Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/178d310b-3faa-3b3f-bf83-bf1404e52b45.roa
File:                     178d310b-3faa-3b3f-bf83-bf1404e52b45.roa (raw, json)
Hash identifier:          AGwqMUJoufqhkKklMtz464LFm2LvHPyo58DRDOQIBdk=
Subject key identifier:   39:D5:E5:DD:7C:7D:5C:D2:44:77:F5:FB:F6:BA:F9:F5:3E:6F:FA:21
Certificate issuer:       /CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
Certificate serial:       010D0C9F4328584BA39D0DA4C833BA34E85B2D40
Authority key identifier: 76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/178d310b-3faa-3b3f-bf83-bf1404e52b45.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     399566
IP address blocks:        63.141.128.0/24 maxlen: 24
                          192.200.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:0d:a4:c8:33:ba:34:e8:5b:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db2f5ee-ec6e-4a75-95c8-cf2da57bc020
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=064a7da4-db30-495f-b1b5-b3adb0d0144b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1d:c0:02:d1:b3:d7:35:8a:51:84:45:db:99:
                    77:bd:f7:fc:50:ca:aa:df:6c:3f:bc:f3:a3:2a:bb:
                    1b:bd:1e:08:14:ed:be:59:20:ef:c3:e4:f7:46:fa:
                    79:61:f4:de:81:bc:97:e8:f6:9f:9f:23:87:63:40:
                    59:91:84:5e:ba:b9:9b:88:39:46:41:ee:8d:5f:a5:
                    5e:5f:e5:39:22:84:de:a5:68:e7:11:ad:5d:b5:5a:
                    08:46:c2:fd:3e:20:62:f4:06:be:cf:da:5d:7d:ef:
                    73:81:22:4e:19:4d:b3:29:3f:96:25:20:f1:c8:74:
                    72:c9:a3:be:f2:f8:17:67:40:32:ed:aa:b5:37:42:
                    61:61:fb:0a:1a:06:1f:3e:f5:e4:ce:0a:49:35:ca:
                    2e:8f:78:a2:8b:1a:f8:89:71:2c:8b:b4:75:c2:ad:
                    55:02:72:24:0e:fe:45:00:07:63:ee:ba:5c:45:33:
                    59:32:00:9d:57:d3:7e:09:31:e0:39:75:e0:eb:c9:
                    68:5c:54:15:3c:d8:58:95:d2:79:1e:11:1e:f8:4b:
                    19:7a:dc:59:9c:2d:05:0f:ab:32:a8:c2:8b:65:19:
                    90:58:65:bb:56:6f:91:3f:e3:b9:6b:37:d0:9d:27:
                    b5:3c:e3:9c:c1:36:f1:64:ea:3d:cd:a1:cc:1f:4c:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D5:E5:DD:7C:7D:5C:D2:44:77:F5:FB:F6:BA:F9:F5:3E:6F:FA:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/178d310b-3faa-3b3f-bf83-bf1404e52b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.crl

            X509v3 Authority Key Identifier:
                keyid:76:A1:F9:A2:16:A7:A8:0D:A3:1A:DC:A9:A6:27:4B:AE:30:82:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0db2f5ee-ec6e-4a75-95c8-cf2da57bc020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.128.0/24
                  192.200.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:59:13:32:d2:d9:65:9c:fe:53:91:b1:68:42:67:3a:5b:
         26:b7:4e:90:3d:3b:d4:60:de:62:ac:81:8e:bf:39:7d:a2:39:
         d1:fa:c6:c2:d8:ee:bc:67:6e:b2:ea:b4:75:c3:f7:e0:d0:cb:
         32:21:16:54:5d:dc:5b:31:c6:b6:dc:85:e3:9f:3d:d3:01:94:
         92:35:56:08:3c:52:e6:ce:67:61:5f:ad:e7:9f:45:c1:58:ad:
         ba:16:72:b1:54:65:8e:44:95:23:77:e6:69:b1:8d:a7:89:d9:
         c5:e2:de:a3:8b:3e:4f:dc:8a:3a:68:a0:1d:1a:94:cc:6e:ae:
         18:dd:3a:57:31:b9:3b:76:d4:3a:ef:34:ca:72:7b:aa:6e:86:
         a6:4b:b6:84:b8:d4:8f:b5:17:be:f7:fe:bf:04:0b:05:af:2c:
         38:5d:7f:c2:a8:23:4d:21:35:99:7e:1e:a6:b1:2e:a1:4e:13:
         32:14:3e:f1:73:33:f6:71:6a:e2:bf:2b:6b:e1:eb:33:cd:32:
         74:12:29:23:60:53:0d:68:17:ce:fb:8f:90:77:49:4f:81:c4:
         d6:8b:dc:76:c4:83:b5:fe:f3:21:9f:bc:21:03:6b:2e:fe:ca:
         9d:c9:88:a9:7a:ff:00:fa:e2:80:bf:ec:95:d5:ed:81:3d:01:
         a5:a0:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:13:28 2025 by rpki-client