Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4ac0985a-1002-31a1-8bd3-7f4b2ec281aa.roa
File:                     4ac0985a-1002-31a1-8bd3-7f4b2ec281aa.roa (raw, json)
Hash identifier:          kRr11Qwn/7kc1OrLduw2mTKNmWZ74CVGnn+dBex4VzI=
Subject key identifier:   5B:AF:94:3D:2A:CD:92:1F:05:44:63:6C:1D:66:F1:79:92:85:1D:CA
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A146567BF72C6A13A68E0FA00
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4ac0985a-1002-31a1-8bd3-7f4b2ec281aa.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     57043
IP address blocks:        185.167.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:67:bf:72:c6:a1:3a:68:e0:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=cbf7446b-28f9-4206-acab-757d70f5e25e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:5a:23:2b:0d:ec:17:1c:67:e2:d8:d3:3c:
                    e3:f6:03:ff:60:ee:d1:a3:46:3f:f2:07:db:0a:5e:
                    f9:bd:b6:dc:29:41:5e:36:77:61:86:cf:b4:66:28:
                    43:db:ff:c4:5c:34:8a:72:bd:ad:01:29:e4:e6:a0:
                    9e:77:69:1b:cb:70:b5:46:21:0c:97:f1:80:56:03:
                    02:cf:5c:a1:67:d3:b6:1b:4f:4f:17:6b:99:36:09:
                    02:e1:42:ff:08:82:18:82:43:36:f2:f6:e7:91:02:
                    12:09:ff:bb:49:36:12:f7:8c:fc:c5:81:6c:5f:c9:
                    2c:6c:d4:ee:80:3f:b8:45:ab:61:0c:f2:d3:07:61:
                    2d:df:97:dc:34:02:61:7d:06:33:b1:cb:65:d6:71:
                    50:93:05:55:16:f4:7d:8c:69:f3:44:ec:91:03:33:
                    1a:ca:13:d8:f7:b2:fd:67:5c:1c:c2:db:5f:b0:df:
                    b7:a2:bf:52:61:14:e0:6b:af:94:33:8b:b7:29:4f:
                    0d:48:82:ec:1e:f9:45:bd:28:cb:43:81:5e:89:bd:
                    33:f4:9c:37:e2:c0:5d:6b:73:c7:87:dc:41:1b:69:
                    3e:ed:e7:12:bc:73:5c:4a:b8:83:9c:b3:80:55:ea:
                    e3:81:82:46:d2:a7:33:25:51:65:4d:26:5a:11:59:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AF:94:3D:2A:CD:92:1F:05:44:63:6C:1D:66:F1:79:92:85:1D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/4ac0985a-1002-31a1-8bd3-7f4b2ec281aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fd:88:63:cb:53:54:be:21:f8:94:fb:2b:e1:5f:bc:68:29:
         78:f4:a1:3c:b0:ac:d0:9a:4c:90:b0:6b:8d:43:28:63:9f:f1:
         ba:0a:eb:5e:51:1e:b1:79:1e:3d:7d:69:5c:38:cc:ad:b1:6c:
         c8:38:25:53:58:95:0e:74:18:af:ad:f4:ee:e4:b4:9b:2e:61:
         59:e1:61:b1:97:f6:03:e9:f8:71:9b:c6:3c:b9:ab:a4:2d:14:
         6e:bb:3d:70:2e:ee:8e:02:5e:ef:df:88:79:07:74:38:04:89:
         cc:72:0d:dc:6d:7a:70:62:7a:ea:f3:65:4c:14:a0:56:68:bb:
         73:f5:30:4d:13:6e:36:7d:be:53:0a:ae:0d:3c:37:83:bc:57:
         53:8b:03:05:ef:1c:53:ec:19:13:26:95:96:bc:00:e2:7d:32:
         a8:03:53:0f:0f:46:ce:f3:18:7b:78:c4:05:bb:bc:a1:fd:bf:
         59:ed:10:da:84:bb:d6:80:56:64:75:82:cd:4c:32:45:52:76:
         99:ed:12:53:76:6c:4c:36:9e:15:6a:63:29:90:b2:55:fa:3b:
         f7:d3:4c:55:a7:76:dd:34:6b:14:90:69:0f:97:2c:db:48:05:
         4f:dd:a0:e5:c6:91:a4:06:67:3d:5c:7b:52:50:7c:98:f6:f9:
         b1:9a:19:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:39:01 2025 by rpki-client