Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
File:                     40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa (raw, json)
Hash identifier:          yWItyyBfObppBvGYi565i08O0JipgBwcJDH27qhsy9M=
Subject key identifier:   89:35:74:1A:0B:3A:1C:4D:66:66:89:11:02:BB:97:E3:39:19:8C:09
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584AC2E11507E17C03EC6E09A900
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     13781
IP address blocks:        63.151.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:15:07:e1:7c:03:ec:6e:09:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=f7131e2a-1f94-4439-ada3-23e9ffa69b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:0a:a3:cf:93:5d:6f:f7:2c:69:4e:67:0d:
                    bd:97:b4:c2:ee:23:6c:d0:6f:b3:f3:0a:e0:98:d3:
                    23:88:81:5f:df:06:cc:ad:eb:59:e5:fd:a8:31:32:
                    bc:ef:bc:10:f5:26:c7:a8:ac:1c:d5:3e:a9:15:dd:
                    41:15:be:b1:a7:0c:72:7a:71:7c:a3:74:dd:2b:ce:
                    f6:27:dd:b8:41:8d:4e:37:54:b5:d5:a6:d8:ca:0a:
                    a8:4a:fe:40:81:0e:02:0b:b5:36:dc:fa:71:4b:41:
                    1e:9a:32:ee:4f:a6:7c:d6:6d:e4:95:c6:83:cc:fe:
                    be:64:c6:09:fd:31:88:5f:d9:67:79:ee:70:2c:35:
                    05:58:f5:5b:23:01:41:93:47:81:43:ac:b9:f1:9d:
                    9e:89:ee:02:09:4c:9a:4a:8e:46:80:42:9f:c0:63:
                    a6:c5:33:ad:46:b3:48:d2:86:b0:84:41:93:7b:91:
                    50:cc:f0:b9:1a:aa:fa:cd:d0:d4:76:ea:a8:6d:ac:
                    2b:9d:99:99:13:6a:09:2d:21:ae:4b:53:e0:d7:e0:
                    0d:82:ac:1c:ab:0c:7e:ad:d7:9e:93:53:6a:2b:b6:
                    2e:fe:17:eb:ed:7e:8b:9b:73:53:81:e2:98:fe:c4:
                    96:b9:7f:56:d2:48:3f:17:3d:6e:2b:e5:9f:27:cc:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:35:74:1A:0B:3A:1C:4D:66:66:89:11:02:BB:97:E3:39:19:8C:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.151.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:66:f3:10:8a:35:10:fe:3e:e6:34:3a:ff:1b:96:66:a2:
         d0:9e:ee:09:3c:9d:1c:d3:df:9d:0f:5a:4d:59:29:78:96:71:
         ef:ea:27:e4:c2:10:9e:fd:17:b1:01:64:ea:ed:c5:ae:6f:63:
         f7:10:2c:fd:f5:c3:f4:48:51:e6:14:3d:b7:a8:36:b9:b2:b1:
         a8:ef:07:a6:d2:51:92:bf:4d:2f:ab:9f:f0:24:1a:45:0f:83:
         5d:79:dd:49:32:9a:5b:f3:2e:1d:6d:59:34:63:f9:95:b8:67:
         41:e7:02:22:11:bd:c7:d8:c8:1d:3e:64:e9:d7:bc:d2:97:88:
         e8:f7:1d:81:e2:9c:e7:29:80:0a:f2:14:e7:e1:33:5b:4f:e7:
         47:34:cf:c2:ad:d8:2a:f0:ef:d3:08:29:11:d7:46:46:ec:af:
         4a:17:f6:6e:01:ae:d5:48:2c:e6:c4:1b:b5:ed:2f:5a:82:db:
         76:6f:f6:f0:18:cb:1d:c3:e9:9a:76:01:01:0e:10:70:c4:45:
         ef:54:ef:b6:74:76:b6:f1:3c:ee:89:4d:7f:33:b6:d2:59:73:
         0a:fe:60:f7:06:5a:b1:f2:b5:11:76:8d:83:9e:31:84:b8:a7:
         b0:a0:a1:e0:fe:6e:d9:7f:82:87:8f:9c:34:e2:b9:9d:93:8e:
         5d:70:86:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:45 2025 by rpki-client