Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa
File:                     e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa (raw, json)
Hash identifier:          Fnr3PHwc41XW+FWVFbvSGqrquCfwZd31NKyk2nJKgy0=
Subject key identifier:   29:0E:D4:6D:55:AF:BC:A2:50:81:CD:8E:99:7F:E9:BB:6B:DA:2B:1E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858499F249F4A13DA4FADBC149180
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     198148
IP address blocks:        63.222.52.0/24 maxlen: 24
                          63.223.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:9f:4a:13:da:4f:ad:bc:14:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=27a61197-bc4d-4824-a251-e192a6d6996b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:90:02:69:55:c5:85:1e:d6:d7:41:fa:1b:
                    c7:ea:48:0c:06:28:e2:bc:c7:da:f4:fb:5d:73:52:
                    f0:b3:05:68:0b:dd:c8:9f:1e:67:80:41:d2:79:c3:
                    ee:b9:e0:65:4f:86:8e:2a:d4:43:73:77:51:7c:48:
                    24:09:3a:28:5f:87:05:1c:5b:b5:0b:3c:f4:06:57:
                    18:72:12:a6:1d:c8:40:b0:72:75:05:03:0c:04:40:
                    ff:77:5e:dd:22:d7:94:28:34:18:17:ee:42:07:7f:
                    05:7d:83:58:c9:0a:44:4c:60:cd:a3:fa:a1:3a:27:
                    84:fc:24:94:2d:1b:43:eb:3b:67:e9:5b:58:75:fe:
                    08:04:40:68:b7:91:53:ad:1b:41:ff:7b:de:a9:7c:
                    73:d6:74:06:2d:ca:13:a6:56:4d:53:35:16:7a:a6:
                    2d:64:64:93:70:e4:10:88:a0:34:33:d2:6a:d7:73:
                    e4:1f:19:44:9e:77:cb:1a:cd:87:01:2e:13:dc:55:
                    21:09:b4:98:61:10:0c:ee:f6:07:a0:39:8e:19:68:
                    48:b4:36:20:d2:41:ec:38:29:50:d2:f2:45:96:c6:
                    33:ff:4a:d7:b5:b8:a4:50:46:1b:19:2a:2f:df:a2:
                    ea:d0:fd:e2:0f:51:07:03:45:28:51:8d:ff:bd:78:
                    a9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0E:D4:6D:55:AF:BC:A2:50:81:CD:8E:99:7F:E9:BB:6B:DA:2B:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e227aa20-6b31-36ce-8b1c-80b1a30dba5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.52.0/24
                  63.223.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:7d:8c:2a:31:0a:ce:00:b4:89:76:9d:fa:be:d8:ef:3e:e6:
         a2:d5:dd:27:3f:68:25:eb:c9:c1:03:bc:b0:23:08:ca:a7:68:
         a8:02:11:e2:0b:d8:49:41:a0:18:a3:12:57:cf:b7:a3:2a:b1:
         85:66:db:7e:4d:cb:6e:e7:44:f1:93:86:aa:4e:d7:34:ed:34:
         69:a4:c8:42:da:8c:e0:30:a8:03:13:2e:b4:4d:f7:14:e8:90:
         80:0e:1c:e7:a9:fe:1d:d1:58:66:7e:8e:46:e3:54:c1:0e:e2:
         89:ed:61:64:4a:d0:da:4f:de:dc:1c:41:85:4b:bb:a3:44:ab:
         16:49:55:67:e7:a5:5b:13:2e:be:f5:7b:fa:a1:da:9b:56:8b:
         80:d4:e7:5d:70:ca:78:18:89:f4:84:b4:70:3d:51:28:b8:5a:
         3a:16:45:85:bb:56:de:2c:3a:49:90:36:a4:ba:d7:c1:f5:90:
         19:4a:8f:6f:99:64:cb:ed:09:96:33:cb:06:8b:64:da:c6:08:
         d0:0a:51:e6:d3:2b:35:40:70:1e:eb:22:fb:1e:f7:ef:36:a0:
         74:31:d9:2b:bf:c7:fa:59:15:72:50:d0:be:cf:fc:2c:91:92:
         c6:df:a1:5c:bd:60:55:46:d6:32:e5:94:0c:99:b7:62:20:56:
         4d:1f:c6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:48 2025 by rpki-client