Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
File:                     a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa (raw, json)
Hash identifier:          jPKbTrW1Xed1/gUJ/lATC7FvbxPnQMfaGHSq/iatvDA=
Subject key identifier:   18:2B:7E:75:5F:B5:B0:25:57:2D:E1:1F:F5:24:B0:C8:9F:47:83:7E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A295571CC1C849B8C41432D80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     6167
IP address blocks:        63.42.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:71:cc:1c:84:9b:8c:41:43:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=d3a4b561-86ff-4d82-8009-4bd204db8596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:d2:78:61:ef:fe:c0:80:9f:9c:1b:c6:84:
                    da:e6:1e:50:e3:c3:04:98:a0:18:1b:50:0b:f6:14:
                    6a:af:b0:40:f6:d7:63:f5:75:41:0b:85:14:6b:5d:
                    3d:26:37:35:ce:65:40:15:82:1b:5d:52:11:b7:ca:
                    9c:73:22:95:9d:40:cf:44:02:66:6c:59:a3:28:ba:
                    8b:e5:85:71:5a:e8:6a:7c:ba:cb:88:da:03:3d:1d:
                    1d:d9:df:c0:38:a3:a8:21:81:9b:99:ae:ef:34:bf:
                    09:7e:05:c9:ee:d5:7b:be:a4:e2:bb:a8:6b:4a:34:
                    54:26:45:03:09:45:60:c7:68:49:2f:c1:39:77:6f:
                    ea:09:eb:c7:c8:17:57:d4:50:4d:27:3b:d5:82:97:
                    ff:67:02:e3:5d:56:91:d7:75:a7:88:60:9d:55:85:
                    82:85:99:44:4b:bf:f7:a3:11:08:08:46:69:34:64:
                    a3:89:60:30:26:31:d4:c2:a3:92:bc:86:48:08:aa:
                    bd:79:36:63:7a:e7:af:33:94:78:4c:f9:c9:b9:8c:
                    c9:18:fb:3d:f1:97:3b:87:c0:26:82:e8:2f:82:af:
                    f4:67:f2:46:e2:f2:4c:66:d4:a5:8d:ea:15:9f:fe:
                    a2:f3:67:24:87:29:96:5a:69:86:25:83:1c:a8:88:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2B:7E:75:5F:B5:B0:25:57:2D:E1:1F:F5:24:B0:C8:9F:47:83:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a57f0c6f-e3ed-367d-9dc8-50ea1a1734e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.42.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:b8:af:5f:a5:eb:20:7c:53:33:d5:fb:aa:e8:8f:ee:00:
         a1:32:18:94:91:b4:87:ea:e9:42:9d:05:ff:05:e3:81:3b:69:
         f8:49:da:70:fb:e2:61:95:27:89:2e:18:f1:8f:2a:cf:7d:39:
         ef:60:04:58:58:8f:d6:93:0d:71:dc:fe:fe:f9:3f:fd:17:5c:
         a6:41:95:c0:9a:07:fe:2d:51:75:74:2a:3c:0d:52:b3:10:91:
         52:e9:e5:d2:ea:04:21:8e:96:d9:09:bc:9c:c9:37:92:ce:c0:
         44:3b:bc:47:88:69:62:e6:45:17:c5:d0:7c:dc:31:bb:6f:66:
         cf:55:d4:c4:31:b3:b5:16:85:00:a5:bc:a8:37:fc:f2:3a:0e:
         c4:05:2b:75:51:4e:b0:6a:43:77:a7:03:0b:75:15:7b:87:17:
         9b:b6:06:ad:5c:d7:f8:08:64:49:a5:1a:53:9c:34:3e:fe:08:
         e9:59:0c:e4:f2:b9:7f:de:da:86:3d:4c:43:4b:07:a3:2c:58:
         c3:91:c4:b5:36:90:2d:bc:70:e2:0b:78:a6:40:18:67:46:d4:
         a9:15:aa:90:4f:de:17:1b:e6:00:a3:45:07:b4:d9:9b:e8:9a:
         b9:a0:0f:9e:ce:1f:05:b3:48:4e:00:35:2e:1c:88:83:69:0a:
         22:bb:81:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:44:05 2025 by rpki-client