Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa
File:                     720a84df-1fff-35b7-84fd-023d40b8838b.roa (raw, json)
Hash identifier:          cHHLwM+KL4mJFFvGI0EC6R7wnpuNT4erelOwiS7IFYo=
Subject key identifier:   7F:6B:78:2A:43:22:06:91:D1:03:A8:E8:76:1B:2E:A3:C6:6B:BC:EE
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AB650E1EC02ECC23DF8D39F40
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     46261
IP address blocks:        63.221.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e1:ec:02:ec:c2:3d:f8:d3:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=9e9676b2-0513-4510-8314-bd09a8b1cbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:36:26:29:d6:d0:30:4d:15:7f:f1:53:f7:86:
                    c6:bb:dc:12:a5:a0:8a:2c:36:9b:3e:5e:62:dc:86:
                    a6:ff:b1:f5:ba:0d:13:c5:d3:6c:61:ae:5e:1e:89:
                    a5:a1:d3:f1:d6:81:86:16:21:5a:77:5d:b7:c3:17:
                    e0:8a:15:2a:cb:1a:d0:b4:9b:55:65:7f:85:83:26:
                    7a:8d:d9:84:a0:44:f0:9d:8b:9a:fa:7f:f2:94:b7:
                    d6:16:82:84:1f:00:21:95:1c:26:94:7f:69:c6:41:
                    53:9f:ab:c1:5f:cb:3e:63:90:c3:7a:fe:63:56:f8:
                    e8:42:54:ad:30:36:50:32:87:d8:7d:ff:e9:b0:41:
                    1a:0f:4d:47:06:47:a0:af:ae:b6:68:ff:98:cd:c0:
                    75:f4:f3:8f:82:9a:dd:eb:09:3e:85:16:ef:94:76:
                    d6:3d:da:a4:cd:ae:b5:09:d8:74:2f:ff:8f:41:f0:
                    3a:b8:53:8a:ad:e0:c6:27:6b:88:aa:47:81:64:2c:
                    bb:10:54:38:a9:23:0c:10:80:f0:87:76:5b:3b:fa:
                    31:9b:8f:3b:4b:57:19:04:50:7a:01:4f:21:0c:c4:
                    22:49:66:51:55:59:35:85:e3:74:59:92:30:42:07:
                    19:7d:8b:3d:5f:8f:a4:42:81:31:d8:cd:0b:5e:88:
                    0f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:78:2A:43:22:06:91:D1:03:A8:E8:76:1B:2E:A3:C6:6B:BC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/720a84df-1fff-35b7-84fd-023d40b8838b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.221.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c4:f6:b1:23:78:22:bb:42:5e:8b:fd:72:7c:9b:d9:df:15:
         44:b9:ac:af:55:df:12:42:bc:9f:21:69:26:54:3a:e7:1f:ac:
         6e:36:77:6d:47:93:50:89:4e:71:65:77:a1:60:4f:15:b8:51:
         ab:ac:e0:3e:a6:0a:d4:9f:9f:67:5d:57:94:0d:c4:66:4a:3a:
         35:a4:64:72:3a:97:71:ea:59:8f:14:c2:c7:16:c1:82:65:1f:
         e2:eb:e7:a2:f0:ec:9b:4c:00:cb:34:35:fc:74:de:38:ed:0f:
         7a:a2:62:91:a9:32:60:c0:cc:e5:08:e0:9b:5e:ad:ac:59:62:
         a2:0b:12:d1:69:23:87:50:2e:d2:3c:c1:d0:fa:86:8f:17:b9:
         be:05:93:c8:8b:48:f2:ad:fb:b7:a3:08:17:1a:45:de:3a:78:
         ae:e6:d4:1f:a0:b6:75:b8:fe:09:9b:eb:0e:57:71:0d:61:3a:
         ae:1a:e9:7b:f5:6d:3d:47:7f:a7:32:3c:1e:ba:22:79:6f:15:
         96:e9:27:f8:94:60:d1:0d:19:76:04:da:b0:e9:17:48:bd:4c:
         05:39:34:2f:dc:b7:06:3a:0e:8e:f5:80:c3:08:36:16:52:bd:
         a3:44:08:e6:50:cc:75:0e:18:23:11:5e:d9:c6:86:4e:d4:68:
         b1:35:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:19 2025 by rpki-client