Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d4eba3ec-a159-304c-aee9-147cc6ba0f3d.roa
File:                     d4eba3ec-a159-304c-aee9-147cc6ba0f3d.roa (raw, json)
Hash identifier:          kU+ATjvomNd25AxZnJHCD3a0b+uGXFNtod7mlqKZ3ns=
Subject key identifier:   2F:E5:7D:EE:EC:51:D6:45:F5:74:7B:58:39:F7:C3:E5:84:2F:6F:2C
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285849E22545E855A74241D2C8DC80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d4eba3ec-a159-304c-aee9-147cc6ba0f3d.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     13781
IP address blocks:        63.238.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:45:e8:55:a7:42:41:d2:c8:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0975428f-bb3d-4bf8-b31f-2e03a31593da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6b:d0:e7:c2:e2:17:36:69:f7:a7:e2:aa:ff:
                    18:f1:06:bf:d8:55:35:b7:90:56:29:ca:b2:5c:e8:
                    6d:fc:7f:9c:a9:29:96:4b:18:03:29:09:c8:9f:f3:
                    28:e7:fe:b3:7c:25:77:61:15:0a:22:dc:73:aa:f1:
                    0b:97:85:02:2f:6e:a0:b2:ea:32:bb:35:9c:9e:50:
                    9a:5f:61:bb:d6:27:8e:51:d5:9e:cf:33:28:e0:10:
                    79:90:78:34:9c:cb:42:4a:4b:6f:03:e7:2e:20:98:
                    52:44:66:10:dd:c6:d3:ba:ea:90:75:06:53:a4:93:
                    40:a3:0a:29:d4:08:f5:c7:92:22:0c:98:a6:9f:11:
                    82:bc:68:ae:0a:ea:dc:10:47:82:dc:70:dd:d4:58:
                    d6:2f:d3:5f:1c:c3:f4:ac:87:08:7a:80:a3:91:bb:
                    29:9f:8e:36:30:fc:e2:6e:36:b8:63:41:0e:e2:00:
                    c8:47:db:c2:6b:fe:c8:bd:b1:e2:65:10:1d:3d:92:
                    52:be:80:2f:af:65:37:7f:0b:cd:5a:51:d7:64:f9:
                    5b:b4:bc:03:23:c6:30:7f:2b:f7:8c:7f:b8:cd:e9:
                    b3:a1:3b:18:8e:17:03:0b:5c:87:51:bb:1f:52:47:
                    9f:32:fd:0a:3a:bd:9e:b7:f7:55:fd:4e:a3:6e:7b:
                    a8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E5:7D:EE:EC:51:D6:45:F5:74:7B:58:39:F7:C3:E5:84:2F:6F:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/d4eba3ec-a159-304c-aee9-147cc6ba0f3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.238.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:08:20:71:14:b0:74:d0:a9:6c:63:d9:44:6a:4f:6e:5a:
         41:97:f2:46:aa:44:78:fa:05:a1:7c:92:37:a7:dd:26:18:ca:
         df:14:99:32:ad:4a:6b:0d:51:cb:fa:fc:92:6c:b0:76:e1:12:
         f0:6e:37:43:de:a1:6a:6a:2d:93:7a:49:58:8d:89:c5:aa:63:
         1a:61:6e:11:77:4d:fc:68:3b:fd:f8:21:d3:ac:99:1b:b6:80:
         a5:e5:5a:fd:9b:b0:8e:ae:a2:3e:fd:3c:76:0d:6a:83:f1:9e:
         e7:95:17:92:51:5f:a9:0e:8d:2a:a0:94:0b:9e:89:33:89:3a:
         90:02:c1:4a:ea:67:05:70:b1:a0:28:1d:25:46:61:a9:5d:2c:
         52:a6:2b:1d:b4:55:39:d1:13:d0:89:2f:43:36:db:a4:1e:20:
         25:6f:2f:98:cd:6d:e3:4a:8a:cf:41:58:12:b1:fa:73:d9:a0:
         41:f0:a8:e3:1a:20:b0:8f:ee:66:46:ae:64:26:81:e1:aa:a4:
         c1:eb:70:96:9b:69:72:28:2a:b8:8f:0a:7c:21:64:6a:d7:15:
         72:6a:b5:9b:17:21:30:4a:9d:cf:d7:47:35:f7:3f:06:d6:85:
         7b:ef:de:50:95:0c:e8:af:96:18:2e:52:db:29:67:a1:4e:63:
         e5:71:92:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 03:41:26 2025 by rpki-client