Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa
File:                     3bb61dcd-da0f-3ec1-8416-831c406b030b.roa (raw, json)
Hash identifier:          Y+0Rwp6iXvzw4fnMwVcgL+WsS8o+vzroV0hEt8UQln8=
Subject key identifier:   7C:25:31:4F:7C:97:34:EC:7A:B2:A7:EF:C5:AC:A8:28:5F:96:5E:21
Certificate issuer:       /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial:       010D0C9F43285849E7BA7FBCBF28FB72A7A39960
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     15054
IP address blocks:        63.246.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7f:bc:bf:28:fb:72:a7:a3:99:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=f87176e4-d2a4-4591-b0ac-89dca76dd8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f1:92:3a:c1:89:75:56:e3:23:50:42:25:5d:
                    b0:31:66:8f:8c:30:2d:cc:38:26:1e:8c:f1:d9:96:
                    32:fb:af:1d:93:fb:10:95:65:8f:7c:30:fb:bd:12:
                    6a:9f:20:1a:d8:c7:4e:70:8e:27:a6:95:5f:ae:90:
                    72:85:f3:bf:84:a1:97:2c:71:58:0c:e2:d2:4b:15:
                    5d:ad:ac:17:c7:8f:c9:be:c0:10:ff:c5:aa:ab:17:
                    d8:96:b4:a0:bc:80:9b:71:db:bf:62:da:7c:57:ad:
                    a6:6c:38:03:08:d5:41:c8:2c:00:81:9b:4c:93:74:
                    c1:11:65:7b:08:8f:14:6f:4f:25:70:87:ee:c2:d4:
                    30:c1:ca:2f:82:dc:0d:d4:57:14:e9:3f:68:af:98:
                    22:26:28:14:3a:41:2a:5a:8b:3f:06:48:8b:cd:14:
                    4c:fd:94:6a:cc:ef:a1:ed:c9:83:e4:2f:e9:9c:e0:
                    ed:cf:03:76:58:3e:aa:e3:5e:8c:d6:22:be:01:00:
                    34:52:a1:37:1f:f3:12:73:cc:fb:16:82:76:27:42:
                    bb:77:6f:10:42:77:83:69:d7:94:ac:78:b5:b9:cf:
                    e0:1c:7c:73:66:e0:bd:c2:9d:19:b0:0c:d6:8b:38:
                    41:ed:f8:62:bc:a6:71:64:a2:4f:37:1b:fa:d8:91:
                    06:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:25:31:4F:7C:97:34:EC:7A:B2:A7:EF:C5:AC:A8:28:5F:96:5E:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/3bb61dcd-da0f-3ec1-8416-831c406b030b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl

            X509v3 Authority Key Identifier:
                keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:67:b0:aa:b3:7d:d1:57:ff:a3:d2:b2:1a:8e:6e:9d:59:a1:
         08:2c:af:41:6c:db:4b:6c:9e:d9:0a:17:28:0a:4f:cb:69:06:
         c7:d5:90:c7:73:87:fa:30:ee:1d:8c:2e:2e:cf:ad:b4:f5:61:
         08:7b:03:b9:20:85:d7:c9:90:ac:1e:00:fd:9f:69:4b:d7:bd:
         67:6c:50:f4:d0:0b:60:59:3f:38:a1:38:1c:af:f7:0e:84:e7:
         aa:f1:07:cb:b1:23:36:38:72:65:5f:33:0e:70:e0:5e:d2:52:
         ba:03:4a:76:5b:75:9d:2f:22:ed:e3:19:ac:95:46:72:c1:92:
         9d:46:11:68:80:2b:16:2f:e4:e3:9c:4a:eb:51:78:e7:f1:23:
         1e:ef:ed:2b:f0:d8:d2:62:3a:f4:74:84:d4:d0:a0:9c:ba:28:
         25:14:3f:49:6a:e7:4d:4a:a3:78:04:78:ca:8e:74:42:b0:08:
         cc:ce:3a:42:8e:cf:7b:0f:e7:62:25:ed:b3:42:a5:78:98:90:
         48:8d:50:a1:2b:45:32:68:99:17:14:68:3c:14:de:73:78:44:
         0e:61:32:38:d2:8a:5a:d8:70:da:7f:17:21:ad:a5:08:42:fe:
         3b:34:ba:2b:a1:53:1f:6b:76:8e:0f:26:17:d9:fb:af:c2:fb:
         61:21:d0:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnun+8vyj7cqejmWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFmZTI1MzUtMmRjNS00ZDQ3LWIwM2UtZDQ0ZWVhMjYw
MzJmMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
Zjg3MTc2ZTQtZDJhNC00NTkxLWIwYWMtODlkY2E3NmRkOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvGSOsGJdVbjI1BCJV2wMWaPjDAtzDgmHozx
2ZYy+68dk/sQlWWPfDD7vRJqnyAa2MdOcI4nppVfrpByhfO/hKGXLHFYDOLSSxVd
rawXx4/JvsAQ/8WqqxfYlrSgvICbcdu/Ytp8V62mbDgDCNVByCwAgZtMk3TBEWV7
CI8Ub08lcIfuwtQwwcovgtwN1FcU6T9or5giJigUOkEqWos/BkiLzRRM/ZRqzO+h
7cmD5C/pnODtzwN2WD6q416M1iK+AQA0UqE3H/MSc8z7FoJ2J0K7d28QQneDadeU
rHi1uc/gHHxzZuC9wp0ZsAzWizhB7fhivKZxZKJPNxv62JEGXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHwlMU98lzTserKn78WsqChfll4hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZl
MjUzNS0yZGM1LTRkNDctYjAzZS1kNDRlZWEyNjAzMmYvM2JiNjFkY2QtZGEwZi0z
ZWMxLTg0MTYtODMxYzQwNmIwMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGFmZTI1MzUtMmRjNS00ZDQ3LWIw
M2UtZDQ0ZWVhMjYwMzJmL2RhZmUyNTM1LTJkYzUtNGQ0Ny1iMDNlLWQ0NGVlYTI2
MDMyZi5jcmwwHwYDVR0jBBgwFoAUN8t1jDs52bn6L7Uc75kQZ5e56xAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYWZlMjUzNS0yZGM1LTRkNDctYjAzZS1kNDRl
ZWEyNjAzMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/YwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlnsKqzfdFX/6PSshqObp1ZoQgsr0Fs20tsntkKFygKT8tpBsfVkMdz
h/ow7h2MLi7PrbT1YQh7A7kghdfJkKweAP2faUvXvWdsUPTQC2BZPzihOByv9w6E
56rxB8uxIzY4cmVfMw5w4F7SUroDSnZbdZ0vIu3jGayVRnLBkp1GEWiAKxYv5OOc
SutReOfxIx7v7Svw2NJiOvR0hNTQoJy6KCUUP0lq501Ko3gEeMqOdEKwCMzOOkKO
z3sP52Il7bNCpXiYkEiNUKErRTJomRcUaDwU3nN4RA5hMjjSilrYcNp/FyGtpQhC
/js0uiuhUx9rdo4PJhfZ+6/C+2Eh0FE=
-----END CERTIFICATE-----
Generated at Thu Jun 19 09:17:58 2025 by rpki-client