Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa
File:                     dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa (raw, json)
Hash identifier:          0isk1CjQsVGnn/y0LNRg/skbKf8svt9KCvhBgG2MrvA=
Subject key identifier:   16:EA:F1:6B:91:93:99:2E:B3:BD:6E:36:94:89:C0:4E:73:95:96:14
Certificate issuer:       /CN=31009a8b-537b-4076-8ee6-38c45e51e37a
Certificate serial:       010D0C9F4328584AB91BAB35AF9B4048112BF834
Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     16509
IP address blocks:        63.133.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:ab:35:af:9b:40:48:11:2b:f8:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=09ce4e81-4542-42bf-860c-eca00f480a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bc:a8:7a:16:53:54:a6:79:85:48:fc:a5:f2:
                    b9:f6:0c:e8:28:96:00:57:3c:31:af:eb:ff:a5:49:
                    56:80:65:bc:e6:95:1b:d3:ac:84:99:39:45:ad:76:
                    2b:3f:af:97:98:e0:3a:72:27:77:f4:e6:ff:93:b3:
                    42:61:f9:09:ad:f0:4e:8d:4c:f1:8e:d9:ad:80:be:
                    e7:7c:b5:5b:8b:36:c0:4c:7b:d9:79:d4:66:c8:d8:
                    f3:4f:de:b1:f8:1e:23:5b:22:cb:f2:c5:ee:b9:4f:
                    55:ab:f0:9f:1e:84:40:31:38:6b:e8:91:96:b1:fa:
                    ef:5b:91:2f:4f:c2:34:b5:61:f1:31:62:2b:91:50:
                    3e:a7:13:dc:5f:c6:29:86:d4:59:a0:c4:0a:0b:ff:
                    fb:ff:c9:d3:27:6d:c7:98:d8:fd:1d:04:a6:40:7c:
                    b2:bc:c5:fc:28:58:26:9c:cf:48:05:a7:21:a1:c9:
                    0f:40:23:a6:ee:af:58:96:de:bd:3b:f0:ae:3e:f0:
                    b3:8c:6e:97:d0:b9:3c:97:06:8a:23:fd:b9:c9:66:
                    db:cc:75:e9:08:92:9a:b1:00:f5:09:bd:1c:6f:3b:
                    31:a2:69:a1:70:2e:70:80:3f:20:85:c2:d7:3f:18:
                    2b:fc:40:42:b5:93:b0:e2:8b:ef:f1:2e:ad:24:05:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EA:F1:6B:91:93:99:2E:B3:BD:6E:36:94:89:C0:4E:73:95:96:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:f8:bc:18:a5:94:7e:0e:42:a1:f4:19:18:4a:3d:18:69:ab:
         18:66:67:6b:91:b9:e8:65:41:15:db:e3:50:14:97:dc:e8:e4:
         4c:6d:13:c3:d6:5c:b8:e7:52:4a:10:21:3f:f3:db:6e:77:5a:
         a1:84:4b:34:df:be:38:03:91:92:91:03:67:a9:29:96:9a:80:
         e5:1e:2a:09:ea:0b:e9:81:60:be:80:d7:1a:cc:ea:a7:ac:47:
         13:f5:d7:14:e7:12:f0:62:0d:38:cf:03:53:c5:9b:fa:06:db:
         3f:c1:cc:84:3c:82:44:b2:59:14:09:2e:4d:dd:06:c2:3c:77:
         ca:2f:08:4a:5e:08:7f:4e:fe:08:cc:72:f7:74:5c:75:23:5f:
         6a:da:dc:7b:66:e8:e3:f5:76:77:c4:2b:88:53:82:9d:b6:bf:
         eb:14:78:d6:61:c9:97:7c:91:23:d1:86:14:b1:c7:aa:f3:1c:
         45:be:27:bd:60:7a:06:2a:02:d3:e2:ad:6e:7d:35:04:bc:67:
         20:0d:4a:51:cc:3a:84:e2:e4:b1:5e:19:46:31:bd:76:91:95:
         4d:91:26:79:ae:b9:71:d4:2c:64:46:1b:f5:f1:4c:44:bf:93:
         e5:d7:77:f0:1e:e4:63:90:77:30:ad:56:32:18:8f:de:c9:c5:
         87:2b:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:37:09 2025 by rpki-client