Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
File:                     97addbf9-8792-382f-a146-c3d955a34f50.roa (raw, json)
Hash identifier:          FBI+YoHszWFuv5R7wcmv4FR3tGSgUvVzqi9w1xFASDE=
Subject key identifier:   11:AE:4A:BC:A9:53:7D:1F:85:96:10:F6:BD:87:AD:3E:66:4E:8D:B3
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584B99D794434832E66294178C40
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     27419
IP address blocks:        63.246.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:94:43:48:32:e6:62:94:17:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=ede5e635-0982-4efd-8efb-de6eea30359d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:03:68:77:50:3e:df:29:98:7e:42:83:86:
                    1a:3e:36:77:39:c1:ee:92:42:5c:f0:4b:2d:50:50:
                    fe:9e:67:0a:d3:cc:b9:a8:28:39:15:7e:71:f8:75:
                    e0:62:1f:b0:21:db:f1:97:98:fa:b0:29:66:7e:9b:
                    bf:d3:ed:63:d5:6d:68:8b:30:94:e0:fe:a0:b1:c1:
                    76:ce:ce:eb:63:e1:04:31:f2:7e:7b:89:f6:99:60:
                    a8:f8:75:21:d4:06:27:14:c0:1d:bf:90:07:96:e6:
                    1a:3c:d6:40:bd:15:bd:37:95:30:88:5c:fb:0f:fb:
                    5d:65:be:4b:fb:36:31:da:65:5c:2a:ab:63:7d:f9:
                    b8:0d:d8:04:5c:93:7b:0a:90:3b:b9:10:ca:6a:04:
                    36:c9:9c:34:2c:e6:85:25:d4:de:4d:11:9a:92:76:
                    a0:1e:fc:84:16:76:87:34:bb:0e:11:5d:6b:3d:fa:
                    ab:55:6d:84:00:63:65:0e:a5:27:e0:ee:5c:ae:d6:
                    6a:23:e2:6a:a7:5c:de:4e:b2:12:aa:d9:a5:b5:1b:
                    c8:60:7a:ae:69:f7:c5:fc:73:36:53:9d:0a:d0:9b:
                    69:34:6a:c7:bf:a6:2c:e4:e1:c9:75:77:25:3e:c3:
                    4e:82:ba:4f:d4:60:5d:89:c5:9c:c2:69:d3:39:b9:
                    1c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AE:4A:BC:A9:53:7D:1F:85:96:10:F6:BD:87:AD:3E:66:4E:8D:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/97addbf9-8792-382f-a146-c3d955a34f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:9e:38:80:59:5b:d9:94:89:57:17:ee:ab:10:9e:04:4a:
         fc:49:2a:85:a6:e0:8c:97:e0:ea:6e:bc:ab:9c:50:bb:40:db:
         06:dc:78:c0:9e:e1:c2:26:32:b9:0b:8d:02:05:34:e1:3b:57:
         21:20:ba:00:b7:99:98:2c:55:a9:25:a5:2b:04:52:e0:cd:74:
         0f:73:2a:46:00:3f:d2:62:e2:6a:79:03:eb:5a:4e:2c:35:7d:
         55:d7:0c:27:bb:45:bf:ce:64:62:60:59:ff:cc:2f:2d:88:20:
         a1:be:ee:43:d1:19:6c:13:8e:6c:c5:84:56:26:f4:d0:17:fd:
         9c:ba:61:a7:ec:67:02:9a:17:53:98:46:e2:c3:f5:c4:e1:d6:
         ac:f7:db:41:0a:33:21:ad:bc:33:2c:71:a1:57:ad:aa:42:77:
         d2:5a:01:d3:c3:42:3a:29:12:64:fe:7f:b8:85:06:28:b0:c2:
         f7:bc:b4:f7:15:d6:19:76:20:2f:75:0d:82:43:32:aa:a9:e5:
         ef:00:ce:4d:16:08:63:6b:cc:19:7e:74:23:d7:9c:dd:4a:a2:
         93:88:89:11:a1:6a:1f:22:7f:b4:5b:1d:58:4c:06:2e:80:a0:
         a3:94:38:7d:c8:f3:4b:a4:9a:22:30:d6:2f:fc:8f:5d:77:59:
         2d:9c:c3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:30:52 2025 by rpki-client