Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa
File:                     68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa (raw, json)
Hash identifier:          3nikHozKJo+YKCmY6jLrHzLqaFTWzh5un0mjsWGr/pQ=
Subject key identifier:   4A:5B:4E:9C:B4:0D:4F:57:69:6B:3F:D8:81:76:AE:1B:23:A4:5E:C8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858498986678B07726FBEF8B41B00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa
Signing time:             Tue 15 Apr 2025 19:10:23 +0000
ROA not before:           Tue 15 Apr 2025 19:10:23 +0000
ROA not after:            Mon 14 Jul 2025 19:10:23 +0000
asID:                     6984
IP address blocks:        63.26.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:67:8b:07:72:6f:be:f8:b4:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:23 2025 GMT
            Not After : Jul 14 19:10:23 2025 GMT
        Subject: CN=f90e7ff1-cc0b-48e4-b06b-834e3bf30539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:08:d8:59:d0:cb:ed:ac:38:d7:0c:f1:67:f4:
                    a7:de:71:d4:b3:7a:ec:e0:11:5b:fc:15:83:20:96:
                    5a:e1:71:e2:e7:ad:1d:13:e6:32:79:b7:a7:71:32:
                    04:d0:23:a5:59:0e:10:19:26:b9:65:bd:ba:07:1a:
                    4a:2b:04:d2:cb:23:ba:d5:39:ee:39:01:7c:b2:3e:
                    04:7a:e3:2c:e3:62:66:18:18:bc:20:9f:69:85:55:
                    21:5b:00:60:86:e2:77:7e:22:73:2e:9f:43:b6:09:
                    09:b4:81:04:be:1e:d9:1a:46:e4:5b:93:cc:43:f6:
                    f2:b7:7b:f8:1d:08:93:76:52:6c:98:f3:89:1f:fd:
                    55:52:d5:d5:49:90:a0:c6:51:84:5d:fa:70:a9:11:
                    26:2b:97:65:d4:32:67:8d:14:79:e9:3b:14:f7:fb:
                    10:5b:31:59:f2:2b:d1:0c:bf:a8:b1:05:ab:16:8e:
                    3b:42:d2:bc:82:53:22:7b:54:1a:cd:8d:e6:c3:86:
                    87:b3:cd:35:bc:af:2d:e6:25:cb:48:0b:9a:09:22:
                    de:67:a9:f6:97:e8:f5:ae:18:34:05:00:54:a8:ff:
                    7a:ff:7f:0b:2c:12:59:81:9d:c3:43:26:29:e1:9f:
                    3c:18:25:3a:cc:e6:31:1e:27:65:4b:78:a7:27:d2:
                    4e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5B:4E:9C:B4:0D:4F:57:69:6B:3F:D8:81:76:AE:1B:23:A4:5E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/68c1d0bd-7d40-3c2f-a8b9-d8552c5a94ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:a7:74:b9:58:ca:34:72:32:73:ae:05:2c:e0:68:1b:18:
         fa:70:83:07:e1:57:9d:8e:ce:1e:84:d3:a9:be:87:3e:e1:d6:
         85:25:9e:d7:0a:29:c9:92:f5:e8:d6:f1:ce:85:e2:16:66:b6:
         25:82:3d:5d:16:fb:fb:ed:49:88:f1:8a:2c:7e:98:04:8f:57:
         af:37:ba:9d:27:c3:4d:78:0f:b0:e5:c6:2d:3c:cd:78:12:ff:
         ae:a5:25:1e:79:16:bc:f4:48:36:67:4f:0c:ff:21:35:cc:3e:
         6c:f5:c9:39:84:7f:2a:01:68:4c:3d:4d:63:4a:eb:af:c0:92:
         cc:0b:a9:bd:d0:0c:be:7c:8c:9f:5b:53:3e:70:a7:8c:e5:b4:
         52:d4:87:7c:49:5a:dc:d1:f7:c9:df:7a:62:1b:a6:85:ab:7c:
         02:9f:68:4b:cf:c4:a9:d4:a5:67:45:47:c1:a3:1b:fc:0e:e0:
         41:8b:9c:61:5a:66:58:6d:c5:bf:38:f7:e1:2b:a5:77:70:f0:
         a8:8c:11:71:e4:de:57:75:42:30:a6:c7:fa:dc:a0:1c:23:97:
         cf:87:c1:8c:27:d2:90:3f:df:64:dd:b6:c1:ea:67:82:e7:22:
         95:bb:d6:4b:9e:6a:e5:78:1c:35:bb:02:8e:ef:81:91:51:8d:
         fa:b1:38:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:50:06 2025 by rpki-client