Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa
File:                     bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa (raw, json)
Hash identifier:          BFj1H5ha/L8/X/rIGuiUR7B4G6n3rSR8E4fk1AeS+KY=
Subject key identifier:   F5:1B:04:82:57:F3:82:3A:6D:EC:AA:B3:05:66:F5:57:00:21:0A:3F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898666F226D7D380F011B080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa
Signing time:             Tue 15 Apr 2025 19:10:22 +0000
ROA not before:           Tue 15 Apr 2025 19:10:22 +0000
ROA not after:            Mon 14 Jul 2025 19:10:22 +0000
asID:                     6984
IP address blocks:        63.26.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:66:f2:26:d7:d3:80:f0:11:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:22 2025 GMT
            Not After : Jul 14 19:10:22 2025 GMT
        Subject: CN=82b5d4b9-862a-4381-8b46-766a80331e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:91:e5:99:3b:77:c4:b6:87:f5:52:6e:08:e0:
                    bd:48:a8:5f:7c:f0:4c:74:f6:bc:4a:71:5b:a5:af:
                    4e:8b:84:ed:12:13:61:52:69:b7:63:86:74:00:84:
                    cf:f6:0a:ab:07:9e:62:a9:36:51:71:a8:b0:38:44:
                    fb:82:95:78:4f:05:bc:0e:74:75:63:b7:0e:ad:44:
                    53:b5:13:aa:db:dd:0a:c8:2d:7d:92:2d:e9:7b:17:
                    7e:43:36:98:fd:35:c5:6d:95:28:b4:7d:17:12:da:
                    17:98:c1:96:95:de:99:73:a8:03:0d:c0:fe:fe:ec:
                    4e:81:0c:67:24:5c:13:9f:76:66:4c:2d:a3:ab:97:
                    56:b9:d5:88:96:bc:94:69:12:23:48:01:1e:fe:c0:
                    f6:86:ba:bf:11:ef:7d:1a:2e:21:2f:6c:6e:cc:15:
                    c8:a1:06:ac:b9:5f:0d:88:80:65:48:50:87:2f:6a:
                    97:46:21:e0:dc:0e:f1:d1:38:55:59:85:e2:f8:97:
                    df:cb:b8:4a:c1:d2:f7:16:e6:ae:3d:9b:7e:b7:a8:
                    e3:17:7f:ac:ce:1c:f0:04:4a:60:36:74:92:c0:06:
                    35:90:d1:94:8f:a9:c9:be:c1:ce:91:e9:6c:7f:01:
                    ad:1b:5b:38:b6:f3:0a:86:d2:48:14:6b:94:39:c4:
                    56:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:04:82:57:F3:82:3A:6D:EC:AA:B3:05:66:F5:57:00:21:0A:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bbb2d313-c2c1-3945-9b5b-e9a2993cfe0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:0a:36:f4:a7:2b:62:ca:e9:f5:fd:73:76:ec:5d:58:d3:55:
         23:16:83:05:75:f0:1f:29:0e:f3:13:0e:5a:68:9f:e9:13:fb:
         af:51:0b:a9:6e:60:8b:c6:37:90:ee:0d:b4:59:8d:0a:9c:ab:
         a0:b5:71:b9:a7:b6:29:35:ce:8e:5e:e4:df:28:85:7b:31:9c:
         2d:67:18:e7:37:65:10:28:f2:ad:a6:3e:da:ee:86:5a:d0:3d:
         49:cb:37:b7:1a:9b:a8:13:04:b9:8c:7d:16:16:de:13:db:b9:
         07:14:4f:86:0d:a6:96:00:dc:f2:85:9d:ea:6b:07:2c:20:cf:
         eb:cc:79:bc:0c:a2:3e:5c:6f:17:7d:cf:93:e4:f6:8c:28:1b:
         aa:89:a0:2e:2d:d9:bc:cb:33:1e:fa:aa:26:a7:2f:4f:2a:a8:
         18:26:cd:c8:c2:1b:f0:0d:f1:a0:20:52:33:22:5c:4a:8d:90:
         cf:8f:ca:46:d9:f9:26:1b:c2:cb:f8:64:62:30:18:e6:60:51:
         50:79:e9:b6:66:59:31:d6:48:18:4e:60:fd:ee:94:c3:d7:21:
         1f:b9:19:09:47:32:e1:25:a9:c8:da:46:56:b3:50:c0:87:6d:
         b0:21:43:77:f1:51:07:26:fe:23:33:e6:38:a9:a3:eb:4a:67:
         c0:b2:d5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:28:07 2025 by rpki-client