Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
File:                     2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa (raw, json)
Hash identifier:          FlIwi+wKIs3fj0MJ0qVYc6IcuZsFeQJPKA9ZQX6fEF4=
Subject key identifier:   C6:AF:55:38:F0:2A:C7:EE:CC:11:47:FB:4A:3A:8A:D1:86:D4:AA:60
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584AA160DDCEE2DC9EC5CFEEF640
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     23520
IP address blocks:        63.245.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dd:ce:e2:dc:9e:c5:cf:ee:f6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=e17654c9-e78f-437a-8b47-724492d4139e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0c:1f:b2:bc:da:67:14:82:c7:26:b4:37:97:
                    4c:30:40:3b:1a:b6:da:3c:02:2c:e2:4d:f5:07:80:
                    42:7c:0d:ac:b6:05:ab:dd:23:f6:33:0d:c9:83:e1:
                    18:44:20:34:59:4f:3d:a3:dc:f8:c3:19:b9:63:c4:
                    2e:64:86:cf:44:c5:7b:b4:91:7e:e3:49:7e:eb:d2:
                    f7:69:67:72:97:89:d8:10:58:21:d5:f0:ae:99:37:
                    ed:19:d8:c9:15:29:7c:0a:9e:de:50:54:54:b9:63:
                    e8:23:28:08:a3:cb:94:cd:4c:59:8c:b9:8d:58:95:
                    96:ce:6d:45:f9:44:ee:51:d0:81:7e:69:63:9f:af:
                    6c:ef:81:5c:fa:48:88:59:b0:39:74:8d:2d:df:76:
                    d4:af:84:04:64:08:02:e0:db:aa:59:90:6f:14:da:
                    6a:b7:d2:2e:fc:b3:03:9d:a0:1a:ec:ad:2d:7b:da:
                    02:0c:3c:24:42:08:f9:9d:7e:19:df:58:29:3d:89:
                    0b:1f:47:f0:3e:0b:f8:0b:6b:64:53:a6:d1:f0:94:
                    9a:ac:89:2f:bc:40:91:01:41:3e:92:ea:b4:1e:85:
                    2f:a4:92:91:93:da:3a:b5:fb:9d:80:29:cb:c2:96:
                    24:0f:ee:2a:44:0e:39:e6:51:ec:2e:9b:83:ff:05:
                    56:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AF:55:38:F0:2A:C7:EE:CC:11:47:FB:4A:3A:8A:D1:86:D4:AA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:df:c2:29:57:0e:f0:86:4e:08:a6:17:be:87:9a:2b:07:33:
         0e:26:b3:e2:50:f5:8f:5a:a4:ee:5a:97:2f:e7:00:27:37:6b:
         b0:8a:a4:f1:3b:14:2c:d1:7e:dd:b1:5b:c7:6b:7e:0b:bb:bc:
         a9:66:3e:78:b1:69:39:cd:25:88:05:e7:2e:44:da:9d:70:c4:
         06:df:d4:bb:3f:e4:0f:97:bb:28:cd:e4:7e:ae:c9:e3:e4:1d:
         66:ae:19:b6:c8:f2:4b:58:3e:c2:6f:c2:35:ab:0e:14:ef:cd:
         ad:0b:89:4c:27:02:22:ce:4b:50:b2:6d:fd:6a:14:2f:51:62:
         e7:c5:7b:1d:05:fa:9f:74:15:38:99:9c:0f:9e:ee:8f:74:0a:
         e3:e6:72:e1:52:93:53:e8:ed:25:cf:da:59:a8:93:b5:a9:4a:
         b7:3e:b6:8b:3b:09:a0:d5:51:2d:d8:32:68:b6:c0:66:9b:dd:
         ed:59:98:aa:22:0e:4d:a8:b7:81:83:e5:83:0e:72:a8:f8:d1:
         5b:29:8e:38:fe:18:93:b9:bd:e1:34:eb:04:e4:dc:ce:20:13:
         23:36:01:50:cd:e1:0c:a7:a5:1b:6f:31:6a:03:0a:d3:5f:30:
         30:66:08:a6:1e:54:b9:5e:0f:cf:e3:b1:7e:46:34:bb:1d:ea:
         21:c8:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:44:43 2025 by rpki-client