Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa
File:                     fc787895-da58-3d06-bd49-e9c99ef26005.roa (raw, json)
Hash identifier:          np6IJEFLfGnuxNECJX3VubNC6FqHnx2P6HhCv0sabsM=
Subject key identifier:   BE:E1:8D:7E:59:5D:FD:76:9B:54:CB:22:49:FD:58:08:03:5E:11:38
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584965E971E90BEE4EF9CD0A7580
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     1239
IP address blocks:        63.161.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:71:e9:0b:ee:4e:f9:cd:0a:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=0a58cd46-616f-4c73-b952-50eb89e986ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:24:5c:57:fd:c6:0f:5c:40:d8:0b:13:a7:
                    dc:24:84:b6:ce:e2:8f:b3:72:6a:0a:4c:14:31:0e:
                    9f:a7:df:78:a5:46:c4:94:86:4d:0f:09:e7:7a:d3:
                    8e:d8:8b:37:7c:8c:b0:7a:26:70:6f:37:c8:a8:67:
                    7a:43:4b:ed:f1:74:cb:0b:52:35:f9:93:54:0f:b1:
                    51:6d:6f:46:4d:34:5d:93:31:8b:ef:69:ad:c9:0b:
                    c5:50:4f:34:56:ce:2f:5e:ff:eb:1c:19:24:98:f8:
                    6e:da:bb:1f:25:d7:18:51:86:b6:fb:70:7e:62:37:
                    90:b1:d6:56:1c:52:e9:11:44:3f:e4:2b:50:08:4a:
                    b0:a0:4a:b1:8f:cd:2f:b4:1f:d5:2e:c6:eb:3b:97:
                    1d:66:25:63:5d:7a:dd:b0:97:af:a9:c3:5a:7f:17:
                    59:55:ad:b3:9c:ad:7b:e7:9b:9d:30:f5:83:71:54:
                    51:23:92:49:45:bb:47:c0:7f:55:2d:cc:53:5e:78:
                    13:d4:06:01:66:b7:03:86:3d:69:3e:95:fd:74:bf:
                    f5:44:7c:b6:92:73:6b:80:26:e7:eb:d0:96:69:12:
                    05:4f:0c:61:a3:15:22:0b:ae:27:0e:74:f2:b7:ea:
                    a3:56:8f:b9:cf:04:15:fa:16:2c:cc:be:3f:e2:1c:
                    c1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E1:8D:7E:59:5D:FD:76:9B:54:CB:22:49:FD:58:08:03:5E:11:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:4d:aa:a8:d5:e9:12:82:b5:4f:93:2b:b8:99:3f:06:b0:b0:
         af:76:75:a7:c0:96:92:e2:50:68:e1:18:5c:f9:40:25:c4:1b:
         44:95:ef:d1:20:cb:0f:32:66:b5:8a:24:cc:49:e7:ce:61:81:
         2c:9f:5f:65:c9:bd:d1:70:44:0a:5e:23:bd:0f:29:33:49:77:
         73:ac:7d:86:89:8d:e1:02:f4:93:48:86:b2:0c:d0:cd:47:74:
         67:14:86:3f:2a:3d:1e:23:ca:6b:c2:9a:7e:26:80:67:7e:0c:
         cf:f0:77:be:60:8b:e7:aa:82:29:60:66:ff:cb:51:70:4b:1a:
         ef:6a:42:69:63:6f:e9:bb:07:7e:fb:40:67:69:93:e9:98:6c:
         89:b2:47:83:47:3f:12:39:02:f7:4e:45:bc:50:08:3b:c1:06:
         77:85:f7:cf:eb:bd:87:cd:e7:a3:1e:77:e3:90:d2:6b:23:15:
         78:a2:32:56:d0:2b:78:2f:2e:b0:5c:02:5c:ee:48:86:52:20:
         8e:fb:cf:48:2d:38:b6:43:bd:60:e9:33:49:90:81:4c:8f:8c:
         42:23:46:ec:72:59:81:99:b1:5b:e5:b0:cc:7d:79:8c:83:b4:
         f8:d9:9b:91:a9:33:db:99:6e:19:da:76:50:a3:18:c2:36:88:
         f8:bb:cd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:57 2025 by rpki-client