Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa
File:                     5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa (raw, json)
Hash identifier:          TVXi48BngPokn4NwyQfSGYTotwtuffWPtjSQYLYb+zc=
Subject key identifier:   B1:60:EF:06:A4:98:6A:0A:C7:9F:99:BA:19:00:DB:D8:3D:10:3B:EA
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584BA667C9BFE1CC16FC139F7140
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa
Signing time:             Sun 26 Oct 2025 13:00:38 +0000
ROA not before:           Sun 26 Oct 2025 13:00:38 +0000
ROA not after:            Sat 24 Jan 2026 14:00:38 +0000
asID:                     20055
IP address blocks:        63.135.48.0/20 maxlen: 20
                          63.142.208.0/20 maxlen: 20
                          65.49.136.0/21 maxlen: 21
                          66.172.96.0/19 maxlen: 19
                          74.116.180.0/22 maxlen: 22
                          96.46.16.0/20 maxlen: 20
                          104.193.236.0/22 maxlen: 22
                          136.143.144.0/20 maxlen: 20
                          140.106.224.0/20 maxlen: 20
                          141.164.112.0/20 maxlen: 20
                          162.118.0.0/20 maxlen: 20
                          166.113.32.0/19 maxlen: 19
                          173.209.160.0/20 maxlen: 20
                          199.36.88.0/21 maxlen: 21
                          199.114.208.0/22 maxlen: 22
                          199.181.247.0/24 maxlen: 24
                          199.204.200.0/21 maxlen: 21
                          199.244.28.0/22 maxlen: 22
                          206.130.128.0/20 maxlen: 20
                          2604:e00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a6:67:c9:bf:e1:cc:16:fc:13:9f:71:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Oct 26 13:00:38 2025 GMT
            Not After : Jan 24 14:00:38 2026 GMT
        Subject: CN=ceedc358-e944-4096-b858-47cfeeee9980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:79:f4:a0:e2:4f:3c:86:cd:c7:59:af:49:84:
                    7b:59:0d:cb:bc:37:86:14:3a:0e:0d:9e:34:70:d0:
                    2f:28:57:6f:b1:d5:85:de:7d:f9:4e:13:16:32:2f:
                    2b:3a:c4:e7:db:d3:d4:70:a1:7b:99:44:58:1f:b4:
                    c4:82:da:7a:cb:99:d3:37:12:ff:23:55:54:6e:6f:
                    7c:99:a5:a3:a2:81:9f:dd:7f:d1:c8:4c:ff:c3:fd:
                    fd:21:aa:e7:83:68:66:c3:11:23:cb:cb:56:d7:12:
                    35:a5:85:1c:d6:a3:df:cd:fc:56:5a:22:07:ad:6c:
                    fe:d3:78:99:6d:3e:b3:c6:24:6f:f0:d3:48:11:a4:
                    ce:94:07:66:57:2d:61:d1:73:c9:a4:d2:ef:b9:4c:
                    75:33:24:2d:3e:ea:df:9f:cc:54:1f:59:21:6a:83:
                    f7:07:9c:7e:08:e4:dd:40:e8:38:18:01:a1:27:4a:
                    55:07:ad:5c:cb:f1:ea:72:b8:97:34:ec:51:3d:62:
                    62:01:bc:39:82:da:8f:54:72:1f:ee:3c:be:d6:e4:
                    55:56:55:55:fa:aa:c2:1e:35:eb:4d:65:4b:55:64:
                    f5:12:0d:57:45:07:9a:b6:16:e6:85:51:e2:bb:de:
                    7e:a6:19:75:93:90:70:44:dc:82:79:63:38:e0:9c:
                    0a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:60:EF:06:A4:98:6A:0A:C7:9F:99:BA:19:00:DB:D8:3D:10:3B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5c42f3e0-4d06-30ad-af0a-7e2c5e562233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.48.0/20
                  63.142.208.0/20
                  65.49.136.0/21
                  66.172.96.0/19
                  74.116.180.0/22
                  96.46.16.0/20
                  104.193.236.0/22
                  136.143.144.0/20
                  140.106.224.0/20
                  141.164.112.0/20
                  162.118.0.0/20
                  166.113.32.0/19
                  173.209.160.0/20
                  199.36.88.0/21
                  199.114.208.0/22
                  199.181.247.0/24
                  199.204.200.0/21
                  199.244.28.0/22
                  206.130.128.0/20
                IPv6:
                  2604:e00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:38:7b:ff:02:f4:94:b8:ed:d9:ec:9c:1d:40:9d:e9:c4:e6:
         c8:21:f5:7c:3c:1f:e7:09:85:a8:9a:1b:85:fd:2c:91:fe:97:
         f6:6d:0d:b0:01:18:44:3f:4e:3f:50:64:29:25:8e:44:c1:c7:
         2a:1d:a8:b4:8b:4f:c3:98:5a:05:ed:72:fe:11:cf:be:59:85:
         99:06:2b:34:d6:0d:ca:80:0c:8d:0f:4e:c2:80:ea:6a:c8:d5:
         0f:c8:e3:b5:6e:a8:34:7a:52:b1:1f:37:da:03:39:64:c9:be:
         a3:b0:d3:53:4d:1b:b1:8e:49:dd:b9:a1:c0:04:0d:7e:de:04:
         f6:4c:a7:0c:09:cc:1e:de:cd:be:ad:e1:9e:42:9b:84:d0:95:
         5b:69:75:79:1e:20:34:49:08:8c:f8:3f:1c:e8:21:b6:8f:5e:
         dc:ec:30:b5:11:da:c1:77:ca:0f:e7:e3:bb:7a:4d:af:76:8d:
         f5:22:6b:3f:d3:3b:50:3b:19:4a:51:de:66:a3:f8:f6:67:fb:
         dd:46:79:5c:82:f8:1d:06:f0:3e:10:fe:2c:46:e6:eb:89:1a:
         74:19:cc:b9:38:eb:e0:bd:34:c4:ef:4d:66:9d:6e:26:90:7b:
         b5:f1:ec:e6:68:8e:8b:4b:48:58:7c:f3:96:a3:c0:c3:72:6e:
         88:bd:65:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:15:21 2025 by rpki-client