Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa
File:                     63d52020-fd63-3e4c-b974-456f989ef686.roa (raw, json)
Hash identifier:          g8LCcoPm5Xxbr75lguJa9X3lpFa/uwi+Q3SZKmuL9aM=
Subject key identifier:   61:DF:53:7A:E6:C8:0F:B6:DD:93:E0:C0:C6:3A:46:DF:CE:32:58:1A
Certificate issuer:       /CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
Certificate serial:       010D0C9F4328584988CF287F503B533AD66DB8E0
Authority key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     40321
IP address blocks:        206.53.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:28:7f:50:3b:53:3a:d6:6d:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=5db55872-9d78-4887-8830-7a8f571740b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:b1:fc:b3:89:b4:6f:cb:80:95:39:10:19:
                    e6:28:33:9c:8c:5f:ac:bf:65:e0:fc:8a:58:26:fd:
                    c2:6f:5d:f1:a2:89:f0:95:98:90:71:47:96:44:2c:
                    e8:6c:44:e2:ba:df:fd:ed:3c:db:14:79:a5:a8:e2:
                    55:d9:4a:1b:be:f3:72:21:cf:7f:c8:62:8b:ec:b3:
                    14:9b:2a:d6:7f:da:da:91:65:b8:5d:5a:20:83:50:
                    ab:d4:7f:d4:c6:4a:e6:3b:bb:b4:a8:29:86:30:36:
                    91:8e:bb:b1:e8:81:7e:68:97:21:96:41:69:b1:73:
                    55:19:f1:20:89:d3:9b:14:81:cd:e9:39:90:ea:a4:
                    62:d1:b3:8a:cd:9a:12:22:7b:a7:7e:7c:bc:a8:8c:
                    23:35:71:16:b3:74:72:af:55:dc:2a:5d:fa:03:59:
                    1a:7a:20:62:5b:0e:5e:36:89:d0:2f:fe:36:4a:82:
                    4b:f8:a8:24:fa:28:76:4f:5d:6b:12:31:78:71:db:
                    1f:43:2a:4f:86:84:0c:a5:0e:4f:9d:b2:3e:e8:a5:
                    ba:aa:d7:97:f0:82:22:d6:92:aa:a1:ab:52:e6:e1:
                    2b:c4:c6:c9:bc:64:3e:58:69:01:88:67:09:6d:a8:
                    1c:18:99:27:7f:5c:60:c6:2e:57:e8:7c:b5:fc:16:
                    d1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:DF:53:7A:E6:C8:0F:B6:DD:93:E0:C0:C6:3A:46:DF:CE:32:58:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl

            X509v3 Authority Key Identifier:
                keyid:5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fe:9c:e5:55:c8:4d:37:b7:f3:ef:f2:92:40:8b:df:ec:e5:
         c8:55:d1:e4:6a:b8:35:ce:c9:0f:f2:da:6c:8a:cb:e5:9a:f3:
         54:20:d2:b1:ed:9b:64:eb:fd:1a:47:38:01:18:fb:32:bb:5f:
         3d:e8:2f:42:25:12:07:04:ad:b3:5c:6a:82:bc:30:42:74:a6:
         ce:41:db:25:eb:d0:f8:19:e9:e6:48:b5:a4:f1:60:73:a2:0d:
         f3:c0:17:4e:e5:95:5e:6a:6e:c4:37:f2:4e:20:27:f0:66:31:
         4b:b6:65:5f:73:49:12:2c:a4:87:2c:d5:66:46:3e:49:75:f4:
         71:f3:75:08:e9:94:6c:a2:ae:0e:ba:06:bd:91:11:86:ea:15:
         db:ec:a7:1c:9a:24:d4:d5:95:2c:b1:c0:55:2a:71:7b:03:36:
         50:cd:5e:10:92:58:09:75:c0:0c:1d:86:a8:8a:6d:60:02:33:
         04:1c:f5:56:0b:f6:2e:07:f2:18:f2:cf:e3:9c:d7:11:81:81:
         28:a4:a0:0a:29:c0:a9:00:e8:0f:95:58:be:c4:38:cd:d3:5e:
         c0:93:81:f5:96:d6:26:b1:14:b4:8a:af:6d:26:54:4f:3d:7a:
         f8:a9:be:d3:6d:88:47:89:cd:c0:18:b1:54:03:fa:7d:9d:8f:
         ce:70:8a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:44:02 2025 by rpki-client