Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
File:                     40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa (raw, json)
Hash identifier:          lUgiPhNF5dv858dCOYgvfamJe+0E57bDTKX+sDqgjZM=
Subject key identifier:   97:B6:CE:53:E4:5F:7A:08:53:75:48:E0:22:DA:76:DB:53:87:F6:12
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285849E22545BE990193779A1CDB80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     13781
IP address blocks:        63.151.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:45:be:99:01:93:77:9a:1c:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=c733a33a-cefc-4f29-b660-e7d52d6e4e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e4:a9:76:e2:f6:1e:24:7c:dc:0b:7e:8c:1e:
                    dc:89:de:81:1b:8d:e3:a3:17:14:02:56:f9:d5:21:
                    42:f4:78:f4:aa:bb:26:b7:92:4f:f3:2b:31:0c:8a:
                    d8:1a:d4:2a:fe:81:7c:27:63:3f:e5:06:e7:94:82:
                    12:52:a7:c0:7b:33:71:b2:79:04:09:b9:ec:ac:9a:
                    82:77:70:43:de:e5:2b:d4:4f:c1:21:66:eb:0a:00:
                    83:20:d4:de:ae:06:aa:39:41:2e:15:a4:8b:2f:04:
                    e8:b1:85:70:95:21:f3:35:d1:05:c9:fb:16:d5:61:
                    65:4a:81:2c:2a:ea:cd:bd:b2:15:99:0d:ad:f8:0f:
                    11:42:2d:f5:1f:b5:41:36:e9:82:5f:7d:cc:08:c0:
                    5e:b8:fa:58:bf:6a:17:ef:08:c1:13:0e:6a:37:8d:
                    23:1a:82:da:4e:d6:82:6b:de:ad:c5:ed:5b:03:bc:
                    b3:73:3b:8c:33:75:ac:cd:a7:d7:24:f7:49:18:0b:
                    5f:b5:19:16:4a:17:8c:48:7c:f0:17:9b:f7:e7:40:
                    cc:79:42:40:ca:d3:44:2b:61:1c:c4:57:ac:32:54:
                    f6:dd:d9:bb:c5:42:8a:89:46:08:43:69:1a:bd:f1:
                    cc:8d:1b:5b:1d:b7:7b:65:92:4c:7c:40:2b:f9:dc:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B6:CE:53:E4:5F:7A:08:53:75:48:E0:22:DA:76:DB:53:87:F6:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.151.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:8c:11:52:07:38:20:b3:43:d7:5d:e3:9a:cc:d0:61:53:b7:
         c2:de:39:8e:0e:a0:65:20:46:b2:fc:b2:af:83:39:87:e1:f5:
         ff:e4:ce:f4:d9:a5:a2:7d:b8:68:7c:51:21:94:50:ec:e5:93:
         a7:4b:ce:2a:66:a9:61:c3:54:70:c4:40:34:a0:e3:43:8a:c7:
         f6:93:21:f2:96:c6:86:df:ff:08:c3:02:bf:00:18:56:14:7d:
         1d:cd:5d:af:d1:61:30:70:77:ae:46:5d:82:af:15:6a:f3:d4:
         bb:fb:8b:42:24:41:ea:51:c0:0e:a7:de:b6:c4:de:ed:7c:28:
         24:c9:b0:0a:f6:37:10:1d:f1:98:ea:f7:f5:71:9d:1f:6a:5b:
         be:c9:81:63:52:0e:a6:1d:73:e2:f0:24:63:75:1d:91:78:b7:
         47:b0:88:4f:d2:71:af:0d:c5:08:2c:5e:a5:75:59:1a:81:8d:
         02:d7:29:43:de:2e:86:04:a0:35:e8:ba:6c:cd:b9:b5:23:f9:
         d5:ee:0a:09:2d:80:ed:bb:96:43:68:f3:14:18:23:83:77:d8:
         1a:ec:75:2e:c2:4c:94:2f:1d:4f:11:28:50:17:45:a3:44:4b:
         f4:73:98:10:0f:a5:aa:78:74:98:18:4b:28:cc:6f:a7:ad:ec:
         d7:fc:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:18:25 2025 by rpki-client