Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
File:                     63c48833-2603-30da-8097-8c1712221517.roa (raw, json)
Hash identifier:          u4vLAJsenjL2e1GuxeDe2T7WgLw2fLvD4ev11GXSAeo=
Subject key identifier:   16:09:2D:77:74:7A:63:4A:6E:FE:B7:48:00:4E:3E:1D:33:A5:46:8F
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB4EB6783303BFEF11E9BC660
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     30128
IP address blocks:        192.228.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:67:83:30:3b:fe:f1:1e:9b:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=079ca2db-ce5c-4b86-a2cf-35ce64b00977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:8e:d2:6a:c2:b5:ec:64:75:c1:c8:5d:01:
                    1e:18:2b:61:db:48:34:b2:36:c0:77:6b:3b:65:96:
                    7a:de:a3:b2:df:3a:1b:0b:a4:75:86:c9:34:1a:19:
                    6a:49:70:88:75:0a:1a:2e:00:9f:49:7c:d4:69:2f:
                    ce:64:cc:b3:60:c8:89:de:7f:4b:04:6b:52:37:b1:
                    df:46:35:18:eb:79:70:dc:c0:3e:bc:75:dd:c7:19:
                    81:a9:5b:9c:9e:2c:d3:57:80:99:76:45:5f:29:7c:
                    d8:d3:30:6b:53:c0:cb:78:78:82:d2:ef:51:5d:9a:
                    4b:a8:52:6c:1f:21:62:88:10:0f:aa:17:d4:ef:c8:
                    6d:18:09:3f:56:10:39:50:bf:88:7a:12:81:97:8a:
                    5d:a4:05:ba:e3:7d:f8:36:dd:f2:52:3f:4e:36:6b:
                    90:e5:d6:79:c4:d5:b8:8d:bd:d7:29:b9:81:98:53:
                    cb:66:27:a6:06:47:10:ae:48:c8:86:08:9f:bc:50:
                    ff:f4:d2:5b:03:8e:c7:68:37:37:50:4e:35:bc:11:
                    df:08:a8:9b:74:9d:00:6d:5d:51:bc:27:cd:7b:d5:
                    0a:67:36:50:4c:08:0d:74:e8:47:41:ad:e8:58:5f:
                    c1:ca:65:9d:2f:e5:21:ab:b3:14:8a:d0:39:42:fd:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:2D:77:74:7A:63:4A:6E:FE:B7:48:00:4E:3E:1D:33:A5:46:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/63c48833-2603-30da-8097-8c1712221517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:76:8f:fe:bd:b7:ad:b2:d0:c8:bb:40:51:ac:ae:a3:0b:8f:
         4a:c6:d5:ea:b7:1d:16:75:50:93:b8:44:6d:0e:70:a4:a8:54:
         d5:89:09:dc:8d:2e:df:52:8d:73:d5:bd:cb:ac:c0:dc:b7:f9:
         cb:49:c3:22:5e:5a:67:47:d4:ed:7a:e5:3f:eb:5f:5a:b7:6e:
         9a:89:b8:b9:d7:93:23:55:62:60:fc:ca:aa:05:40:28:d0:57:
         98:95:12:4f:3d:8f:e5:ed:e5:fe:dd:c9:ee:bd:45:07:ed:59:
         af:5e:00:51:08:0e:03:68:9a:83:d8:46:93:f7:3c:d4:96:6a:
         f1:93:ea:67:c8:cf:5a:b6:98:d7:ca:dd:b8:4c:0c:2e:0d:0a:
         fd:dd:bb:ae:7b:9f:84:9b:19:7c:a4:15:ca:43:d2:99:c6:31:
         39:e9:5c:45:cc:c7:c0:b7:05:f4:a0:5c:61:66:b5:d3:3e:c9:
         c5:aa:07:01:f4:15:9a:99:a4:0f:c9:25:92:c9:9c:93:d4:8e:
         8b:7c:32:e4:5f:79:ce:15:10:b7:e9:3d:fe:8b:2b:eb:e3:22:
         bc:68:6b:e5:5b:b9:7e:b2:4c:be:89:c5:2c:5e:2b:49:6e:45:
         dc:80:eb:c9:9d:77:d5:0f:26:95:19:0a:4f:22:ec:e8:64:29:
         2d:ca:82:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:31:18 2025 by rpki-client