Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e7cdeb9-4bfc-3d19-88f1-433b8c6e677f.roa
File:                     1e7cdeb9-4bfc-3d19-88f1-433b8c6e677f.roa (raw, json)
Hash identifier:          I9e4I8vGVv0qrJPKvUKQaA8Nc9xwMz8sHc5tOOizz0s=
Subject key identifier:   99:44:12:0B:8E:7D:F6:A5:49:1F:FF:3E:D8:37:48:7E:87:25:96:D8
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A331AE8C0E5EA6F2A7A53B2C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e7cdeb9-4bfc-3d19-88f1-433b8c6e677f.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     30527
IP address blocks:        63.247.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e8:c0:e5:ea:6f:2a:7a:53:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=d3ea51fa-7d2a-41b5-9736-edb794c49529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5e:68:6f:52:18:01:ac:1b:30:f6:3d:0c:08:
                    88:07:d2:8a:4a:37:74:a8:f1:ee:8d:0d:81:76:b6:
                    ba:18:51:08:6a:17:f9:b5:8a:0e:f7:40:9f:80:3b:
                    99:1a:9e:f8:5f:0d:7a:78:f9:de:55:ce:5f:5d:62:
                    aa:96:8f:01:f0:e0:0c:2c:c6:7c:19:7a:ec:1f:fd:
                    bf:77:28:05:ac:5e:52:df:36:b7:98:bf:2d:67:09:
                    35:d8:9a:88:8d:ba:e3:48:bb:c5:e2:ed:7d:05:98:
                    6f:7a:a4:14:82:75:57:84:62:be:24:04:23:0b:23:
                    cb:36:b0:15:d8:30:7f:f3:cd:89:f8:fb:09:f4:9a:
                    6c:b7:6d:da:c6:55:c3:45:d0:12:3d:e8:e2:bf:30:
                    08:95:b8:91:bd:5b:2c:ff:16:a4:00:0e:82:69:22:
                    cc:d5:fe:53:73:e7:6f:82:17:3c:cc:75:98:39:cc:
                    bf:b4:a2:fc:9a:c2:91:f5:71:ce:e5:c2:00:ef:3e:
                    2c:6c:33:9f:f9:7a:8b:59:38:95:39:1e:c2:08:81:
                    46:bd:37:6c:87:4a:b1:6c:ce:62:5d:67:ba:b8:1d:
                    48:ee:a7:50:a0:62:ec:64:41:87:40:57:86:33:31:
                    5a:63:d0:17:d0:55:44:30:13:75:61:9e:5a:b9:7d:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:44:12:0B:8E:7D:F6:A5:49:1F:FF:3E:D8:37:48:7E:87:25:96:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1e7cdeb9-4bfc-3d19-88f1-433b8c6e677f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:36:dd:1f:53:67:e8:5d:db:c1:f8:89:03:a4:30:0b:13:28:
         1e:1f:99:7e:b8:35:dd:d0:5e:96:3e:5c:ad:57:5f:36:04:06:
         94:5f:6b:a4:7e:73:6d:db:fe:1b:37:85:bd:1b:4b:c9:da:ea:
         20:fe:41:9f:1f:50:85:af:a2:0d:43:47:c3:26:fa:5a:31:31:
         37:d6:11:63:1d:e3:c7:0d:48:79:0c:98:6e:dc:38:8a:d3:58:
         51:4c:a3:e8:db:18:bf:54:42:5a:19:db:73:75:ca:9c:57:49:
         98:18:1e:91:ac:8a:8b:b9:43:7a:13:6d:31:71:63:fc:15:dc:
         39:13:ef:7c:4b:93:cd:cb:98:89:7c:a3:b8:35:fe:14:6a:b6:
         8d:fc:28:1d:04:21:a7:7e:87:67:8f:b5:02:e6:de:c9:62:78:
         b7:3d:c5:dc:65:07:ab:dc:be:88:9f:d8:c1:60:da:a9:2c:4d:
         4a:3f:2e:94:d2:8f:40:27:b3:3f:25:da:c0:59:c9:95:f3:72:
         f4:89:76:ec:38:3a:1c:0f:93:cc:e3:71:43:8b:c5:ae:61:2b:
         3d:7c:43:7c:41:e4:17:31:55:4e:23:a0:15:da:26:d0:ab:cd:
         d6:7a:2f:b4:dc:c6:a3:45:c7:73:02:55:10:1c:4d:c7:b7:80:
         6c:13:07:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:07:55 2025 by rpki-client