Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31290f93-009f-36dc-a2a1-85951d448edc.roa
File:                     31290f93-009f-36dc-a2a1-85951d448edc.roa (raw, json)
Hash identifier:          8+7a7c7N0CFuqO8noouhMuu3oNnkn43rZvbMMwPV4+w=
Subject key identifier:   9E:76:DA:1E:1A:B2:6B:F7:59:DF:E7:31:AA:50:E9:52:E9:34:CD:52
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849EB4ACC1062F2F3E807A0BAC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31290f93-009f-36dc-a2a1-85951d448edc.roa
Signing time:             Tue 20 May 2025 19:39:30 +0000
ROA not before:           Tue 20 May 2025 19:39:30 +0000
ROA not after:            Mon 18 Aug 2025 19:39:30 +0000
asID:                     0
IP address blocks:        63.113.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:4a:cc:10:62:f2:f3:e8:07:a0:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 20 19:39:30 2025 GMT
            Not After : Aug 18 19:39:30 2025 GMT
        Subject: CN=3592d81d-ff71-48fe-8465-b7c4fc6faeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a0:7c:1c:78:06:a8:2f:ce:f9:f5:1e:59:34:
                    12:00:46:13:c6:f5:cf:3c:96:92:36:83:6b:c5:07:
                    d1:f1:03:cd:cf:ad:e8:86:b8:61:62:d5:2c:f3:d9:
                    d9:73:99:cc:af:ef:e3:e1:98:d1:b5:36:94:9f:24:
                    9a:77:2f:84:19:22:09:7c:da:cb:7a:6a:e2:93:5e:
                    0a:30:90:61:54:ee:49:56:23:72:49:e8:c4:0e:8d:
                    6a:5d:a7:72:49:92:e0:3f:23:f1:f3:a9:a3:13:e8:
                    ea:8f:d4:69:8e:dc:6f:7a:30:eb:63:a8:18:2b:59:
                    23:a6:1f:a0:60:33:32:d5:83:78:08:4d:cb:44:1b:
                    21:3c:d1:e6:b0:39:74:69:ae:a7:5c:83:45:ff:8b:
                    c0:05:11:01:14:ba:70:e2:9c:89:73:45:07:ef:29:
                    84:23:14:6c:d2:65:bd:bf:9b:cd:c4:91:56:c2:72:
                    72:32:8b:21:d4:a7:bd:29:00:81:d8:1c:45:ce:20:
                    be:f5:98:4a:82:91:c1:e5:41:63:dc:44:1a:89:dc:
                    01:b5:65:c8:be:9e:5d:07:15:a6:47:22:cc:30:ab:
                    5e:8a:a7:ae:12:8b:7c:9c:c0:eb:bc:9f:47:77:e4:
                    fd:ad:29:ef:51:d2:79:d9:86:0a:26:8a:6a:2c:25:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:DA:1E:1A:B2:6B:F7:59:DF:E7:31:AA:50:E9:52:E9:34:CD:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/31290f93-009f-36dc-a2a1-85951d448edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.113.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:bf:c1:1b:cd:56:6e:c3:de:91:42:d7:a7:f8:cc:d3:34:ab:
         4e:ad:d0:6d:c9:c3:c8:9c:b3:b4:7b:6a:2c:fa:5c:cf:c6:b7:
         3f:9d:30:4c:25:22:f7:67:66:d9:50:6e:ad:e3:d2:21:e0:c4:
         2d:61:55:1a:e2:e2:1f:a2:39:2a:ac:52:fa:c5:30:4c:f5:45:
         1d:46:eb:89:12:5a:47:40:e8:a4:62:da:38:f7:4a:03:ca:4d:
         ee:61:b1:92:a3:53:1b:0a:77:0e:58:61:e8:02:0c:50:88:51:
         9f:8a:48:2b:cf:f7:3a:3d:ea:34:cd:4d:9e:b4:9c:f5:22:9b:
         3b:e0:71:96:17:f4:ff:e8:e4:06:ba:87:77:35:70:81:6b:8f:
         59:aa:ee:a2:6f:48:17:b5:92:c1:92:e8:5f:5c:97:87:db:5b:
         17:37:73:9e:37:90:47:28:aa:7d:6f:f4:5f:f1:18:69:09:bf:
         41:f0:38:e2:f7:00:e5:44:11:06:f1:44:cd:06:b0:a3:53:c7:
         f7:a0:74:2a:46:36:82:7f:a0:05:8e:98:91:3d:6c:45:71:9d:
         25:7a:56:af:c7:d4:2a:f9:46:64:ba:ab:0a:e5:fa:e1:8d:1d:
         fc:c0:80:14:05:2f:77:da:e3:c3:71:52:67:d3:06:9e:7d:09:
         5e:d1:94:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:20 2025 by rpki-client