Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fdbf4126-d708-39b8-897b-9d5e73df41cd.roa
File:                     fdbf4126-d708-39b8-897b-9d5e73df41cd.roa (raw, json)
Hash identifier:          G3t6LZ6aAom83ubfsES5I1hZ7uICspu0joQ41GA1aJc=
Subject key identifier:   6E:3B:31:3A:C0:E3:3A:98:B1:C3:5F:3D:D5:10:99:E3:E0:88:B4:64
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584BB02CF9938A314F5EEE0EEF80
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fdbf4126-d708-39b8-897b-9d5e73df41cd.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     151373
IP address blocks:        23.251.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2c:f9:93:8a:31:4f:5e:ee:0e:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=e85cce7c-d45d-475f-878f-fc0c95137f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:1e:b0:8a:13:ce:d9:0e:6b:87:b5:2f:00:
                    f3:a7:25:1c:3e:7e:b1:14:57:d4:2e:ba:c8:ad:13:
                    ef:cd:ed:32:90:56:53:54:e2:ae:bd:3f:69:cb:58:
                    43:00:12:46:36:de:2c:01:8f:35:b5:42:a3:1e:98:
                    3d:74:87:18:0d:e5:c3:57:6a:4c:1c:2b:63:06:86:
                    46:ad:c2:e7:1c:3c:47:f8:90:c7:28:b8:b9:15:b3:
                    4c:ca:35:02:ff:a3:30:95:a1:47:49:6b:ba:7c:ae:
                    32:76:6c:65:a1:b4:00:e1:3e:60:29:c5:b8:c1:37:
                    c2:ae:7e:39:cd:cd:92:1b:35:51:36:7b:ea:94:ec:
                    91:bf:82:24:6c:2f:5c:b6:cc:01:a2:b8:fe:b0:05:
                    b6:84:01:dd:51:55:77:18:b3:49:80:d4:08:34:27:
                    59:1d:41:57:df:64:0b:2a:5c:2e:95:f4:46:ad:00:
                    4c:b8:31:4c:7d:79:86:f5:7e:31:f7:9b:46:34:68:
                    e3:14:f2:27:2f:8c:33:c3:92:19:90:a2:23:f6:ab:
                    d6:56:00:8d:65:1d:28:93:82:af:f3:cb:d5:61:b7:
                    7b:8c:59:40:dc:1b:b3:a1:b4:c1:7d:95:7b:4f:85:
                    3c:f9:5c:1e:35:5a:9d:5f:4a:cd:cb:77:a9:51:11:
                    17:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3B:31:3A:C0:E3:3A:98:B1:C3:5F:3D:D5:10:99:E3:E0:88:B4:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/fdbf4126-d708-39b8-897b-9d5e73df41cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ab:00:77:8b:a3:a4:44:c1:bf:d3:d6:67:04:96:e0:34:4e:
         2d:8e:c2:c4:2d:78:c6:89:b7:07:a1:12:63:30:82:74:2d:62:
         42:18:77:19:3e:7e:3c:17:30:4b:b5:3c:18:c1:e9:3a:6a:50:
         74:d9:2f:0a:47:a4:7b:2a:bb:4a:cb:88:66:51:31:ed:5e:a3:
         f5:ce:3d:80:dc:d7:03:25:59:30:61:e6:e1:3a:f4:a0:f6:5f:
         a9:b7:2f:f9:98:3e:52:2d:e0:9a:88:94:cc:e8:d7:95:07:0a:
         03:0e:05:28:cc:1b:e5:a3:43:86:84:ac:1d:01:b3:8a:43:ab:
         31:c7:64:65:fc:56:90:ff:2f:c7:97:24:ff:a8:a2:70:34:d0:
         46:0e:f7:73:d9:52:17:16:15:0a:4c:2a:05:a7:7f:91:61:55:
         bc:9c:81:8b:57:cc:00:77:02:43:96:54:2c:3b:d0:71:4e:33:
         88:0d:89:8c:a7:f5:9f:75:43:0b:ff:17:fc:b9:8a:1f:22:bd:
         68:77:57:37:4b:b4:8e:62:c6:c0:70:51:07:aa:64:cb:88:2f:
         c9:69:8f:fd:7c:ee:33:d4:5f:19:62:06:d3:70:5e:e6:f7:d4:
         1f:58:75:3a:b8:5e:17:f7:1f:06:7c:a9:16:ef:aa:06:ef:a9:
         32:cb:c3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:51:32 2025 by rpki-client