Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c40e1adc-abc6-3c8a-91e9-4c7b6b2aba5b.roa
File:                     c40e1adc-abc6-3c8a-91e9-4c7b6b2aba5b.roa (raw, json)
Hash identifier:          lL4vQXCjRSQxi4d8dUmq87LQuE4yp/alj48BLc/rxQ4=
Subject key identifier:   1A:A2:FC:C7:7F:F4:38:32:EA:3B:E2:D5:FE:3B:99:D6:2F:23:9B:03
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898666A758517F69004AAB40
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c40e1adc-abc6-3c8a-91e9-4c7b6b2aba5b.roa
Signing time:             Tue 15 Apr 2025 19:10:22 +0000
ROA not before:           Tue 15 Apr 2025 19:10:22 +0000
ROA not after:            Mon 14 Jul 2025 19:10:22 +0000
asID:                     6984
IP address blocks:        63.26.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:66:a7:58:51:7f:69:00:4a:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:22 2025 GMT
            Not After : Jul 14 19:10:22 2025 GMT
        Subject: CN=31d4899e-db63-4053-8f98-ceee82529c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6d:b7:2e:19:fc:82:53:37:ff:db:08:d3:2b:
                    21:ad:1c:fe:64:5f:ea:a2:5e:e3:b7:ca:0a:f5:93:
                    d0:c2:c3:2b:00:a0:3b:97:4a:c7:72:50:0b:99:2a:
                    63:ef:86:4d:89:63:c5:d5:53:b6:a2:56:2b:6d:0b:
                    d6:e1:f7:dd:51:b5:e7:a0:50:51:5b:57:b8:b0:6a:
                    52:c5:e6:b8:a5:0c:09:be:01:73:00:7d:d6:63:00:
                    94:df:02:b4:63:e4:9f:a2:f0:72:1d:2a:ab:2c:1e:
                    fc:e7:b4:24:30:aa:10:57:3c:8b:ec:8d:23:a7:df:
                    79:9f:f1:dd:65:60:58:83:16:64:3c:7b:3a:97:34:
                    70:fb:15:1e:0b:fa:40:fb:aa:01:b8:a9:de:a3:dc:
                    04:b3:43:11:9d:f8:3e:2d:3e:ff:ed:c7:d3:d3:f5:
                    d7:d1:be:83:95:fa:0c:27:a0:c9:d6:53:73:ad:4c:
                    36:b7:ac:2a:8a:f1:6f:8a:c9:22:77:06:9d:bd:0c:
                    1f:ae:fd:5d:c3:48:ed:1f:52:25:01:bf:22:35:6d:
                    d6:c9:cd:20:82:b0:12:f6:0c:06:46:ef:90:b3:d0:
                    1a:96:29:3e:a4:e5:07:2d:66:2d:50:b5:14:de:00:
                    97:c1:1b:91:d0:b5:51:31:79:fe:69:ca:1d:3d:e6:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A2:FC:C7:7F:F4:38:32:EA:3B:E2:D5:FE:3B:99:D6:2F:23:9B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c40e1adc-abc6-3c8a-91e9-4c7b6b2aba5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:29:90:c4:e0:a4:7f:af:d0:ea:1c:60:30:0b:5b:f2:d2:
         96:b6:4a:74:89:7d:63:6e:1a:87:33:ba:73:11:ed:e7:e9:9b:
         8b:1d:e2:b8:15:bf:bc:54:59:7f:70:6e:95:e8:1f:c9:28:b2:
         f0:fe:b1:8e:82:b3:92:4e:7d:df:e7:cc:9e:51:69:c4:5d:51:
         ce:93:ac:31:2d:ec:e7:ba:1a:34:4b:13:dc:9a:73:a2:bb:c3:
         d2:97:84:75:eb:de:bb:79:14:9f:60:1e:2a:36:06:30:95:c9:
         94:23:72:86:66:ed:c4:af:59:86:26:2d:6b:0c:cd:83:79:28:
         e1:cb:5a:79:c1:cf:25:9c:03:79:14:f1:8e:21:58:e9:77:57:
         7a:e1:1b:98:63:23:87:db:7c:c6:31:be:39:58:f5:18:a5:8e:
         2e:8b:95:3d:47:5b:2b:83:1c:ee:db:7d:0f:a4:06:76:22:26:
         2e:74:be:82:d7:7e:0e:3f:36:5a:bc:c4:70:ff:a6:93:38:50:
         e3:ad:58:d8:1a:be:4a:9e:53:05:6b:8f:f7:e3:5a:c1:2a:77:
         82:cb:b9:53:7d:45:3c:b5:28:fa:8f:df:9c:7c:80:65:81:a2:
         fa:5d:5c:06:ce:5e:7b:d7:99:22:db:51:3a:ce:0e:c0:d5:cd:
         26:cd:24:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:01:31 2025 by rpki-client