Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa
File:                     d0867835-3593-3f05-a0cf-1c9f8cfde811.roa (raw, json)
Hash identifier:          EQSqPnuLERkIwV4j4EQ10ndlRcr3wXKAsK08TeSWSNk=
Subject key identifier:   76:15:DA:9F:70:54:7A:E2:8B:11:4E:7B:9A:E7:5F:88:F0:38:9B:EB
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584AB650E871B16EDDA7301E2B80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     17057
IP address blocks:        63.217.106.0/24 maxlen: 24
                          63.217.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:e8:71:b1:6e:dd:a7:30:1e:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=14da68e2-ae8a-4e61-ad95-aada0be0d966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:cb:d0:ce:6a:57:eb:9d:e7:18:bd:19:68:f5:
                    ae:4d:1b:d4:c4:c2:e1:0c:7c:f4:31:5b:96:21:13:
                    9d:28:b6:c7:f5:83:27:a4:4e:2e:55:05:c4:78:47:
                    78:de:83:e8:f9:e4:d2:75:db:d2:e4:cf:49:42:2e:
                    92:f8:ec:d7:55:a5:7d:63:a2:6e:bb:a5:1e:96:32:
                    59:b9:38:51:8a:0b:3d:6a:4d:fc:02:36:b3:69:53:
                    81:5e:5f:63:e3:e5:1e:b3:c8:4e:7a:0c:bd:f4:1b:
                    46:04:02:00:45:c3:73:37:97:2e:a8:c0:8e:8d:6b:
                    03:08:74:29:06:44:ff:16:81:31:7d:08:be:9c:46:
                    8d:4b:19:57:7d:e0:74:26:07:6c:47:f7:35:2f:e8:
                    16:f5:c0:b9:87:8b:84:92:67:e7:76:f8:82:30:d3:
                    aa:83:29:c1:ca:da:cc:3e:cf:2c:bb:4b:dc:8a:bb:
                    76:aa:a0:71:ea:30:8a:b3:a7:fa:e9:f4:b9:b6:b3:
                    41:94:4c:ce:f3:0a:cd:05:ce:35:9c:ea:7f:a1:e6:
                    a8:7a:32:f9:0f:df:ca:8e:6c:50:ca:94:44:30:42:
                    22:e1:6b:22:24:99:5d:df:1d:9c:1e:74:60:94:fb:
                    61:18:7f:78:47:bd:9e:9d:af:96:bb:d5:ae:e6:2a:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:15:DA:9F:70:54:7A:E2:8B:11:4E:7B:9A:E7:5F:88:F0:38:9B:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/d0867835-3593-3f05-a0cf-1c9f8cfde811.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:6b:e7:f3:39:93:fe:82:39:23:7a:1c:96:dc:80:9b:67:32:
         13:2a:71:50:7f:29:bd:be:31:c0:04:b0:04:7c:c6:6e:36:b1:
         94:d4:02:5d:0e:1c:49:b9:2d:06:c1:b8:1e:61:39:20:cc:85:
         d4:55:d5:bd:e6:c6:6c:ae:7f:62:8b:c4:e6:ef:a8:22:07:4c:
         22:cc:ce:ed:fe:ce:1c:df:a7:ff:c4:f3:4e:d7:ec:d5:5f:fb:
         11:c8:c0:13:8c:47:07:6c:9f:da:3f:f7:0a:40:99:54:11:3b:
         db:19:72:dc:97:52:ab:0c:4a:f3:19:b5:3a:ba:0e:95:21:ab:
         1e:98:77:80:38:af:ce:9a:b6:4e:24:6d:bc:9d:42:08:42:b4:
         51:53:03:2f:4d:a3:ea:2e:61:71:c2:22:3a:a3:1e:7f:af:75:
         79:02:9b:83:50:46:1f:ac:dc:e3:ef:e1:a0:a6:c7:31:2f:f2:
         05:7f:1c:9d:9a:87:8b:23:1e:13:b1:91:1c:2d:f9:10:c4:37:
         b0:5c:94:8d:4d:b2:7c:80:34:1c:ca:1a:df:07:dc:42:10:61:
         81:68:83:ef:76:be:c1:33:39:71:73:68:5f:9c:f7:5b:2d:bd:
         f5:6d:49:eb:bf:84:9a:02:5c:65:8b:f2:dc:92:be:1a:c5:0c:
         a0:07:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:29:21 2025 by rpki-client