Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e96714e5-ae5f-3384-a071-784e367cf09b.roa
File:                     e96714e5-ae5f-3384-a071-784e367cf09b.roa (raw, json)
Hash identifier:          hSH5e62IZgwEZ3l1txWNAn5MgJO2HZDvkZCcNDTcU/8=
Subject key identifier:   E4:63:2D:1B:5D:D6:CC:9B:C9:20:2D:76:64:3A:A0:F4:C8:BD:5C:CD
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898667AECA0E748DB5E18820
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e96714e5-ae5f-3384-a071-784e367cf09b.roa
Signing time:             Tue 15 Apr 2025 19:10:23 +0000
ROA not before:           Tue 15 Apr 2025 19:10:23 +0000
ROA not after:            Mon 14 Jul 2025 19:10:23 +0000
asID:                     6984
IP address blocks:        63.26.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:67:ae:ca:0e:74:8d:b5:e1:88:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:23 2025 GMT
            Not After : Jul 14 19:10:23 2025 GMT
        Subject: CN=1105cc52-7762-45b8-8d57-3b0ce33f26af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:89:12:11:d5:2c:3c:c5:c0:73:f5:32:cb:1e:
                    cd:0f:90:f6:10:0b:13:71:4b:a2:c5:0a:0d:52:aa:
                    7f:4a:a9:e0:93:f8:76:eb:84:49:2a:96:33:ec:56:
                    72:7f:e6:18:95:3c:fb:ed:17:4f:a2:fc:19:61:1c:
                    ef:cf:37:c1:f0:72:7b:f7:2c:f9:f7:85:4b:8c:57:
                    6b:70:48:e0:5f:90:2a:6d:25:4b:94:d3:d0:4d:0a:
                    ac:3e:42:b4:c9:a3:08:60:89:1c:72:30:5a:0a:92:
                    31:c2:95:0e:bb:5e:61:66:98:63:69:33:84:1d:b3:
                    73:2a:a5:fc:da:14:92:41:9f:6c:50:ae:95:2a:7a:
                    5b:24:15:3b:b3:6e:c8:3c:7a:34:68:6d:3d:78:55:
                    ec:99:96:b1:39:dd:d6:08:9e:8d:58:0d:9a:e7:2f:
                    34:3b:fe:c6:69:6b:da:94:6f:99:b0:a4:8e:94:6c:
                    26:b6:72:2a:eb:ef:e8:90:aa:7c:af:2e:5a:87:95:
                    08:aa:4d:cb:51:0c:da:58:c8:68:31:de:67:82:d7:
                    f9:c1:02:5e:4e:34:76:8b:1b:68:b9:49:d0:0e:21:
                    1a:b3:91:24:da:f0:9f:1a:09:3e:0b:b8:58:7b:6a:
                    4e:52:c0:a5:89:8b:c1:37:73:cf:55:fb:4f:e7:d2:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:63:2D:1B:5D:D6:CC:9B:C9:20:2D:76:64:3A:A0:F4:C8:BD:5C:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e96714e5-ae5f-3384-a071-784e367cf09b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.26.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:c9:d2:4b:19:71:f8:c3:f6:3a:21:98:92:97:27:5c:d9:
         03:fe:eb:fe:79:36:fe:50:4c:34:1c:50:e9:a6:49:1b:08:b7:
         7d:2c:63:1f:2a:b2:0e:84:ba:d8:a1:6b:25:3d:0d:c8:35:c7:
         6e:eb:7f:c2:45:72:1c:05:a9:54:d4:a5:77:c6:15:56:f7:47:
         a6:39:1a:5a:a2:f5:91:c7:49:aa:bf:78:12:0c:94:e2:6b:20:
         eb:67:df:6d:a1:2e:1d:7a:25:1a:5f:a3:96:50:6b:61:b6:49:
         d4:f9:30:a9:88:f0:d4:28:c1:6e:85:04:dd:4f:4a:75:38:a6:
         ea:ed:5b:26:7f:8e:9d:78:5b:59:f0:46:25:bd:ea:65:48:13:
         2b:2a:25:86:b6:fb:f1:fa:09:db:90:a9:61:4d:a2:be:cf:69:
         45:d3:f7:7a:04:07:fc:e2:34:e5:95:2f:65:0d:95:36:d8:d6:
         c1:3b:d4:1f:3e:11:e1:a2:ce:f5:98:c8:a1:a0:94:1c:27:20:
         5e:54:85:df:4b:c8:28:89:e3:3d:3a:90:26:cf:3a:c7:0d:16:
         d2:d8:39:a0:07:e1:62:aa:ff:c8:b9:17:ff:da:12:8d:bc:ee:
         8a:48:c3:2f:36:16:50:19:f7:fb:cd:c7:9c:5e:6f:be:d7:27:
         c9:5a:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:02:31 2025 by rpki-client