Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
File:                     417fabdc-4777-363e-8d86-e1024785259b.roa (raw, json)
Hash identifier:          ETAi/YUJZAk7W8/DWuulUGAtLGM8zkODKU1W8HL93V4=
Subject key identifier:   84:A3:10:B0:57:48:6D:25:4A:AE:F1:82:BC:0D:70:2E:76:A9:EB:1E
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584961B98C89538652E138C3DFC0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     20166
IP address blocks:        63.239.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:8c:89:53:86:52:e1:38:c3:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=f41750f3-a296-4875-9476-a300f842c15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:18:c9:ff:d2:32:57:a1:96:63:1e:d9:50:82:
                    0e:2f:09:05:e8:9f:8e:44:e0:7b:0a:0e:dc:a1:c2:
                    7e:9d:c3:18:6e:03:f5:d7:ea:91:70:88:fc:58:6d:
                    07:f6:4e:87:c6:6c:0a:9d:64:bf:09:8f:4d:c6:60:
                    e5:2f:19:5d:9c:ba:dc:2a:a3:60:11:cd:96:37:a8:
                    bd:47:b7:c3:ba:8e:d8:64:9d:02:d5:94:4c:7e:6b:
                    3a:a2:6c:e7:b0:a1:44:3d:4d:14:6a:e9:29:93:61:
                    dd:b5:8e:9f:36:69:77:4c:d1:23:48:74:8e:bd:87:
                    47:b7:7a:18:b9:bc:c0:5a:26:36:0a:de:8a:fe:04:
                    5d:69:30:54:7c:6f:08:aa:bf:20:89:54:e2:3e:3c:
                    9c:3c:c9:87:4b:fd:4e:65:e8:89:db:a7:28:84:01:
                    8e:1f:fb:a6:e3:8c:3f:1f:e5:e2:30:7e:c4:48:13:
                    cd:e0:99:ab:75:a4:70:8e:2f:3a:97:1d:9e:22:c5:
                    b1:7c:2f:96:af:da:bd:7e:26:73:8c:38:a6:70:e1:
                    82:09:e2:fe:2e:58:7b:ed:de:cf:ed:5e:c6:e4:99:
                    64:7d:3e:17:a3:e9:ad:f2:1c:3a:3e:fb:a7:19:fc:
                    de:f0:90:45:c6:e7:a8:0b:aa:04:55:21:bb:df:48:
                    62:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A3:10:B0:57:48:6D:25:4A:AE:F1:82:BC:0D:70:2E:76:A9:EB:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/417fabdc-4777-363e-8d86-e1024785259b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.239.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:42:cc:19:de:d7:33:77:44:fe:5f:9b:e5:72:9a:a4:b9:b1:
         ae:11:59:50:76:27:5c:a9:31:24:55:5f:2d:43:52:35:48:a0:
         24:42:f1:27:d8:85:e4:f8:39:0d:ae:37:b8:c5:a4:49:2b:a0:
         b4:36:62:34:5b:8a:1a:b6:76:31:04:27:53:b8:ca:cc:a2:71:
         6e:fb:b4:86:31:2e:b6:55:04:95:33:91:25:28:b1:54:c8:c7:
         ea:75:57:ae:a5:ed:d7:8c:de:4c:90:46:bf:f6:9c:38:ff:bb:
         df:8b:28:30:5b:8b:4b:0c:2d:83:d3:2f:de:3d:34:68:3d:01:
         ff:80:ac:de:23:f1:c2:b5:0d:2c:44:4c:df:81:be:8b:5f:32:
         b5:98:e7:1c:7d:98:a6:c3:59:26:e7:29:6a:c1:f2:d3:30:5d:
         28:62:ee:9d:b1:e0:6a:13:0d:bd:57:07:62:2d:ac:03:d1:20:
         ce:a3:36:0e:f3:e2:f3:95:0d:54:1e:08:ea:a7:46:5a:c6:fd:
         35:ac:62:c7:98:a7:c4:dc:e4:a9:c5:e7:3a:cf:ca:84:23:af:
         2d:f1:32:eb:61:6c:83:69:19:68:f1:88:72:2f:64:b0:b2:25:
         c2:02:61:d8:db:53:0b:be:57:0f:8f:67:c1:51:11:c9:77:ca:
         2d:bc:b8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:23:54 2025 by rpki-client