Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
File:                     035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa (raw, json)
Hash identifier:          5XhujxaIVmY5Ncq0iqd/+b+xujZ2T7i33x2OcE9R1xU=
Subject key identifier:   59:EB:CB:AC:61:45:C9:D2:60:DC:AB:3D:C4:3A:EB:53:7F:B7:FD:C0
Certificate issuer:       /CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
Certificate serial:       010D0C9F43285849AA4F6D52C0DAAB6A156B73C0
Authority key identifier: 25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     36780
IP address blocks:        63.246.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6d:52:c0:da:ab:6a:15:6b:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=5cac6c93-a2b2-48c6-a3d3-cece66dfe296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:d2:4c:79:f5:c8:6b:df:88:60:59:11:23:
                    42:89:bd:78:e7:36:fa:2b:1b:25:24:b9:49:63:46:
                    99:9d:f2:ec:7f:a0:72:0a:ca:40:0e:87:32:b7:39:
                    77:c4:90:c5:d6:d9:ef:56:92:72:6b:b2:2c:1e:67:
                    1b:20:94:2b:4d:9d:69:92:39:86:7b:52:e4:ee:4a:
                    b4:4a:df:6e:47:ce:49:22:17:9d:cb:c5:24:77:52:
                    f9:3d:3e:26:e3:2e:d9:af:23:aa:90:50:d9:57:47:
                    ac:70:c1:c4:7a:b5:f7:8c:4e:a2:b8:f1:89:74:4b:
                    80:44:e9:47:a3:21:5c:15:44:79:ce:0f:98:96:6e:
                    3f:cc:a9:21:47:62:d9:a9:d6:96:af:74:50:82:c5:
                    40:99:95:cf:39:93:67:81:ef:23:f3:2c:01:4e:cd:
                    06:1c:0d:28:f4:7f:0d:22:27:d3:f9:f1:ae:b0:ad:
                    f8:25:c8:58:51:df:19:60:43:93:ad:e2:df:34:fb:
                    96:a0:22:60:22:67:98:ba:1d:d3:d7:ad:7d:ff:c6:
                    81:9a:6b:52:49:d0:e6:71:e0:61:83:e7:80:07:c1:
                    76:04:fe:dd:20:80:0d:84:37:38:72:85:c4:1a:39:
                    b3:12:79:ba:cb:fa:9a:d4:7f:82:c3:14:e9:4a:7f:
                    20:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EB:CB:AC:61:45:C9:D2:60:DC:AB:3D:C4:3A:EB:53:7F:B7:FD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl

            X509v3 Authority Key Identifier:
                keyid:25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:16:a8:4c:72:9c:42:ad:fb:af:7d:12:4a:88:fb:25:d0:
         c5:ee:fe:4a:d6:75:c7:be:ce:2c:03:19:c3:0b:c4:44:5c:fc:
         03:39:21:b1:c4:ed:25:47:5d:5b:12:ff:3f:f1:98:63:9b:e6:
         79:a8:7a:2a:fe:fd:88:ce:0b:34:e0:15:3d:8b:ba:7d:c1:88:
         ca:f5:38:30:c4:00:93:7a:94:34:60:5b:a4:14:dc:d4:29:8e:
         cc:c4:c0:02:2e:dc:cc:23:10:69:81:5d:63:f3:71:ed:56:d2:
         2b:27:4a:64:c3:62:6e:46:16:8c:17:20:25:6a:83:8f:75:46:
         a1:95:80:c7:87:cf:33:68:d8:05:71:44:dd:9c:4e:a1:d8:03:
         72:32:69:89:05:df:8b:20:9a:bc:c9:29:c8:dd:13:2e:b4:1d:
         09:64:91:02:5a:33:ad:a1:9b:21:cd:22:f0:ec:85:2b:62:19:
         1a:fe:8a:85:e8:ac:e5:bc:73:53:b4:26:1a:a3:50:a8:48:c6:
         e3:5f:a8:1d:5b:03:0f:a2:1a:dc:43:b9:39:72:4e:c3:0a:0f:
         1a:20:be:17:a3:ed:3f:98:14:f6:bf:73:07:12:59:84:32:52:
         55:19:e6:89:3b:a3:cc:02:7b:e2:aa:76:8c:a7:7f:a3:95:f0:
         54:96:06:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:54:00 2025 by rpki-client