:6B:33:F0:85:31:85:1F:A4:E7:8D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dd455689-082e-392c-88ad-5a693a5b24fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:95:90:85:b1:d0:40:ed:0e:01:0b:87:4c:65:e8:93:fa:59:
         9d:49:6c:7d:27:98:00:4c:eb:7c:c1:c3:cf:4a:7b:69:ee:68:
         66:c1:38:8a:1a:fd:76:4c:b8:a4:d6:9b:22:10:91:ba:82:3a:
         51:1c:28:2e:13:d3:7b:bd:2c:28:b2:a5:f4:c5:4c:70:7c:66:
         76:63:14:11:c2:55:ae:82:5e:a2:67:a8:7f:63:e8:06:d1:f2:
         8a:83:f2:fe:35:58:06:02:e2:ce:01:4f:d3:1f:62:46:0d:1f:
         57:25:14:11:9f:98:ee:b2:ab:46:6e:87:70:73:8d:a6:41:2a:
         64:d4:f9:ad:6d:cb:8a:09:6d:65:24:7e:92:b0:a8:dc:30:5b:
         8d:4c:89:73:d0:ea:fa:07:31:fb:d3:2a:ae:d1:03:5e:e7:e5:
         bf:b8:b2:27:44:b5:c7:fe:97:34:43:f4:78:8e:af:d2:27:a2:
         6e:78:73:1a:e8:7e:ad:7d:49:11:ee:60:ec:2f:7c:4e:43:a9:
         c7:c6:7a:29:0b:38:23:04:7e:94:88:99:86:a4:7f:35:17:66:
         e3:9e:a0:25:a2:cf:fa:25:38:de:3b:68:75:34:49:a0:ad:02:
         07:f9:53:4a:63:b6:fc:ce:5c:b0:09:63:11:e2:ba:9d:23:05:
         5e:c6:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:29:18 2025 by rpki-client