Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa
File:                     36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa (raw, json)
Hash identifier:          pkvQJBkPtDb4juYcdkgsTOLtmTztYACSYKnc27yR7ag=
Subject key identifier:   2F:2E:12:21:1C:C2:CB:15:BD:75:54:C2:CE:CE:E8:8A:FA:2E:63:BE
Certificate issuer:       /CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
Certificate serial:       44D5466E22177C90DA6CD4C4B1262045430B676F
Authority key identifier: 12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa
Signing time:             Mon 19 May 2025 19:08:56 +0000
ROA not before:           Mon 19 May 2025 19:03:56 +0000
ROA not after:            Mon 18 May 2026 19:08:56 +0000
asID:                     397244
IP address blocks:        63.133.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.crl
                          rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/4538806d-1647-4e36-8f5c-ae55c7431632.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 13:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d5:46:6e:22:17:7c:90:da:6c:d4:c4:b1:26:20:45:43:0b:67:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
        Validity
            Not Before: May 19 19:03:56 2025 GMT
            Not After : May 18 19:08:56 2026 GMT
        Subject: CN=2F2E12211CC2CB15BD7554C2CECEE88AFA2E63BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:27:e3:2e:d0:b3:5b:90:08:3f:21:0b:25:
                    10:74:2d:02:cf:a4:d7:a2:af:eb:91:36:92:ca:01:
                    3e:f6:fd:6c:4f:43:83:a4:6c:fb:60:34:90:95:c7:
                    fe:ae:4e:1f:61:73:fb:93:e0:c2:98:c2:29:e8:d1:
                    5d:8d:3c:f1:d5:a4:2f:70:3d:0d:55:b5:95:ed:c8:
                    1f:58:c5:3b:b4:72:cc:2c:6b:8c:c1:95:ba:3d:c5:
                    14:c0:19:b6:c3:85:1d:4a:46:87:12:6b:dd:e8:a6:
                    8b:95:3c:47:32:55:cc:ea:23:ec:2c:0c:5f:40:78:
                    24:ba:3f:c4:1a:6f:af:df:29:71:9b:45:5c:02:91:
                    8c:42:37:7f:b2:de:b5:6b:f0:a5:da:6d:e9:b3:28:
                    2a:4a:70:e6:86:64:2d:a3:eb:e7:44:3e:9b:c5:25:
                    aa:ea:fc:c0:0e:83:a3:64:eb:03:43:d9:bd:8a:0e:
                    f6:51:20:9b:97:d7:3e:44:65:46:a1:61:85:df:d9:
                    31:21:ca:a0:b5:56:5b:3e:da:4b:8a:9c:67:47:9f:
                    d7:9f:cf:43:eb:49:ac:89:09:9e:59:4e:36:55:bc:
                    d8:03:59:bf:84:41:ef:16:8a:e8:72:ba:8b:c9:1a:
                    87:e8:ba:b3:f3:78:a9:a5:da:e0:26:22:a6:2f:3d:
                    1d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:2E:12:21:1C:C2:CB:15:BD:75:54:C2:CE:CE:E8:8A:FA:2E:63:BE
            X509v3 Authority Key Identifier:
                keyid:12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/36332e3133332e3231342e302f32342d3234203d3e20333937323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:81:07:93:c2:1c:d5:08:c6:ff:f9:6e:7e:45:5a:07:3a:d4:
         c5:2d:76:4f:20:1a:4a:2f:e0:57:23:6b:a2:b7:af:45:19:5a:
         15:0d:a2:b6:7d:19:78:f3:a6:ca:fa:de:85:59:b8:d3:ab:e4:
         a0:26:14:63:e6:e1:26:69:82:af:20:2a:c5:20:bc:5c:08:09:
         74:9c:dc:e8:bb:2b:be:84:8c:bb:ef:c3:c2:b1:bd:68:30:1b:
         60:ea:8c:7d:8e:45:a5:d4:be:6c:62:bd:37:8b:ea:cb:f6:ad:
         ef:20:93:c3:c9:f5:0e:07:9c:db:2e:fc:31:1a:c7:2f:b7:05:
         de:81:72:30:ad:07:26:30:95:a0:46:90:e3:ff:b3:d8:33:95:
         7e:c5:50:ca:0d:f6:ce:37:20:74:b5:59:76:95:3c:ea:5f:53:
         85:18:e7:43:08:d9:ac:ac:2d:9d:b5:72:a5:10:e8:d9:d7:bb:
         9c:8e:bf:72:27:f3:97:e6:4d:fb:e5:33:90:b4:88:23:7a:d5:
         39:64:60:55:d3:6f:15:f8:4c:1b:a1:d8:99:92:6e:93:98:1e:
         bb:05:d1:20:cc:9c:e2:8b:71:6a:79:bf:25:7f:ae:64:69:d8:
         b9:d2:41:f8:ed:16:51:4a:5b:fa:a5:e9:b2:2e:78:99:e1:29:
         ce:58:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:06:53 2025 by rpki-client