Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa
File:                     512d584a-aed4-3b6a-9c59-eb585416fe6e.roa (raw, json)
Hash identifier:          ooFq3fL92vxJj6/Rl+N6K7DRVCBrKClH3HibfwEA0ic=
Subject key identifier:   88:45:F7:23:C0:B3:75:9A:32:E3:D7:9E:8E:E3:2E:06:99:8D:AC:3E
Certificate issuer:       /CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
Certificate serial:       010D0C9F4328584AB91B91342D6EFAB179989600
Authority key identifier: F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     399195
IP address blocks:        104.37.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:91:34:2d:6e:fa:b1:79:98:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63b3fcd9-f90d-4f20-96ec-d4d328517c0d
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=9a15962c-12cb-499a-a5f8-843f06c44b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1b:c7:f0:f1:13:1a:4d:6d:a0:85:ae:3c:9b:
                    b2:45:90:90:32:99:9f:9d:ff:92:0d:26:b6:3b:4f:
                    c0:02:0e:e8:5e:7b:af:3e:da:0a:f8:71:65:bf:dc:
                    dc:fc:05:d2:e2:bf:ed:4f:1c:ec:a6:f7:f1:f7:ae:
                    14:de:c4:b0:9d:e5:28:2a:88:38:95:9b:20:48:22:
                    7f:b7:1f:f4:f3:03:ba:8e:fd:d8:5c:17:5b:23:27:
                    63:e9:b4:d0:1b:c2:a4:3d:f2:85:e5:6c:27:18:ec:
                    79:3a:68:a3:ab:ff:a8:ad:87:ab:06:4d:96:3d:2f:
                    d1:14:bd:17:ea:6b:e7:e6:aa:a5:43:a5:87:ad:15:
                    42:a8:6b:87:cc:3c:99:87:6f:62:a1:4d:c0:66:b0:
                    2f:9d:2b:78:29:84:b9:e8:56:18:09:23:29:19:38:
                    40:b7:bf:e4:25:b2:87:ff:34:df:f2:b2:a0:10:5f:
                    db:66:17:3c:fa:80:db:16:1e:c2:37:35:32:57:a3:
                    64:dc:89:e9:8e:78:ad:e6:4b:c3:1f:0f:bc:1f:1c:
                    f6:7d:75:a0:58:76:17:e3:53:63:df:11:8a:50:42:
                    e4:b1:f5:f6:be:3b:49:2b:42:4d:14:ab:1a:dc:95:
                    28:2b:7c:1a:93:b8:69:c3:32:f8:d4:03:c9:07:23:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:F7:23:C0:B3:75:9A:32:E3:D7:9E:8E:E3:2E:06:99:8D:AC:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/512d584a-aed4-3b6a-9c59-eb585416fe6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.crl

            X509v3 Authority Key Identifier:
                keyid:F3:9B:33:BE:A3:B1:8F:A1:6B:9E:C0:25:9F:3D:CD:2A:FC:62:38:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/63b3fcd9-f90d-4f20-96ec-d4d328517c0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:cc:87:eb:91:d9:4f:ec:0c:e8:4b:91:cc:28:c6:aa:3b:
         e1:47:a7:26:21:9a:ab:ed:40:f5:d1:a9:45:1c:0f:ed:31:f8:
         c0:b9:e4:23:3c:cd:9f:0c:48:c9:6d:ec:3e:66:9a:4e:37:d2:
         0a:45:b1:f9:f5:38:52:a9:36:98:0e:b9:a1:b9:74:3b:83:e8:
         5f:cb:1b:ca:8a:30:37:f3:45:be:dd:fe:f2:98:b6:aa:12:67:
         3f:75:9e:dc:61:e8:b7:34:20:e0:0c:91:c8:e6:1c:53:8c:fa:
         89:20:0d:00:76:10:0a:c2:a5:83:6f:2b:14:6f:65:f4:23:d2:
         d7:a9:87:75:a9:50:f7:ff:2f:7c:8b:15:04:0b:02:1d:9e:d6:
         00:11:c6:25:e2:c7:4e:91:25:2d:d6:1d:99:51:d6:e4:01:4e:
         89:1d:ff:d6:94:e1:30:2d:2b:f8:4f:2e:9d:8a:58:97:03:c5:
         f2:60:6d:1e:46:30:83:4c:12:16:e7:00:b4:7d:0d:ce:11:b7:
         44:64:15:42:4d:52:d9:54:94:08:38:68:17:16:13:1b:61:67:
         da:cc:17:e4:0d:3e:8a:35:95:2d:b1:a5:81:be:e4:f5:10:ef:
         5d:54:58:15:1f:ab:e5:a3:61:5f:02:d6:62:ce:dd:51:b4:e2:
         02:ba:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:31:26 2025 by rpki-client