Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e2153a-5440-3681-9080-231fdb6af9db.roa
File:                     27e2153a-5440-3681-9080-231fdb6af9db.roa (raw, json)
Hash identifier:          0BcEcbYGpW1wtQtmJX+iEduLz+/4rtSOj2iSgLLn1OI=
Subject key identifier:   6B:8C:9E:AD:F3:D8:D6:F2:5C:CB:8B:73:89:16:FB:EE:BB:62:61:5D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FD107A8E1837D957188039A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e2153a-5440-3681-9080-231fdb6af9db.roa
Signing time:             Mon 24 Feb 2025 11:39:36 +0000
ROA not before:           Mon 24 Feb 2025 11:39:36 +0000
ROA not after:            Sun 25 May 2025 10:39:36 +0000
asID:                     30036
IP address blocks:        63.142.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:10:7a:8e:18:37:d9:57:18:80:39:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 24 11:39:36 2025 GMT
            Not After : May 25 10:39:36 2025 GMT
        Subject: CN=df91f2cd-a331-480b-a250-eba22d18a5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:95:8a:1e:88:0a:85:81:54:64:94:24:d0:
                    c2:4d:6b:27:69:0a:9d:56:87:c7:7c:2e:b1:7e:80:
                    e9:7f:22:e2:23:9c:4d:87:c4:b6:d0:5d:a2:99:a2:
                    4f:82:18:2d:c2:20:e5:09:fe:36:15:9d:81:d1:17:
                    1d:18:ab:8e:22:48:08:75:3d:65:8d:80:52:ff:ba:
                    20:8b:6d:1d:b5:ec:61:39:e7:e9:21:3d:dc:6a:eb:
                    c0:a4:18:87:f3:c3:68:d5:73:85:be:b4:47:ab:2e:
                    4d:23:4f:52:11:b1:07:90:60:3e:63:55:7f:9d:31:
                    da:9a:81:e7:77:6a:4a:80:d7:f0:3d:9a:65:8f:76:
                    87:00:85:55:08:0d:3a:09:2a:38:16:15:7b:23:a9:
                    92:65:bc:f2:86:57:47:f1:10:b5:8f:a0:a9:6e:50:
                    23:14:56:04:02:76:e9:c9:e1:37:60:96:cc:52:b9:
                    fb:ba:c6:2d:24:b1:ae:04:0b:79:3a:98:e8:2e:f3:
                    6b:0f:e6:56:a1:a6:99:84:f7:4e:bb:75:1f:84:06:
                    c6:fa:c4:84:a3:83:da:de:99:be:0f:6a:38:3b:0b:
                    e8:47:ae:8a:94:eb:8c:ab:a2:d0:a8:50:c8:c0:e1:
                    ea:90:bc:35:3e:27:7a:c0:c0:6a:cd:fa:0f:1a:dc:
                    95:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8C:9E:AD:F3:D8:D6:F2:5C:CB:8B:73:89:16:FB:EE:BB:62:61:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e2153a-5440-3681-9080-231fdb6af9db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:9f:84:da:28:d1:e3:fd:b5:c4:09:28:aa:3d:1f:3e:53:aa:
         4e:e6:1f:15:05:93:b5:4f:91:bc:77:d0:fe:d5:d9:f7:01:81:
         34:39:46:a6:81:85:51:fe:65:3a:96:8c:83:b3:86:30:ee:bb:
         d9:b8:4c:a1:f1:67:01:ed:6f:ae:9b:33:06:e2:84:d7:4f:0c:
         f9:d2:4e:a2:6f:31:15:7d:aa:e9:67:27:85:b0:9d:16:50:8c:
         ab:b1:7f:7d:0c:ba:c1:69:03:5d:3e:42:61:54:4c:76:9e:92:
         6a:45:fc:35:fc:84:69:b5:d7:36:97:4a:23:f0:49:a3:ea:d4:
         54:7c:df:74:11:c2:bf:c0:fa:15:78:da:0a:be:e8:c9:73:27:
         f4:6a:92:2a:5a:98:a5:59:72:d4:64:ce:25:e4:62:5b:66:06:
         eb:26:6d:6a:30:06:ff:1a:24:c8:e1:a1:c1:3d:49:4f:df:8b:
         c9:94:8e:8f:f0:f9:0d:8a:4b:03:72:49:81:b3:3f:05:61:c9:
         d9:46:36:cb:e9:fc:04:42:b4:3d:ba:78:a4:a9:26:cd:e7:2d:
         04:4b:2b:94:11:46:0c:b0:f4:1a:ab:66:44:a3:09:a8:55:48:
         a8:c8:37:90:31:40:ce:35:8b:20:a2:a5:de:b7:d7:1c:61:c0:
         6b:52:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:34:51 2025 by rpki-client