Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/c02c6ae8-b6bd-31a7-8b4a-5506e9ce24e5.roa
File:                     c02c6ae8-b6bd-31a7-8b4a-5506e9ce24e5.roa (raw, json)
Hash identifier:          JoPPM5MUEQB381YqrI69w/UFdmTEo+lUo7v4yIM/JMY=
Subject key identifier:   96:CC:0B:7A:C4:E9:A6:8F:24:7C:F8:5D:2B:86:31:E8:51:03:99:E9
Certificate issuer:       /CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
Certificate serial:       010D0C9F4328584A9AC69455613773942CAF0480
Authority key identifier: B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/c02c6ae8-b6bd-31a7-8b4a-5506e9ce24e5.roa
Signing time:             Tue 22 Jul 2025 16:15:22 +0000
ROA not before:           Tue 22 Jul 2025 16:15:22 +0000
ROA not after:            Mon 20 Oct 2025 16:15:22 +0000
asID:                     19518
IP address blocks:        63.249.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9a:c6:94:55:61:37:73:94:2c:af:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f
        Validity
            Not Before: Jul 22 16:15:22 2025 GMT
            Not After : Oct 20 16:15:22 2025 GMT
        Subject: CN=996fea9f-76f9-4ed5-b02b-5855b50b8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c3:94:21:28:49:dd:85:30:52:b0:5d:f5:02:
                    7e:21:d5:6b:b7:aa:05:79:23:06:6d:39:9c:49:dd:
                    49:d3:8f:b3:6d:d1:9a:6b:69:7f:9e:9e:ae:2a:e3:
                    02:34:46:ed:cb:ee:bc:a4:a5:3f:aa:f4:89:3a:9d:
                    b5:4e:cf:cc:bd:b8:c8:46:36:95:a9:70:ab:aa:19:
                    6d:cb:6b:32:51:76:d6:ca:2c:df:6d:09:a8:92:c5:
                    7b:3a:47:81:21:c6:a8:05:57:30:ea:ac:15:59:be:
                    a0:ae:c0:34:4d:62:af:9e:c4:ec:63:e4:69:5b:38:
                    39:6c:98:c7:0c:21:77:9e:a2:c9:c7:fd:5c:f9:46:
                    59:8e:23:42:93:73:3d:6a:05:47:c5:ad:ce:34:0b:
                    46:e4:8f:05:32:66:d8:b3:2c:4a:f5:d1:84:f6:2a:
                    0a:51:8f:ed:49:ce:6b:81:d5:d1:64:e7:63:4a:db:
                    3e:49:3c:08:60:4a:4c:ed:f7:b8:34:71:be:9e:b4:
                    2e:d1:1f:5d:13:35:9a:4d:24:e2:f9:c1:8b:83:40:
                    22:12:4b:d3:33:47:54:03:ff:c5:a1:6f:ee:1d:55:
                    33:27:a3:5e:92:f7:87:87:c1:47:cf:f1:23:85:4b:
                    e8:d2:e7:54:f4:af:56:c7:d9:ac:8a:42:64:45:96:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CC:0B:7A:C4:E9:A6:8F:24:7C:F8:5D:2B:86:31:E8:51:03:99:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/c02c6ae8-b6bd-31a7-8b4a-5506e9ce24e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:F9:6B:5B:30:14:07:9A:7E:C9:8B:1D:DE:34:96:DD:EE:A8:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bd95bb6-f8e6-4d66-8d7b-d5a342b3587f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.249.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:73:1f:1e:bb:a2:86:0d:06:7e:01:35:81:5f:37:d8:ee:
         61:13:7c:38:28:5a:3e:ac:50:63:d8:49:3b:61:dd:27:1b:95:
         bf:4e:f0:70:8b:a3:80:8a:64:6e:ae:b1:b2:28:17:4a:95:05:
         8c:fd:03:33:d4:28:2a:84:e5:ef:e1:58:a2:84:01:30:0f:04:
         d5:ce:45:c0:cb:62:d9:1a:6d:e8:fa:48:bf:fa:7d:0e:25:28:
         13:03:84:df:cf:1e:4e:03:c4:54:01:16:57:47:3c:7e:dc:8c:
         77:15:ff:51:1d:49:fa:a7:ef:05:2f:ea:f0:64:84:79:40:00:
         82:60:34:f5:dd:99:59:d1:f9:ea:c8:5d:9a:47:42:13:8a:7c:
         61:d9:4d:cc:a7:a6:00:ce:ab:6c:0f:2b:e2:1a:01:1e:98:2e:
         28:e9:f0:25:11:c8:cf:06:05:76:7f:fe:b3:9a:6c:3e:83:59:
         e6:fc:c6:af:13:2b:c5:42:3d:b8:fe:0e:96:25:37:24:73:44:
         32:8e:f6:45:3b:66:3d:dd:0f:4e:7f:ad:59:01:b5:cc:e5:50:
         94:02:f3:3a:36:3c:6d:99:94:da:14:0f:e0:ca:e9:58:26:5b:
         53:48:7e:07:33:d1:69:19:ac:1e:b9:4e:88:41:bd:03:f7:d4:
         31:0a:0f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:20:30 2025 by rpki-client