Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e4303e5-285c-3bdd-888c-d0f32266ef58.roa
File:                     9e4303e5-285c-3bdd-888c-d0f32266ef58.roa (raw, json)
Hash identifier:          lC7TKu4TM4moMZ8RgdVCtQcX/IynHlpVqxiXYL6m8i4=
Subject key identifier:   76:71:B2:39:8C:11:B0:C0:9A:00:43:9E:A0:C6:3B:13:36:B9:68:F8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584BA7CCF7D4B4682C7C74767C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e4303e5-285c-3bdd-888c-d0f32266ef58.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     8075
IP address blocks:        63.116.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:f7:d4:b4:68:2c:7c:74:76:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=f5e3f53b-735d-449b-9013-6a994b26f7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a0:1c:5d:84:80:bb:15:91:07:52:aa:e1:e3:
                    99:d0:11:9d:dc:18:4a:67:6a:1c:68:c9:b9:40:e4:
                    15:19:0b:4a:56:8e:93:a3:ec:d5:c0:ab:8b:ab:c9:
                    9e:d9:00:76:ed:dd:90:6a:56:8d:1a:93:9b:07:06:
                    3a:b0:ec:5b:33:95:50:4c:09:d7:fa:e5:1a:a4:95:
                    86:a2:29:d1:80:ec:41:01:ab:8b:06:40:d6:90:a5:
                    86:ba:10:a5:47:ef:9b:b4:1f:0e:cd:02:6f:1a:8a:
                    fa:d2:08:e7:75:1b:6b:c4:1e:50:ee:88:c3:86:e6:
                    06:8a:48:4a:8e:df:8a:67:97:73:dd:3e:60:a9:3b:
                    02:d9:24:6f:1d:de:8f:22:88:81:90:79:0c:6e:09:
                    46:db:62:0b:49:e2:82:99:d2:58:93:60:8a:e0:f1:
                    43:5c:25:d4:09:2e:6e:3b:16:3e:48:b6:3f:38:1f:
                    4d:d3:66:7b:ff:73:4e:70:33:3f:be:7b:aa:78:00:
                    e6:e0:7b:a6:05:d1:8b:14:a1:d5:e5:51:46:d8:fc:
                    23:cc:32:2f:fe:a1:6d:20:92:df:96:cf:6b:f4:6b:
                    09:40:b3:89:68:bf:c3:28:26:56:d0:21:6f:a4:78:
                    f7:1c:f5:38:c8:fe:22:a3:14:a0:97:67:81:6e:1b:
                    32:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:71:B2:39:8C:11:B0:C0:9A:00:43:9E:A0:C6:3B:13:36:B9:68:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9e4303e5-285c-3bdd-888c-d0f32266ef58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.116.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:9a:05:bc:9a:ce:d6:34:81:bb:1a:7e:29:20:a2:31:bd:26:
         76:bf:b3:93:55:be:de:ab:56:9b:c4:c3:ca:47:c1:6b:f9:91:
         45:a0:1f:25:8e:44:17:35:bd:ee:2a:05:ad:5b:3e:49:68:64:
         98:26:b7:72:4f:bb:37:d4:97:d8:6b:e5:ee:02:ac:7b:9c:4d:
         b7:23:c4:c2:de:cc:d5:8c:05:00:45:6c:b9:b2:77:d6:d2:eb:
         1d:8b:4a:ab:a1:f1:1b:80:2e:14:30:de:ca:61:d6:9a:16:7c:
         ce:bc:ce:60:07:ec:2c:61:e9:bd:98:54:a7:58:4b:fe:fa:c9:
         21:38:35:1b:d5:a2:82:23:ee:f3:de:a5:0b:f5:15:08:c6:6f:
         8c:02:72:3e:ff:7b:6f:10:56:89:9e:ae:03:81:26:cd:f1:51:
         24:c1:5f:14:2f:c1:49:e6:ca:d4:c1:98:a2:67:fa:5b:7b:69:
         77:02:6e:cd:b5:f5:93:15:f9:fc:37:c1:68:1d:03:75:10:f9:
         de:5d:96:46:b3:07:23:89:c5:02:29:0e:86:96:af:52:30:05:
         7e:8f:24:6a:91:16:a3:51:a9:11:bb:4c:c5:19:10:7e:36:00:
         88:05:3e:30:fc:54:f6:a9:5b:1f:d1:53:fe:5d:0a:d9:01:10:
         c2:ae:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:16:17 2025 by rpki-client