Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/bfb67940-142e-3fb7-b06c-705b9e08af9c.roa
File:                     bfb67940-142e-3fb7-b06c-705b9e08af9c.roa (raw, json)
Hash identifier:          H+xZNdjjXgSnFk7jFSU+yJtfS6fSMEJHW8AnqgnvSNQ=
Subject key identifier:   B3:47:FF:DF:CD:24:C6:76:F9:5D:B1:AA:1E:4E:F4:28:04:02:02:AF
Certificate issuer:       /CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b
Certificate serial:       010D0C9F432858496794401A8F40331C3467E080
Authority key identifier: 57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/bfb67940-142e-3fb7-b06c-705b9e08af9c.roa
Signing time:             Thu 03 Apr 2025 15:20:47 +0000
ROA not before:           Thu 03 Apr 2025 15:20:47 +0000
ROA not after:            Wed 02 Jul 2025 15:20:47 +0000
asID:                     16509
IP address blocks:        67.63.51.0/24 maxlen: 24
                          67.63.52.0/24 maxlen: 24
                          67.63.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:94:40:1a:8f:40:33:1c:34:67:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a065aa58-4e69-4e7f-adf7-21c2344ef72b
        Validity
            Not Before: Apr  3 15:20:47 2025 GMT
            Not After : Jul  2 15:20:47 2025 GMT
        Subject: CN=146e8454-8dbd-4380-af4b-11a2af8c3777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:d7:81:a4:48:0e:0a:d3:0e:e3:e3:c2:48:
                    99:8c:98:4d:0a:a5:1b:2a:47:d9:a4:0b:17:ae:3b:
                    3e:2a:fd:1b:55:9e:5b:09:bb:e1:ee:31:77:87:9d:
                    b1:69:be:b9:81:e0:c8:a9:33:8d:42:f9:52:68:35:
                    a3:d9:c9:c3:98:c8:c8:96:a4:e9:86:cd:1e:9f:1f:
                    43:8b:ca:3e:ea:6a:f5:eb:4b:de:16:b8:f3:75:6a:
                    b1:6e:fe:cc:2a:fd:27:20:6d:c5:01:5d:f7:b8:57:
                    3d:d2:e2:e8:1c:aa:46:f2:8a:be:0c:e6:01:11:22:
                    63:c0:4c:b4:23:0e:9c:20:e2:7b:ba:5b:e3:4e:38:
                    38:32:32:f0:5d:67:c0:ed:81:be:79:60:21:ef:89:
                    30:3b:94:58:7a:dd:56:1e:1b:ec:22:04:2e:4a:e2:
                    88:24:6b:e7:30:84:8c:75:ca:a3:f8:bb:f4:73:fa:
                    40:2b:3c:41:31:59:60:15:3e:69:59:8a:77:93:c1:
                    5f:d5:9e:d3:62:1b:5e:07:b6:2b:f3:39:d2:e9:3b:
                    8d:04:cb:28:47:d6:0a:d2:81:b7:3c:ad:3c:de:c0:
                    d2:1f:0a:43:58:b6:0e:5b:eb:c5:6d:5f:29:fe:e0:
                    a9:f3:0c:76:86:a7:f2:8d:88:0b:c4:7d:a7:73:6b:
                    48:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:FF:DF:CD:24:C6:76:F9:5D:B1:AA:1E:4E:F4:28:04:02:02:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/bfb67940-142e-3fb7-b06c-705b9e08af9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b/a065aa58-4e69-4e7f-adf7-21c2344ef72b.crl

            X509v3 Authority Key Identifier:
                keyid:57:4A:CB:10:E9:33:80:40:0A:66:20:91:1C:0A:7B:25:B5:F4:82:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a065aa58-4e69-4e7f-adf7-21c2344ef72b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.63.51.0-67.63.53.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:95:a5:5a:27:3e:96:5c:19:79:73:f7:e0:d1:ce:1c:e7:07:
         e0:f9:a9:81:bd:ea:f9:75:7d:8c:af:31:67:cf:4a:3f:95:e5:
         0b:23:89:20:36:04:1e:b7:16:ae:d6:93:47:f7:90:8d:b7:87:
         f5:c3:50:cb:e6:a6:0e:81:49:4d:1b:ca:90:ef:26:57:27:67:
         09:1e:1f:ae:1b:8f:dd:fa:83:24:4c:52:78:58:39:64:8c:66:
         f6:5e:16:1c:a3:5b:4a:db:19:e6:c3:35:39:f4:6f:2c:32:83:
         64:37:d0:5e:e6:c0:97:2b:a5:02:d6:cc:86:43:3b:fd:d9:e9:
         d6:ad:ab:b7:20:b5:e6:93:29:c0:b0:fb:05:63:12:ca:d5:16:
         4e:d8:c7:4f:21:2b:c7:b7:bd:67:64:1c:cb:57:00:4a:e2:a4:
         7c:ff:f8:38:c6:55:e3:27:52:a2:7e:ff:1d:13:a9:11:58:06:
         be:2a:b4:40:97:d6:9e:78:91:2a:02:f5:d5:aa:b3:d3:b2:13:
         27:f7:5f:21:01:bb:e8:cc:29:61:a8:52:a1:f3:64:7a:d0:6e:
         48:a8:61:4a:ec:8d:5e:11:60:06:7e:7b:17:5c:b5:ac:3c:85:
         ae:90:26:4e:dd:c5:a4:e1:5f:3b:db:95:3a:fc:2d:34:de:31:
         64:03:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:12 2025 by rpki-client