Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b88b2b3c-082d-32c9-b4ab-9e11386846fe.roa
File:                     b88b2b3c-082d-32c9-b4ab-9e11386846fe.roa (raw, json)
Hash identifier:          Qkb0cCNjDPUM0kWzHGlso3r/pqAMKlrkGgxEDUEjqmE=
Subject key identifier:   51:E7:DD:D6:1F:29:CF:42:3A:40:83:3D:57:48:B8:A2:5E:69:FA:08
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A8A5E2568983AF689C44C7540
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b88b2b3c-082d-32c9-b4ab-9e11386846fe.roa
Signing time:             Wed 16 Jul 2025 19:12:00 +0000
ROA not before:           Wed 16 Jul 2025 19:12:00 +0000
ROA not after:            Tue 14 Oct 2025 19:12:00 +0000
asID:                     19687
IP address blocks:        63.127.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:5e:25:68:98:3a:f6:89:c4:4c:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul 16 19:12:00 2025 GMT
            Not After : Oct 14 19:12:00 2025 GMT
        Subject: CN=73fa48fe-168d-47fa-960f-ffb9adcf7e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:fa:89:da:e3:6e:b0:e2:bb:54:0e:6f:47:
                    62:40:ba:f3:00:df:fb:a8:4d:0f:09:6e:97:46:9b:
                    50:28:91:c8:cf:1c:fa:b7:af:5f:24:b5:04:1d:33:
                    97:d3:31:ff:c4:ad:9f:bd:38:80:ec:80:ab:06:33:
                    f7:a4:23:bc:7e:24:dd:df:e1:a6:4e:dc:13:b7:88:
                    2b:82:c8:d7:0c:6d:86:9c:5b:3f:fa:5e:d8:22:f6:
                    23:7f:a2:cf:67:af:89:db:3d:78:d1:da:34:0b:45:
                    6a:61:0d:a8:46:43:8c:b3:73:48:dc:e7:68:98:86:
                    19:93:35:60:bb:63:38:3e:ad:7f:dc:b8:ec:d3:7a:
                    57:a7:38:ef:00:95:15:80:bb:3c:c2:62:85:38:63:
                    3e:e9:31:b0:54:ae:cf:10:82:7e:2f:cb:80:ca:96:
                    08:dc:8c:af:3e:22:c3:75:fa:ea:75:a9:14:e0:f0:
                    22:70:87:06:06:5d:dc:46:19:68:c2:6f:36:a4:a2:
                    dc:66:4f:09:5b:34:cf:9d:dd:d8:97:95:cc:97:cf:
                    55:7c:96:59:15:76:bd:ab:27:76:e5:e5:da:e6:35:
                    57:e8:2f:1e:ae:09:a5:55:ea:55:76:4c:01:79:1a:
                    c6:00:d3:ce:aa:29:0c:a8:a9:a9:db:90:57:f8:08:
                    0a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E7:DD:D6:1F:29:CF:42:3A:40:83:3D:57:48:B8:A2:5E:69:FA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/b88b2b3c-082d-32c9-b4ab-9e11386846fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.127.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e1:8e:08:67:e7:b8:ce:08:55:ff:d0:f3:f2:fb:8c:d6:ad:
         29:b0:ce:0f:a4:91:8f:23:f7:2c:ab:6d:c8:cb:4d:1f:69:6c:
         95:a4:96:e8:e7:65:13:5b:6a:8c:8c:c7:ae:c8:0f:38:0e:39:
         db:ad:28:76:ce:82:86:e8:75:21:3e:bf:c0:86:5b:56:48:e9:
         01:59:9f:62:42:19:7c:6d:8a:38:88:2c:ef:45:09:f1:05:2b:
         25:2b:75:8e:07:eb:82:db:fe:9a:69:7d:65:cd:7a:ad:c4:f9:
         97:d2:6d:b9:e6:b9:41:b8:84:5c:e2:7c:43:15:d9:c6:54:d2:
         19:9d:45:53:0d:f6:10:5b:7b:7c:c7:1f:20:65:dc:cf:af:1b:
         8b:61:8a:cb:65:00:06:05:64:62:35:52:2c:2a:15:bd:0b:3a:
         92:a4:93:41:c0:8f:2d:dd:38:38:50:0c:87:28:3e:8b:4c:69:
         ff:23:f6:14:45:b2:6f:5e:75:ee:04:1a:6c:64:4d:b1:06:67:
         c2:3e:ee:81:5d:a0:53:b2:55:3c:77:2d:bb:f5:0f:26:11:45:
         4a:de:90:f1:4a:16:f9:34:71:ef:bd:20:5c:fd:bd:f2:cd:ad:
         4f:c0:32:a0:ff:fa:60:19:57:5e:2d:b6:b6:4e:03:8b:02:da:
         96:46:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:41:44 2025 by rpki-client