Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
File:                     a7a0a537-a979-37b0-8aec-a06c4fe75751.roa (raw, json)
Hash identifier:          xGhz+G4PzsuEAsRcDMHvnIlKEbXTcjQYMDPSBawCOjE=
Subject key identifier:   71:AC:19:CE:6D:17:EA:75:D4:64:BC:36:76:2F:03:27:EB:E4:BB:75
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584BBE4033D224E35EF404B50F00
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     23520
IP address blocks:        63.245.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:33:d2:24:e3:5e:f4:04:b5:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=b35b47a3-8552-4a5a-b3b6-dd64433e7d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:34:5c:9c:0d:04:d2:ca:3f:83:84:4f:a1:9b:
                    3b:8b:ac:bb:92:71:4b:63:b6:4a:61:89:a6:93:51:
                    ab:ad:e2:d7:1e:3b:f7:cf:ae:62:fd:d9:26:c8:f8:
                    26:b3:a1:af:bf:c1:d6:d5:83:59:c8:31:62:79:45:
                    b9:59:87:62:74:41:0a:62:49:14:6d:3e:39:ba:a4:
                    2a:b4:bd:a3:d8:90:53:84:6d:34:ec:9b:99:16:3b:
                    15:0d:6a:bf:22:36:22:fb:15:23:8e:11:37:02:00:
                    56:51:3f:2b:91:f0:34:fc:ec:98:09:7d:09:7f:5f:
                    4c:26:77:23:ca:73:09:31:8a:ab:3a:8f:8d:6b:f9:
                    cf:02:c0:bb:28:04:ac:47:3c:43:a2:73:78:fa:62:
                    d4:c4:98:22:6f:72:10:1d:67:21:82:b6:13:1e:be:
                    cf:7c:bf:46:42:a9:fd:63:ea:7f:ed:c9:81:05:0e:
                    9f:bd:d5:43:33:2a:70:86:b6:c0:94:bf:13:46:51:
                    c7:6f:3c:d5:a9:43:a2:ca:44:86:c2:03:7f:fa:64:
                    16:00:e6:56:55:a9:55:a1:f1:99:43:69:f4:ab:55:
                    68:92:db:0a:ad:4c:32:2a:22:37:b6:39:a2:d8:4d:
                    49:9e:c4:1b:c6:f5:8c:d7:a7:06:13:9b:9c:a7:7a:
                    9d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AC:19:CE:6D:17:EA:75:D4:64:BC:36:76:2F:03:27:EB:E4:BB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:12:ff:c9:3f:93:e3:8e:a9:9b:38:76:82:de:9c:4d:f8:7c:
         e3:20:9d:2c:7e:4e:35:93:44:0e:44:4c:c3:23:d7:c5:66:7c:
         39:85:5e:2d:8c:67:11:0a:9a:4c:7a:44:21:06:6e:d6:97:81:
         ce:a7:91:ba:5b:16:40:dd:12:22:0d:67:fd:63:29:b1:14:18:
         c0:99:ef:53:e8:31:4c:e9:41:d9:a8:15:ae:4a:b8:45:c5:d2:
         53:d6:98:87:9b:53:c0:2c:88:34:6c:d5:09:d3:9c:8c:44:14:
         dd:a0:b2:b8:8b:7b:5d:5c:3e:8a:c8:ad:c6:31:21:f3:28:9a:
         d0:f1:7d:61:a1:1c:52:72:13:42:9a:6d:71:78:c0:3e:c3:78:
         c9:75:75:85:5c:83:76:99:bd:f9:c6:6b:b0:0a:da:36:fa:79:
         7a:9f:55:0b:1a:a0:90:9e:2f:1d:d1:96:af:0e:db:26:e7:1f:
         50:51:56:3e:18:e2:34:7f:31:9e:b2:2b:8e:70:f1:45:32:f7:
         93:cf:56:59:19:f6:44:5e:72:52:7f:bd:00:74:9a:d3:01:ed:
         a1:0e:4a:fc:82:06:f4:53:30:30:37:db:31:f4:25:eb:44:a2:
         f0:f2:ba:b6:86:b2:d8:e9:29:08:68:13:8b:c9:c3:1d:01:41:
         a3:9d:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:24:15 2025 by rpki-client