Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0ea9208a-5769-3bce-9a09-8c2f06d0cde9.roa
File:                     0ea9208a-5769-3bce-9a09-8c2f06d0cde9.roa (raw, json)
Hash identifier:          QnlgaKGNwsSEozoptIHTY67zpakrLkLmqctlI4b11nE=
Subject key identifier:   58:76:0E:28:2D:74:77:57:85:B9:37:F2:45:A4:2C:80:90:D7:26:83
Certificate issuer:       /CN=0538ef3c-e342-4e27-a075-8167bc73c054
Certificate serial:       010D0C9F43285849CE9A5DF7F3A3EE7337C7F5D0
Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0ea9208a-5769-3bce-9a09-8c2f06d0cde9.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     11260
IP address blocks:        63.135.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:5d:f7:f3:a3:ee:73:37:c7:f5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=44c852b4-a8c6-4395-9b42-1cd9b68e4eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6b:d7:44:c5:dd:7c:6f:1f:60:fb:81:c7:85:
                    71:0d:06:dc:b7:76:99:42:e6:8e:00:fa:e0:37:f2:
                    16:57:71:db:28:d4:f8:1c:96:97:84:c2:24:cb:db:
                    ec:c9:17:37:e6:4e:c2:e2:94:de:3a:1c:7e:3a:18:
                    fa:65:6e:56:89:4f:12:db:a0:77:93:1a:2a:c9:29:
                    79:a2:32:64:6b:4d:87:7f:20:71:82:27:3e:9e:22:
                    89:7c:f4:74:4d:a1:d1:d9:13:26:18:e6:16:11:a2:
                    4e:6a:88:99:72:78:d7:be:37:a8:4a:d4:0c:7e:11:
                    33:22:22:d2:0c:54:a3:e2:ce:a6:40:20:d7:93:36:
                    b4:0e:21:34:83:f7:3b:0c:cd:85:ab:18:33:e9:1a:
                    5b:ea:5c:20:01:e3:3e:84:35:05:ac:6d:6a:c7:1a:
                    0e:6e:c3:ef:06:10:2d:df:5f:a6:d1:e9:05:f7:ce:
                    f1:9e:3f:54:8f:e6:46:50:5c:da:f4:fc:80:25:0e:
                    93:64:b7:fe:f7:e2:36:01:08:38:21:e1:2b:35:2e:
                    4e:f8:ac:81:03:9b:40:34:f7:e9:0d:78:2b:af:e2:
                    d3:c7:c5:25:8c:74:e8:0e:b3:26:69:4f:2a:8e:6b:
                    94:7f:c0:2b:bc:e2:77:9e:6e:1d:9a:22:c5:4d:e2:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:76:0E:28:2D:74:77:57:85:B9:37:F2:45:A4:2C:80:90:D7:26:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0ea9208a-5769-3bce-9a09-8c2f06d0cde9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl

            X509v3 Authority Key Identifier:
                keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:82:2c:1d:fb:f8:97:35:87:8b:46:80:7e:5d:d9:d6:db:1e:
         95:db:f4:4f:86:2e:e3:ae:66:b1:67:37:5e:22:3b:2c:a3:5a:
         78:31:ea:51:65:a3:b9:ed:43:fa:6e:34:ff:c4:c3:ca:a1:28:
         e4:0e:ef:a8:51:d5:ac:13:20:ba:e1:90:f8:45:cb:b5:d4:01:
         d4:fc:29:75:9a:fa:41:67:05:b2:f4:01:cb:ff:79:23:65:f5:
         15:51:8e:88:ac:52:8d:e7:e5:47:5d:4c:75:cd:05:a5:06:8d:
         b0:a5:1b:2d:fe:2a:dc:2a:eb:f3:23:7f:90:95:24:97:32:7a:
         84:cf:61:2e:ce:a5:c7:b9:ff:81:84:16:e7:01:0f:fb:c9:0a:
         49:19:1e:ce:d5:c9:80:84:f0:46:57:a8:c7:39:13:43:fa:7e:
         51:63:e4:b6:e6:e6:70:66:09:16:d2:c6:a6:23:77:3e:49:c1:
         a1:2b:9d:c8:d4:df:a7:2a:2a:f8:76:ed:ba:f4:a0:82:c7:e4:
         1d:ce:1b:ae:8c:09:c5:17:97:ad:7b:03:fa:35:19:68:67:7a:
         85:44:8d:c0:7b:20:81:79:6f:9e:fb:60:33:48:70:15:50:c3:
         ea:ed:dc:1b:d7:10:6e:e8:44:79:e6:96:ca:eb:c4:78:58:96:
         89:63:3d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:45:55 2025 by rpki-client