Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa
File:                     64e46b4e-3e89-3daf-acc6-52f1fe989879.roa (raw, json)
Hash identifier:          JUYZaJ7MlXCTlkfLT60bGwbsogeL7mxTum1fzGQO9xw=
Subject key identifier:   68:F5:53:A4:19:2E:BC:49:36:20:52:F3:DD:91:DA:46:2C:E1:49:BF
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584974E6FEF7FC256A77DADA5E80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa
Signing time:             Tue 08 Apr 2025 09:53:01 +0000
ROA not before:           Tue 08 Apr 2025 09:53:01 +0000
ROA not after:            Mon 07 Jul 2025 09:53:01 +0000
asID:                     30036
IP address blocks:        63.142.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:74:e6:fe:f7:fc:25:6a:77:da:da:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  8 09:53:01 2025 GMT
            Not After : Jul  7 09:53:01 2025 GMT
        Subject: CN=6dd1cd0f-d035-411e-9e72-fe0af03e6a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:b1:36:51:34:e9:b2:41:b0:f0:bb:bc:fc:
                    43:37:1c:e4:f3:0d:a2:27:bb:6a:48:6f:b8:6e:0e:
                    82:c6:1e:44:de:b7:76:00:a5:fe:d1:00:e6:67:f1:
                    ea:e4:98:f2:a1:d7:56:4e:db:53:aa:a9:64:04:ef:
                    02:8a:4f:bd:1e:e2:6f:b1:f3:c8:e2:dd:a9:34:71:
                    fc:46:d9:f1:8c:ac:dc:53:8a:5c:4b:57:fc:83:96:
                    2c:e3:6b:83:b3:d3:f7:e8:b5:b4:94:e7:e5:72:eb:
                    32:e3:7f:8c:01:b6:f7:84:cc:1f:02:5b:60:6f:d5:
                    c9:c9:77:e3:f1:fa:3a:8d:31:fc:ae:d0:bd:c7:a9:
                    fe:8e:b7:65:d6:7b:62:1c:90:96:f1:ee:51:32:5a:
                    07:62:34:6d:4e:e9:5c:b9:56:58:b0:6f:ef:61:03:
                    41:5e:1e:87:92:f9:1b:d2:4a:51:e6:6d:6f:e7:23:
                    97:2d:22:97:04:7f:50:cb:49:a9:aa:6f:5c:07:ad:
                    2b:7d:e7:14:de:b5:1f:83:65:38:4e:1b:90:7c:24:
                    67:4c:63:67:0e:7e:37:9e:d7:3f:fd:48:7d:92:b8:
                    66:4a:2b:89:95:90:8b:f8:05:5c:cc:a5:a7:2a:f3:
                    5f:31:1f:7a:1c:3b:9f:82:36:f6:e6:12:2e:23:3b:
                    1d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F5:53:A4:19:2E:BC:49:36:20:52:F3:DD:91:DA:46:2C:E1:49:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:c4:da:ab:89:e4:51:62:2a:c9:d4:75:a8:d4:0c:91:d1:35:
         81:6f:90:c6:6e:59:01:2c:a2:b0:0e:0c:91:7d:7f:b5:62:92:
         c7:b9:13:f3:28:cc:a6:23:1e:4b:bc:73:48:f2:56:6b:8a:b0:
         7b:50:62:37:7c:3a:e1:91:54:0a:d0:61:db:36:ca:58:53:a5:
         a8:79:cd:1c:53:c6:8a:36:b7:91:4c:7f:d4:3b:44:d8:5a:7d:
         ce:45:07:13:b9:08:6d:dc:f9:69:56:c1:39:2a:8b:b7:4b:05:
         0d:e4:74:be:08:62:df:50:c4:9f:ae:0d:2d:8f:93:fc:59:58:
         a4:c1:fe:fa:9d:74:1b:ab:37:d0:59:99:ca:1a:b1:65:49:86:
         70:a1:7e:f8:e9:6a:d2:c4:73:c9:cf:01:a5:db:2e:ab:c7:a2:
         d4:64:70:ba:25:ec:a9:e2:c1:f7:2e:2b:ad:ae:ee:22:52:a6:
         8c:da:50:3e:dc:76:83:c4:24:63:f5:32:f8:b3:7d:77:99:3e:
         d8:d7:7e:02:44:9f:e6:84:e6:bf:8a:28:f3:d7:44:51:e4:4c:
         7a:d3:78:a3:4c:4b:0b:fe:fb:aa:31:db:eb:70:57:77:03:09:
         47:f8:ac:0c:5f:b3:b4:3a:c3:49:f1:93:46:16:75:f4:34:7f:
         1b:a8:2f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:12:20 2025 by rpki-client