Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/faba1418-392c-33ec-b1d4-223c5313fa95.roa
File:                     faba1418-392c-33ec-b1d4-223c5313fa95.roa (raw, json)
Hash identifier:          z9RuYbmUu3rB2ew0/xz/khK4HiwzCt3FjdjNRiyhI30=
Subject key identifier:   D3:87:1C:F4:9C:67:76:FB:48:10:2D:DF:2A:C3:44:C9:DA:AD:98:DE
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F4328584AB650D8EB89BE98CAC5E43510
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/faba1418-392c-33ec-b1d4-223c5313fa95.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     3300
IP address blocks:        63.250.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d8:eb:89:be:98:ca:c5:e4:35:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=e79aaf06-9a19-492b-9465-a3223812e0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9a:cc:fd:76:f4:e9:59:dd:c1:09:f3:b4:bf:
                    fc:f4:56:9e:f1:ab:61:f2:6e:47:6f:b3:6f:e9:a0:
                    23:84:93:f7:f6:6c:7f:dc:c3:d8:df:6e:1f:91:3e:
                    62:4a:5a:c0:78:19:c3:6b:e6:64:a7:d7:6a:38:bf:
                    67:c7:e0:62:8e:44:84:1c:54:a7:79:d5:20:c0:3b:
                    23:94:08:d3:58:48:7c:46:53:98:4b:a2:cb:fd:ce:
                    ee:34:54:d7:4c:1f:73:50:c3:ce:44:77:36:3d:e5:
                    57:94:c6:fc:6f:a0:ab:1b:12:02:35:dd:77:84:2a:
                    98:84:92:20:77:14:a8:0c:3a:a6:4d:d9:5c:5f:70:
                    d4:71:2f:68:79:e2:0c:dc:94:15:04:6d:b9:34:c1:
                    e9:f4:bc:41:6e:ac:e4:7f:90:96:92:30:b5:b1:cb:
                    41:5b:a2:0e:6e:07:f0:7c:c6:78:0d:e1:6b:22:88:
                    38:86:de:22:c1:11:ef:80:35:c0:52:7c:ed:95:64:
                    81:3e:75:23:80:ac:09:e0:3c:72:b8:e8:94:6d:dd:
                    81:34:71:13:54:9b:1b:0a:e9:d3:6e:b5:fe:c3:63:
                    5e:b9:36:b9:9d:e8:0a:45:37:8f:9c:b9:67:0e:98:
                    38:08:1b:e8:ab:c3:db:cd:74:60:9d:35:7e:f0:44:
                    dc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:1C:F4:9C:67:76:FB:48:10:2D:DF:2A:C3:44:C9:DA:AD:98:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/faba1418-392c-33ec-b1d4-223c5313fa95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:11:bb:97:04:13:45:d7:a2:24:8e:06:53:b4:18:a0:7e:
         2c:3c:79:73:f5:e2:51:14:cb:f0:b7:6d:dd:e1:9c:74:12:06:
         1a:de:3c:26:8e:8b:e0:da:ac:d2:8b:ff:20:fb:3f:ff:5f:08:
         5a:b3:ea:47:4a:c2:35:01:bc:b8:99:0f:34:5a:dd:24:ee:36:
         47:6b:26:40:02:67:e3:1f:c1:cd:18:09:b9:2e:86:58:e1:71:
         bd:87:d7:f5:77:f6:32:fc:3e:db:38:20:2f:a8:cf:23:ec:3c:
         fe:d2:f4:5f:61:02:fa:55:b8:9d:38:8b:89:10:ef:43:40:b3:
         54:77:50:ee:05:4b:6e:32:df:0f:a5:37:89:3d:ad:94:d9:cc:
         46:7e:20:4e:33:62:b1:bc:37:73:3c:a3:41:4a:1c:75:c5:21:
         ed:1c:37:92:14:dd:66:9c:7b:54:32:8a:42:70:50:d8:d1:bd:
         cc:5f:b4:f9:59:8d:39:ef:80:dd:0f:be:6f:4c:60:3b:d0:d9:
         68:5a:29:f4:70:c0:24:49:7f:65:9c:90:be:a1:2a:42:e2:02:
         be:55:cb:a5:8b:27:a5:da:62:af:43:6f:85:fe:cc:41:e6:16:
         53:70:2d:74:3a:46:26:e2:8e:81:f3:20:06:81:3b:90:39:2c:
         44:e8:bb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:17:01 2025 by rpki-client