Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5624e1c-af54-3c9e-adcb-7ab46c00f5ff.roa
File:                     b5624e1c-af54-3c9e-adcb-7ab46c00f5ff.roa (raw, json)
Hash identifier:          OoACgB3mXFNSd53h8+FxIljbv8jERINrQnSegJIqTzw=
Subject key identifier:   9D:60:E1:7D:BA:FD:9F:67:CF:2F:5A:AB:A6:FA:5B:F0:AC:8A:B7:3E
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584A90A0D7AEDACE05D1A4524680
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5624e1c-af54-3c9e-adcb-7ab46c00f5ff.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     18633
IP address blocks:        63.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:d7:ae:da:ce:05:d1:a4:52:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=b7050f68-fab8-4456-8544-10ea2c9736b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6d:c1:62:ae:ef:50:80:5f:b1:a2:83:40:e3:
                    61:12:68:24:86:a8:cc:d7:a1:39:8b:e2:09:f7:ab:
                    6d:0b:76:e2:c8:6c:51:50:fb:5c:cb:a6:fb:13:37:
                    2d:7d:08:94:2a:d9:83:8f:c2:b2:c3:51:11:0d:67:
                    9d:d7:06:de:8e:55:83:cc:8f:d3:ec:03:c7:70:9e:
                    8d:d6:76:7a:4e:a3:37:d7:6a:e1:a1:db:18:9d:bf:
                    42:ec:10:2b:5e:14:af:e2:da:48:d7:98:64:77:b0:
                    b0:af:99:35:f4:d5:da:27:53:6c:81:1b:07:09:97:
                    18:82:d7:ab:81:9c:26:a1:bc:2e:48:3f:60:83:31:
                    0d:a4:04:ce:3e:1b:ac:2c:23:3b:23:5b:27:b3:a2:
                    44:43:5c:2c:79:ee:7e:86:8d:e8:61:ea:24:39:16:
                    17:eb:de:14:7c:f9:66:67:22:2b:93:8b:59:3d:85:
                    7c:a9:7a:1f:6e:ce:55:07:52:2c:fe:aa:43:56:94:
                    8b:b3:de:77:b8:79:c5:59:b9:75:d6:ef:f7:19:7f:
                    bb:d2:e7:fd:0f:9a:f2:2b:59:c4:91:bb:04:36:b5:
                    9e:03:a2:65:a1:5e:ee:02:b5:f1:de:49:6d:34:d1:
                    2d:35:30:a7:da:3a:3d:09:0b:6c:04:c3:84:1b:4b:
                    24:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:60:E1:7D:BA:FD:9F:67:CF:2F:5A:AB:A6:FA:5B:F0:AC:8A:B7:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5624e1c-af54-3c9e-adcb-7ab46c00f5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.252.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:21:86:b8:68:e2:15:54:22:89:05:92:01:00:76:5f:cc:2b:
         b7:ab:8a:22:4a:c5:e1:69:fc:86:39:ea:42:7e:de:fe:85:d9:
         e3:b3:9a:e2:7e:c0:75:39:8c:66:aa:2c:a6:d6:ed:2c:28:00:
         29:b8:fd:d7:8c:83:fd:10:19:16:70:24:50:9f:97:02:33:1a:
         6d:20:f8:b0:26:9a:20:88:6a:bb:67:82:2d:bd:f6:19:d3:71:
         fa:e4:b6:f7:d8:3d:eb:00:b7:95:87:28:12:e3:e2:c3:86:a3:
         e6:be:ea:69:83:08:c1:a8:4a:c6:d4:fd:6c:65:a0:c1:b9:51:
         14:0f:e6:f1:6f:31:0c:aa:e5:63:08:ab:b9:55:b6:a0:e7:bc:
         fd:f2:11:a8:33:ab:3f:bf:52:93:4f:0a:e9:8c:02:fe:8c:11:
         c7:87:5f:05:0b:93:ed:07:91:00:17:d3:5e:df:dd:7d:ae:b1:
         36:d3:f6:d5:36:3e:59:d9:a9:98:7a:ff:76:52:49:b8:ea:37:
         2f:68:b8:5e:3b:57:8a:60:05:b6:9b:91:6e:77:91:6d:9c:c3:
         d1:fa:d6:21:6b:4a:66:7d:52:ee:f4:cf:8c:5f:04:a8:c1:24:
         f2:bb:2c:73:05:56:49:2f:ee:b3:d2:10:03:1f:07:33:16:6b:
         dc:e6:42:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:03:54 2025 by rpki-client