Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa
File:                     1a9f6371-5de6-348f-926c-183d129cf5d2.roa (raw, json)
Hash identifier:          RpeNOs5/4BoJnAPWUJGioXTZUbxIUq3zW453/JFV8dw=
Subject key identifier:   37:0D:46:AD:28:CA:15:ED:62:53:45:06:65:88:83:11:D8:0D:58:B3
Certificate issuer:       /CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522
Certificate serial:       010D0C9F4328584B99D7AE1CB659A484AB728D00
Authority key identifier: E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     43009
IP address blocks:        208.93.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:ae:1c:b6:59:a4:84:ab:72:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563c2ad3-4e5e-4758-b1be-07bf4ce94522
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=eca7cc26-afff-43d1-b225-021926f5a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5b:1d:40:7a:c1:48:5c:8a:40:c8:9c:af:b4:
                    55:7a:f3:96:5e:85:70:46:53:4f:7e:78:27:9d:c5:
                    76:46:e5:ee:62:e9:34:b8:97:af:03:14:60:1c:eb:
                    90:bc:d0:6d:d1:44:1d:bc:43:10:d4:c1:12:e1:a5:
                    af:b6:44:ce:b7:bc:f7:86:86:3f:0e:81:f3:5f:2f:
                    31:4d:fd:ee:03:66:e7:cc:81:fd:90:bc:74:0d:25:
                    84:31:dd:37:eb:17:94:c0:ad:49:a7:0e:5e:8a:9b:
                    76:68:da:be:2d:1d:6a:bc:50:22:95:64:5d:c2:78:
                    a1:6d:d4:6a:2c:f3:05:d6:9d:30:fb:91:93:47:3f:
                    92:50:66:e4:55:e0:76:4a:96:0c:dc:69:d0:ef:1c:
                    65:ae:6e:ba:75:fe:5d:75:be:ab:3a:cc:46:03:c3:
                    6b:31:09:e9:5f:b6:e8:85:fe:ec:67:9e:d6:f1:41:
                    4b:7d:9a:9d:5d:ad:d3:6c:32:74:4e:cb:47:a8:eb:
                    5a:1a:eb:60:32:ca:83:f0:64:e0:3d:c7:f4:4a:b7:
                    25:76:a1:72:41:63:48:9c:bd:27:2f:26:73:4f:0c:
                    26:c2:ad:51:dd:87:83:39:48:09:f0:04:63:f0:29:
                    58:3e:64:88:d9:fd:ed:a7:f1:9b:3a:67:38:2d:94:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0D:46:AD:28:CA:15:ED:62:53:45:06:65:88:83:11:D8:0D:58:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/1a9f6371-5de6-348f-926c-183d129cf5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522/563c2ad3-4e5e-4758-b1be-07bf4ce94522.crl

            X509v3 Authority Key Identifier:
                keyid:E4:1D:68:AD:2A:A1:CA:56:12:93:53:E0:77:2B:30:47:23:63:15:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/563c2ad3-4e5e-4758-b1be-07bf4ce94522.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:13:5b:80:19:94:c3:09:fd:a1:3d:61:f2:a4:d6:aa:11:b6:
         53:8a:f9:6b:12:ff:fa:66:32:6c:e5:84:0a:56:33:ab:fd:b9:
         e7:79:f5:85:46:3f:c1:46:1f:f7:06:dc:f4:b3:a6:99:0b:82:
         50:2b:b5:18:83:f1:62:a7:57:ac:b6:1f:cd:c7:fd:dd:40:77:
         0f:b2:da:b5:c8:49:b6:36:b8:47:b9:45:9e:2d:bd:6c:7a:3a:
         5e:e3:af:fc:d9:35:a6:a5:24:93:b3:9e:80:1a:04:c4:36:79:
         a9:de:19:74:b5:41:5a:ca:be:2c:39:54:ca:59:03:2b:f5:6f:
         b9:72:ef:2f:f0:47:e2:64:56:06:ba:97:ac:3c:25:44:06:d9:
         6b:65:64:79:6a:1d:c5:f5:4a:d6:c0:81:85:09:b8:4c:52:d8:
         3c:8c:e8:6b:1b:a3:eb:c3:b9:26:c0:54:ee:42:a3:9d:6a:57:
         d4:fe:43:f5:57:2f:45:23:cb:58:8a:0c:76:ef:cf:dd:d2:6c:
         19:3c:55:cf:22:34:21:67:40:66:22:7b:fc:ce:e3:8a:e1:5d:
         3d:6f:50:c1:36:a7:b0:9c:fa:45:e2:f1:97:d7:ac:2d:ce:eb:
         f3:e3:a6:98:81:15:b4:47:e5:79:d7:66:cc:0e:a6:1a:89:89:
         43:9b:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:57:39 2025 by rpki-client