Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
File:                     692417e7-6eff-392f-8306-bb8fa10fd75e.roa (raw, json)
Hash identifier:          tIb+nWaLscxrqmtDwwm+0aBwSC9yAo6L/27LyzEnUOo=
Subject key identifier:   F2:74:AC:64:A7:23:69:87:9E:E5:1C:40:F4:12:B9:5A:56:C8:AE:7C
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584BAEC7B3BC57F63DDDC829EEA0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     1239
IP address blocks:        63.223.67.0/24 maxlen: 24
                          63.223.79.0/24 maxlen: 24
                          63.223.80.0/22 maxlen: 24
                          63.223.85.0/24 maxlen: 24
                          63.223.104.0/23 maxlen: 24
                          63.223.113.0/24 maxlen: 24
                          63.223.118.0/23 maxlen: 24
                          63.223.122.0/24 maxlen: 24
                          63.223.125.0/24 maxlen: 24
                          63.223.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:b3:bc:57:f6:3d:dd:c8:29:ee:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=cd6d1f30-5ea5-4c53-a2c6-74daba537a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:6d:8c:ac:c5:54:f5:26:f1:f5:a9:e4:23:
                    19:c9:c1:2c:90:52:8b:6c:98:7c:81:fd:49:ee:18:
                    5d:14:95:13:2c:64:11:e9:2d:5f:5c:2e:87:94:46:
                    0d:77:66:c5:80:24:19:57:3a:e0:cd:f3:3b:15:d3:
                    26:5d:ae:fb:c7:78:a3:11:72:5f:57:5a:c5:c5:a8:
                    30:42:48:72:a0:f5:c0:6e:8f:f2:02:e3:41:1d:af:
                    d1:8d:6f:8f:55:06:24:20:d7:b6:13:e2:da:24:b2:
                    74:b3:0d:1f:6a:cf:36:22:ae:6d:45:5d:5f:cd:7f:
                    c3:c6:09:d0:32:30:66:2a:1f:8b:bf:6b:89:ef:f4:
                    f8:f7:72:0e:58:f2:fb:7d:cf:41:13:e3:0d:15:17:
                    51:bf:c9:97:f8:2f:6a:40:60:45:c8:0b:b2:f2:a3:
                    d9:70:d3:14:74:d8:b3:80:10:65:b6:6e:4b:76:19:
                    f9:4a:b8:93:1c:35:66:6a:3a:32:42:86:dd:7f:5a:
                    85:3e:10:05:be:43:ff:cb:c2:0d:57:13:25:b8:ac:
                    02:27:fb:64:00:50:7a:a3:fb:d5:9f:ca:f5:2a:bd:
                    8c:37:d0:dd:c5:2a:4f:db:20:5a:3e:21:6b:22:f6:
                    a4:e5:1f:e3:9b:20:22:cb:6d:2e:ad:b6:61:f2:b4:
                    3e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:74:AC:64:A7:23:69:87:9E:E5:1C:40:F4:12:B9:5A:56:C8:AE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/692417e7-6eff-392f-8306-bb8fa10fd75e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.67.0/24
                  63.223.79.0-63.223.83.255
                  63.223.85.0/24
                  63.223.104.0/23
                  63.223.113.0/24
                  63.223.118.0/23
                  63.223.122.0/24
                  63.223.125.0-63.223.127.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:26:44:e5:5c:17:22:ae:fe:19:ab:18:f0:ba:b1:12:85:
         e4:39:3f:c4:a2:31:fe:ec:c1:e5:64:b6:45:76:c0:c8:93:69:
         a3:35:03:85:bf:18:ef:f0:fd:53:2d:7d:eb:bc:7e:26:1c:9c:
         2c:4e:4d:c7:ab:2d:8f:a0:8b:b2:e0:01:cc:50:7a:7b:8a:9c:
         99:d7:f6:4e:f0:bf:05:39:cf:8c:36:a8:c2:0a:5d:4c:c3:25:
         50:de:3f:91:86:10:a5:8e:13:30:e9:86:5e:20:a2:90:da:8d:
         c6:76:1b:c7:73:fb:56:39:6c:4b:a8:5a:33:e0:4c:ca:59:46:
         55:94:b4:9d:fd:f9:48:41:0b:12:13:6c:84:4b:e9:5d:ca:fc:
         94:f5:41:9b:84:b2:ee:5a:ca:34:ba:71:80:c8:01:81:a2:a5:
         72:10:be:63:b1:66:7f:f6:aa:6f:51:b8:03:61:1d:26:c8:1e:
         8b:7a:d7:66:fd:93:e3:5b:48:84:c2:13:18:15:87:4d:c6:75:
         ac:4d:34:d8:89:ba:d0:43:ab:f6:d7:73:46:8d:6e:63:fd:24:
         9f:75:ae:e9:d3:ed:5f:7e:2b:11:c4:89:6b:95:08:88:c7:cb:
         e1:99:3e:57:86:59:a1:a5:15:d5:2c:c9:57:ee:e3:d6:20:7f:
         84:cd:c3:c2
-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIUAQ0Mn0MoWEuux7O8V/Y93cgp7qAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk
Y2Q2ZDFmMzAtNWVhNS00YzUzLWEyYzYtNzRkYWJhNTM3YTcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNttjKzFVPUm8fWp5CMZycEskFKLbJh8gf1J
7hhdFJUTLGQR6S1fXC6HlEYNd2bFgCQZVzrgzfM7FdMmXa77x3ijEXJfV1rFxagw
QkhyoPXAbo/yAuNBHa/RjW+PVQYkINe2E+LaJLJ0sw0fas82Iq5tRV1fzX/DxgnQ
MjBmKh+Lv2uJ7/T493IOWPL7fc9BE+MNFRdRv8mX+C9qQGBFyAuy8qPZcNMUdNiz
gBBltm5Ldhn5SriTHDVmajoyQobdf1qFPhAFvkP/y8INVxMluKwCJ/tkAFB6o/vV
n8r1Kr2MN9DdxSpP2yBaPiFrIvak5R/jmyAiy20urbZh8rQ+IQIDAQABo4IDjzCC
A4swHQYDVR0OBBYEFPJ0rGSnI2mHnuUcQPQSuVpWyK58MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNjkyNDE3ZTctNmVmZi0z
OTJmLTgzMDYtYmI4ZmExMGZkNzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAP99DMAwD
BAA/308DBAI/31ADBAA/31UDBAE/32gDBAA/33EDBAE/33YDBAA/33owDAMEAD/f
fQMEBz/fADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW
LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G
CSqGSIb3DQEBCwUAA4IBAQCAeiZE5VwXIq7+GasY8LqxEoXkOT/EojH+7MHlZLZF
dsDIk2mjNQOFvxjv8P1TLX3rvH4mHJwsTk3Hqy2PoIuy4AHMUHp7ipyZ1/ZO8L8F
Oc+MNqjCCl1MwyVQ3j+RhhCljhMw6YZeIKKQ2o3GdhvHc/tWOWxLqFoz4EzKWUZV
lLSd/flIQQsSE2yES+ldyvyU9UGbhLLuWso0unGAyAGBoqVyEL5jsWZ/9qpvUbgD
YR0myB6Letdm/ZPjW0iEwhMYFYdNxnWsTTTYibrQQ6v213NGjW5j/SSfda7p0+1f
fisRxIlrlQiIx8vhmT5XhlmhpRXVLMlX7uPWIH+EzcPC
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:04:27 2025 by rpki-client