Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa
File:                     a6046402-6cd1-38ca-8857-62866dfdfdc3.roa (raw, json)
Hash identifier:          oF8JnqomsxtnCL/ZSyf7A+rNvFJSGu+n8CggYKh9HhE=
Subject key identifier:   1D:4D:4C:5D:2E:51:DB:AA:BB:7A:12:BD:72:A4:7C:DF:A1:64:42:C1
Certificate issuer:       /CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
Certificate serial:       010D0C9F43285849E7BA7FD04E4775F7EB2C2680
Authority key identifier: 37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     3257
IP address blocks:        63.246.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7f:d0:4e:47:75:f7:eb:2c:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafe2535-2dc5-4d47-b03e-d44eea26032f
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=5c5cd988-d9e3-4a4b-b676-9503eb357ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:84:62:ce:a0:28:f2:19:09:e6:55:0c:9c:2c:
                    04:48:8f:e1:df:5e:d3:de:2a:73:47:06:35:0c:79:
                    69:70:cf:fb:20:42:d8:e6:1b:f0:d9:da:ec:c6:55:
                    3b:5c:b6:05:05:0e:2b:ab:17:8c:e6:64:a2:9f:de:
                    3f:06:7b:70:7f:2f:ec:b1:50:59:c8:1a:72:50:7d:
                    95:f7:5a:5d:51:09:91:02:ad:72:c3:f0:ba:20:a4:
                    b9:93:be:d3:c9:6a:e8:5f:66:74:e1:72:22:a1:45:
                    13:38:ef:1f:a2:90:81:d6:df:ca:16:10:46:ba:92:
                    a8:9f:9f:7b:1b:da:15:79:5d:40:2c:ec:05:1e:18:
                    d4:d2:43:c1:3a:06:62:22:b1:44:35:2f:5a:15:fd:
                    71:06:1f:b7:13:96:ef:3e:32:b2:e7:a3:44:38:7e:
                    f4:6a:1d:73:d1:d2:df:4d:42:7a:ae:d5:6a:21:59:
                    bb:0c:1c:36:57:df:b0:d2:29:8c:d4:01:92:78:1f:
                    25:3f:e6:c8:99:20:50:5f:cf:57:b5:d6:99:06:7d:
                    a0:c8:52:b9:aa:bf:ea:88:ba:4f:db:28:7a:f5:60:
                    03:fc:98:07:ad:44:7e:7e:1a:ef:ab:38:2a:1f:da:
                    ec:a5:bb:04:ff:19:bf:99:46:14:28:12:71:f5:fb:
                    76:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:4C:5D:2E:51:DB:AA:BB:7A:12:BD:72:A4:7C:DF:A1:64:42:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/a6046402-6cd1-38ca-8857-62866dfdfdc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f/dafe2535-2dc5-4d47-b03e-d44eea26032f.crl

            X509v3 Authority Key Identifier:
                keyid:37:CB:75:8C:3B:39:D9:B9:FA:2F:B5:1C:EF:99:10:67:97:B9:EB:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dafe2535-2dc5-4d47-b03e-d44eea26032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:82:1b:e5:bf:80:66:29:08:bd:f7:94:18:af:17:27:2d:8d:
         67:3c:e4:ef:99:eb:08:ff:c6:65:44:a5:24:c9:04:ef:5e:c1:
         d9:ff:7c:9a:1b:52:00:41:e7:9e:2f:67:39:a1:bc:e6:3d:52:
         71:6a:6a:27:60:0d:c0:1b:c4:cb:58:8e:7a:aa:88:f2:cc:36:
         9b:a8:b2:e3:5c:f8:82:f0:96:c4:fc:ad:5f:56:2b:14:38:b6:
         03:6d:37:f3:c1:78:a6:98:fc:df:b5:c5:63:13:d7:c8:3b:31:
         2c:9c:cb:7b:fc:e1:83:19:85:fe:3c:86:3f:50:10:bd:6a:61:
         ee:a4:3d:e5:da:72:1a:f3:f8:5b:4c:d3:d6:9d:77:f2:20:a7:
         4b:53:80:ac:9a:4d:65:30:27:6b:1b:99:1c:7c:c7:8f:4f:0c:
         08:e4:44:71:2f:37:62:3e:32:d8:74:06:6b:20:2c:2b:ac:40:
         28:5d:22:ec:17:37:09:b0:5d:2d:3c:d3:82:08:43:58:0c:32:
         a8:4c:10:6c:4f:df:ed:6d:fa:3c:f5:21:1b:d4:a7:5c:a7:c0:
         bd:d2:cf:78:5a:78:77:36:29:51:8b:2b:ac:cf:1b:11:ca:9f:
         1c:0f:02:5e:86:a4:94:04:a6:ed:92:d8:9a:74:cf:ea:90:40:
         c2:f1:ee:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 08:43:49 2025 by rpki-client