Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/6716d007-b974-37db-9a57-641038441546.roa
File:                     6716d007-b974-37db-9a57-641038441546.roa (raw, json)
Hash identifier:          19QhjLVgjSLnFFybjMmTwWxbeT287D//cZumOTlgSCE=
Subject key identifier:   50:28:8E:03:8D:83:45:6F:A9:6F:0F:67:3A:F1:31:07:AF:C3:FF:C2
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584AA160DDC0CBF24D0B27A0D3C0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/6716d007-b974-37db-9a57-641038441546.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     23520
IP address blocks:        63.245.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:dd:c0:cb:f2:4d:0b:27:a0:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=3b080383-9ffe-41f9-b2b6-852f86a75683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:22:f3:31:a7:9b:6a:14:c2:aa:4e:1a:93:
                    99:07:b3:88:77:36:b5:87:65:8b:d3:21:1d:4f:a0:
                    60:56:6b:c1:98:7f:33:e8:24:07:d2:28:fd:79:17:
                    cd:7a:16:12:f3:42:a0:ab:f0:05:f4:de:0a:be:93:
                    58:99:28:10:1e:89:b9:92:f0:3b:fc:65:e9:6d:c0:
                    b3:3c:fe:04:3b:61:58:78:3e:61:46:fc:29:4d:cc:
                    9d:14:3b:e6:5b:a1:f2:a5:19:2c:8a:ef:1f:39:53:
                    64:b3:36:f5:76:7f:4b:5e:cd:82:df:93:c3:65:91:
                    67:c9:17:97:7d:79:65:66:5d:10:21:3f:90:61:1a:
                    a7:68:bc:40:68:b1:f7:59:68:81:74:b5:23:93:36:
                    c7:f5:43:ef:29:aa:fa:a5:b5:7f:d5:be:6f:7a:41:
                    76:73:6c:59:02:8a:43:4f:d3:cd:8a:e3:0c:b2:48:
                    89:5f:84:09:17:c0:72:f9:4d:4f:18:2c:ca:4d:e5:
                    61:8e:35:6b:65:8e:94:09:c1:60:8a:9b:1b:0f:39:
                    fd:fc:76:58:84:5d:cc:bc:9c:8c:4f:db:7f:2a:73:
                    c1:f8:e3:c4:29:90:2e:54:8d:b0:54:00:59:66:d5:
                    10:7b:23:e6:31:54:14:08:f9:21:da:2d:55:05:0c:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:28:8E:03:8D:83:45:6F:A9:6F:0F:67:3A:F1:31:07:AF:C3:FF:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/6716d007-b974-37db-9a57-641038441546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:96:e2:36:97:30:63:18:6f:e8:00:4f:0f:4e:25:6b:1a:
         d4:b3:79:8d:ac:bf:7f:2d:01:67:7a:9c:e9:37:f0:17:03:91:
         92:b8:e7:d8:c5:86:78:97:57:90:00:66:37:e9:d4:2d:6b:47:
         96:68:07:74:ff:72:f4:a8:64:33:e5:a1:3e:67:98:b1:ae:39:
         bc:7a:44:9c:48:e3:61:63:3a:13:17:bf:aa:ed:19:8e:40:e2:
         b0:db:df:69:de:2f:28:a0:9c:12:98:d3:d5:bb:70:cd:b7:5a:
         bb:d3:df:17:35:87:fb:f2:20:c8:22:01:95:94:b0:d3:08:a3:
         ed:ea:71:f0:b5:d4:ef:d6:da:ff:2e:65:5a:97:4f:e6:cc:d7:
         dd:9f:5a:63:8e:57:db:3d:a1:0c:a2:55:ce:d6:d6:bf:ec:37:
         08:ea:3d:a7:db:ae:a1:0e:ea:1d:99:8c:af:2f:d8:bf:e9:b3:
         19:b3:7d:d5:ce:b7:b2:6a:2f:16:fc:f1:bf:b2:cf:f6:4a:81:
         df:63:14:eb:f3:7d:74:fa:63:fe:13:25:ad:b9:9f:34:47:09:
         a1:74:6d:d1:2d:c5:5a:ae:f6:11:71:8f:e3:32:3d:bb:28:36:
         98:ef:b5:fa:2e:af:fb:e2:71:14:cd:a6:63:02:66:75:91:c1:
         e2:6d:91:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYN3Ay/JNCyeg08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
M2IwODAzODMtOWZmZS00MWY5LWIyYjYtODUyZjg2YTc1NjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMYi8zGnm2oUwqpOGpOZB7OIdza1h2WL0yEd
T6BgVmvBmH8z6CQH0ij9eRfNehYS80Kgq/AF9N4KvpNYmSgQHom5kvA7/GXpbcCz
PP4EO2FYeD5hRvwpTcydFDvmW6HypRksiu8fOVNkszb1dn9LXs2C35PDZZFnyReX
fXllZl0QIT+QYRqnaLxAaLH3WWiBdLUjkzbH9UPvKar6pbV/1b5vekF2c2xZAopD
T9PNiuMMskiJX4QJF8By+U1PGCzKTeVhjjVrZY6UCcFgipsbDzn9/HZYhF3MvJyM
T9t/KnPB+OPEKZAuVI2wVABZZtUQeyPmMVQUCPkh2i1VBQzXKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAojgONg0VvqW8PZzrxMQevw//CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvNjcxNmQwMDctYjk3NC0z
N2RiLTlhNTctNjQxMDM4NDQxNTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/UBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADyGluI2lzBjGG/oAE8PTiVrGtSzeY2sv38tAWd6nOk38BcDkZK459jF
hniXV5AAZjfp1C1rR5ZoB3T/cvSoZDPloT5nmLGuObx6RJxI42FjOhMXv6rtGY5A
4rDb32neLyignBKY09W7cM23WrvT3xc1h/vyIMgiAZWUsNMIo+3qcfC11O/W2v8u
ZVqXT+bM192fWmOOV9s9oQyiVc7W1r/sNwjqPafbrqEO6h2ZjK8v2L/psxmzfdXO
t7JqLxb88b+yz/ZKgd9jFOvzfXT6Y/4TJa25nzRHCaF0bdEtxVqu9hFxj+MyPbso
Npjvtfour/vicRTNpmMCZnWRweJtkaQ=
-----END CERTIFICATE-----
Generated at Sat Aug 9 20:46:51 2025 by rpki-client