Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bf0e20c-e6b2-3c8c-89a4-ef78525bccfc.roa
File:                     2bf0e20c-e6b2-3c8c-89a4-ef78525bccfc.roa (raw, json)
Hash identifier:          E4zo9ujqLGHgTOGqjrolVnyCqsRUUxmWYh6K5Vdn9Ww=
Subject key identifier:   4A:0D:AA:06:D0:66:C0:17:90:B5:0F:33:2C:DA:61:E1:8E:74:91:81
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498986665C8C3F3207CE62B100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bf0e20c-e6b2-3c8c-89a4-ef78525bccfc.roa
Signing time:             Tue 15 Apr 2025 19:10:22 +0000
ROA not before:           Tue 15 Apr 2025 19:10:22 +0000
ROA not after:            Mon 14 Jul 2025 19:10:22 +0000
asID:                     6984
IP address blocks:        63.26.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:66:5c:8c:3f:32:07:ce:62:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:22 2025 GMT
            Not After : Jul 14 19:10:22 2025 GMT
        Subject: CN=1a08c258-e646-4386-af08-66705d6a9f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2c:a5:e2:a6:31:7b:ac:d2:b8:30:d1:aa:60:
                    b7:b0:9b:79:25:0a:0d:dc:44:e3:7a:1e:5d:20:e5:
                    73:4f:c7:34:63:21:aa:a1:ba:c2:cc:a0:1e:93:51:
                    3f:0c:f4:6e:e6:0b:69:d6:b3:19:e9:d1:ac:90:8a:
                    d3:ed:2d:08:3a:b0:64:92:0f:30:a5:8f:a4:f8:d5:
                    b8:0b:f7:27:1d:a5:94:ce:be:53:b1:96:10:0a:91:
                    8e:fd:fa:5f:0d:70:a7:2e:16:c5:d7:0f:9f:39:23:
                    56:59:89:e3:e5:32:d4:35:97:6a:4c:7d:99:70:30:
                    02:bc:37:d2:2b:14:b5:b7:3d:06:68:d9:fe:3f:0d:
                    b5:c7:5c:e7:a4:e5:e0:ae:c2:f0:e6:d0:11:ce:96:
                    93:ac:3d:b1:a3:d6:02:5b:d2:45:72:06:2a:4b:ae:
                    5e:b7:16:50:0c:5d:39:ca:69:95:93:61:ad:fe:52:
                    0d:71:25:e0:c9:99:51:99:da:80:8d:e0:70:3c:85:
                    2e:e2:75:ed:a5:4e:13:ef:c9:c2:15:02:a2:07:05:
                    9e:45:07:f2:24:36:f8:9e:d8:93:b7:f3:20:8f:bc:
                    d5:7e:8c:50:5f:56:0c:1b:a3:60:8c:1a:83:ac:37:
                    c5:d9:30:41:79:59:8c:22:61:f7:dd:33:7f:60:bd:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0D:AA:06:D0:66:C0:17:90:B5:0F:33:2C:DA:61:E1:8E:74:91:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2bf0e20c-e6b2-3c8c-89a4-ef78525bccfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:6a:bf:00:b9:16:3e:b4:2b:2f:12:70:65:a8:67:db:16:
         b5:a1:a3:51:29:83:f7:0b:09:6e:f5:19:84:69:99:ac:37:62:
         21:31:9d:8d:74:e2:96:23:9f:a0:6e:e0:f0:aa:a2:f9:ef:31:
         6d:28:43:5a:a7:2f:98:cc:b7:59:8b:a5:c8:3a:83:bb:d6:15:
         23:21:da:92:30:3c:d8:45:56:99:4c:50:54:2e:33:97:a0:fb:
         c3:c7:5d:c2:78:a4:63:4e:21:d8:0b:d4:e5:4b:29:2d:0a:42:
         56:98:fb:dd:1e:04:a1:44:1e:56:ca:60:d2:08:9a:13:3d:12:
         67:13:df:c4:79:89:9d:6c:a1:c1:f4:37:6a:be:9a:00:4f:17:
         52:cf:2f:50:16:48:4d:6d:a4:53:9f:35:f2:62:43:e0:d2:6e:
         7b:04:00:24:c8:3d:ea:65:77:e8:c3:f5:48:e5:bf:1c:03:d5:
         7a:21:a3:bf:31:a4:e8:7d:76:dc:6f:a8:ad:f2:02:79:bc:b0:
         a2:96:14:5d:be:56:fd:46:72:8a:cb:70:60:d5:03:4c:74:2e:
         81:70:75:ef:dd:45:e3:98:61:94:a9:c1:36:f4:1c:15:e5:e4:
         df:3c:11:48:6f:14:dd:e2:5c:8c:5d:a8:89:df:77:43:c0:19:
         53:66:1a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:33:44 2025 by rpki-client