Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4d490065-9a65-3463-abc7-6fedfc35163f.roa
File:                     4d490065-9a65-3463-abc7-6fedfc35163f.roa (raw, json)
Hash identifier:          IRfnLlhR8hWesvVeNiGjJmW41jZVWne/x10qP6huQSM=
Subject key identifier:   15:F4:E9:9B:7D:25:6C:5A:41:79:80:4E:61:A1:AC:7F:CA:AE:FC:67
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584902EC1EB7C65D1531AC4F3D80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4d490065-9a65-3463-abc7-6fedfc35163f.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     13781
IP address blocks:        63.151.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:1e:b7:c6:5d:15:31:ac:4f:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=6b197235-df03-4e02-8d7e-33b1e9b66f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2d:00:38:b4:25:4c:8e:d4:64:cd:df:9f:df:
                    7f:6e:95:a9:0c:43:84:c9:50:c0:a7:87:8e:91:54:
                    00:a1:60:2d:b2:6c:b0:e1:ce:87:da:20:af:c2:31:
                    0a:80:f6:f9:98:ee:b8:41:34:82:66:f1:f1:0c:78:
                    af:a8:92:a6:0b:58:a1:54:31:d0:4e:0d:09:8c:9b:
                    be:42:7f:86:1d:e0:b1:67:13:9e:89:cf:cd:1c:21:
                    ba:09:b7:e1:b5:c2:90:01:f6:81:9c:05:55:84:e1:
                    12:91:50:d2:5c:27:87:3a:b4:db:a3:e3:45:ac:53:
                    d9:20:a2:55:87:4a:a0:e9:32:88:0c:a2:83:72:60:
                    9f:b9:a9:e0:f4:60:50:c0:6c:ea:58:72:17:32:9e:
                    e3:0a:9e:cf:de:53:8c:b5:10:a6:13:db:f5:d4:1e:
                    16:1c:4d:15:b4:d0:31:b7:89:90:0d:a4:71:d5:90:
                    1d:c4:1d:1f:ac:5c:38:28:90:a1:3a:b3:39:8c:76:
                    ff:b9:d4:c4:6b:48:3b:37:09:46:8b:d1:30:cb:cf:
                    cd:b7:b4:28:46:a6:6e:44:97:ce:85:d1:c7:12:2c:
                    1c:36:84:fe:64:df:4d:eb:4b:b6:7d:87:fe:61:d9:
                    38:9c:18:46:35:d8:09:d8:c6:25:71:4e:bf:cd:74:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F4:E9:9B:7D:25:6C:5A:41:79:80:4E:61:A1:AC:7F:CA:AE:FC:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/4d490065-9a65-3463-abc7-6fedfc35163f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.151.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:7c:83:02:9c:bc:74:16:4b:49:ec:5d:2d:62:3e:0b:e1:b1:
         e5:80:83:38:d4:ef:ea:65:4a:ca:91:3c:d9:d1:78:c3:b3:01:
         5f:cb:38:33:04:80:6a:4f:b4:13:1f:50:37:32:64:a4:8d:b9:
         37:ba:90:a5:f2:01:6e:44:1d:1f:a2:37:33:ba:96:40:74:1f:
         33:71:3b:65:91:c0:1c:fc:3e:f0:d5:16:83:1d:71:dc:21:08:
         66:d0:43:c6:14:95:33:64:83:ee:01:71:5b:51:96:e0:0e:95:
         8d:e2:ea:f2:f1:89:57:f4:ac:9d:ee:ef:9f:5a:29:de:3a:0e:
         18:7b:e8:bf:ff:21:df:60:f9:d9:45:6a:93:fd:90:49:93:f1:
         ed:2c:d5:c0:c8:27:e2:91:9b:86:41:d7:1e:fc:68:ae:63:7a:
         d8:e0:88:96:ce:d4:87:c9:78:be:e2:40:fe:ec:63:84:86:32:
         45:3b:7b:84:0b:93:76:c8:62:c2:7a:b5:7a:6f:ed:c1:a5:b2:
         2b:0b:b8:74:26:ca:dc:8d:6e:63:02:aa:3a:77:70:e2:04:ec:
         19:7c:c9:2b:f6:08:22:cd:79:e9:4a:d7:77:3d:56:eb:fa:42:
         d4:d4:71:7e:c4:b1:6d:40:6f:2e:74:ca:3a:bc:8a:28:38:2f:
         bb:a7:97:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:09 2025 by rpki-client