Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa
File:                     7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa (raw, json)
Hash identifier:          +qp2mea5YapQVkt9QJ0SVKjlfK8Fem8Cjf1+J7ndhps=
Subject key identifier:   E1:B6:52:F8:62:D8:9E:F6:84:B5:48:C5:C7:0D:D1:0E:F4:6F:A8:0F
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584BBFA597C8B07A6C53454CDE80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     32056
IP address blocks:        63.156.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:97:c8:b0:7a:6c:53:45:4c:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=fecaadaa-709b-45c4-96ec-9dcbf7c55f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:aa:60:aa:29:3f:a5:2e:b0:5a:e5:c5:d9:03:
                    a6:c1:a8:35:9c:5f:c7:ab:6d:60:38:8c:a8:dc:6f:
                    d3:c0:41:60:b0:b7:4c:6c:1e:f0:e4:78:df:57:12:
                    2f:df:d0:38:5e:d1:51:b4:37:9a:bd:5f:3b:2f:5b:
                    4e:03:a1:3c:c2:45:83:fe:5f:2d:58:ae:f1:6f:65:
                    b5:bb:fa:d9:82:12:a3:14:f6:7c:52:64:80:73:1e:
                    bf:1a:17:bf:49:c4:63:97:a6:72:37:8c:2c:d7:20:
                    ff:a4:53:f6:5d:5e:3f:b6:c5:a1:a5:ca:c4:76:44:
                    9a:78:47:ce:35:94:b4:a5:b0:fd:da:53:64:1b:8f:
                    b5:05:b3:7f:b0:55:b2:20:a5:86:0f:fe:3f:63:94:
                    fb:43:93:1a:f0:de:51:95:19:f6:db:95:d1:a0:93:
                    4e:f8:ce:34:f5:b8:fa:8e:e5:6b:ba:f8:f9:8c:b9:
                    90:22:89:1a:ae:d6:c2:6b:52:bd:3d:75:3a:5b:2e:
                    3f:a8:6b:d1:81:92:4a:9e:60:68:c7:2f:87:26:ff:
                    92:d9:64:24:2b:54:d3:b8:c6:0d:0b:4c:1f:60:c8:
                    68:a1:b8:e5:72:24:dd:79:6b:49:6f:cf:ce:2a:b0:
                    c4:bc:13:73:61:c0:58:c2:4c:88:ba:84:9c:5a:93:
                    6f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:52:F8:62:D8:9E:F6:84:B5:48:C5:C7:0D:D1:0E:F4:6F:A8:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.156.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:21:4b:8d:0b:f1:9b:07:37:1e:98:39:f3:3c:5e:fc:b8:d1:
         97:fb:d8:c2:a2:6e:f3:df:e1:88:64:fc:12:c0:b3:fe:9c:82:
         50:51:e5:1f:cf:8d:5c:4b:cc:41:1c:a1:1e:2f:d0:4c:7a:93:
         76:62:a2:2b:e7:c1:ff:3f:d2:74:13:fc:e6:94:4d:55:c5:e5:
         c9:bb:be:a1:db:7f:d5:aa:14:bb:6f:f4:25:c2:aa:df:68:8e:
         b3:1a:bb:01:67:7e:5a:a3:ef:ba:3b:f5:0e:28:c8:77:c2:9c:
         b6:19:e1:6e:02:64:f8:be:9b:e4:12:a1:6f:06:9b:fb:bf:59:
         e8:3e:ba:b7:a3:c0:9f:2c:c7:f8:7e:56:eb:80:8e:08:c9:7c:
         58:96:af:ac:02:39:31:e1:fd:01:d8:34:88:a8:03:d2:e5:da:
         e9:04:66:4c:6d:a3:08:53:28:bc:e1:a7:03:3e:df:4c:59:bb:
         70:fd:8f:96:bd:27:22:03:ae:27:73:98:f9:2d:8e:15:86:20:
         64:b5:e4:74:24:e9:f3:71:c7:b9:d0:a3:95:dc:35:3b:0c:31:
         ed:80:74:db:74:c1:f4:9b:3e:b4:85:e3:11:90:05:2f:d5:d7:
         18:4d:6c:1d:fe:3d:e3:1c:1f:9a:a6:7a:b9:b8:82:03:2b:f9:
         97:30:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:18 2025 by rpki-client