Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b567331a-c9a6-3bdd-90c3-b8b2d29cdc34.roa
File:                     b567331a-c9a6-3bdd-90c3-b8b2d29cdc34.roa (raw, json)
Hash identifier:          LT8jHNTVz62aJFXZlmVPE3bhSmgGSrr0cgkkdiMTjwk=
Subject key identifier:   78:06:8A:33:5F:51:5C:0D:C0:1A:32:6E:18:FD:24:E5:14:46:A5:E3
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285848D211192F90929BF13E3F1300
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b567331a-c9a6-3bdd-90c3-b8b2d29cdc34.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     7029
IP address blocks:        63.255.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:19:2f:90:92:9b:f1:3e:3f:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=a2027287-745e-42ea-b58b-892662ef2cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:3d:ee:27:57:f6:f8:ad:7e:8f:1f:50:f7:
                    5f:cc:d4:5a:34:d7:e0:e0:8f:e4:19:dd:7b:0f:f7:
                    53:6d:7d:fa:c2:1e:32:9c:ef:88:e9:6a:60:a6:9a:
                    22:7a:9e:65:68:cc:1d:e5:86:a3:eb:61:98:eb:ed:
                    4b:13:6f:4c:5d:11:76:aa:2b:32:10:69:78:ce:82:
                    0b:58:ad:da:b1:67:cd:64:c5:a1:1d:35:da:d0:7b:
                    f0:ed:ab:ee:bf:93:08:52:1a:7f:2e:cb:f9:83:6f:
                    2f:e0:43:ca:09:fe:a4:57:8f:f7:ff:b6:a1:6d:85:
                    33:85:69:30:43:66:fc:b9:9a:1c:2f:66:e6:4c:e2:
                    a8:2a:ea:a5:55:97:4d:d6:fa:a9:eb:90:6f:f2:8c:
                    99:03:0f:c4:70:cb:25:35:b3:31:37:cd:93:11:02:
                    0d:21:bd:1c:80:af:e1:4e:2e:c3:ad:ec:77:9b:a2:
                    f2:7a:5a:53:2c:7e:21:37:22:1d:c4:a8:2b:cb:77:
                    85:9c:56:d8:6e:a1:5e:f7:cc:44:47:9c:d2:13:ec:
                    27:25:07:c0:80:bd:e4:a1:6d:f0:ec:08:aa:1a:b9:
                    e2:b9:76:25:4c:02:df:53:e3:dd:ee:bf:db:98:04:
                    fb:3f:cc:8e:b5:09:9c:8f:ee:56:aa:3f:53:eb:6f:
                    2a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:06:8A:33:5F:51:5C:0D:C0:1A:32:6E:18:FD:24:E5:14:46:A5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b567331a-c9a6-3bdd-90c3-b8b2d29cdc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.255.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:df:17:4f:ce:51:4b:1b:a4:90:cc:78:7a:86:ad:64:7a:8d:
         60:8d:80:7c:80:e3:19:87:8b:cc:5f:0b:2c:26:53:e0:35:cf:
         2f:19:28:81:b6:a7:69:46:f3:49:d5:7d:70:e7:46:fa:53:36:
         73:32:aa:8f:65:37:2b:67:57:aa:09:f0:e1:33:c5:20:ec:e4:
         0a:bd:cc:60:0f:57:45:8d:dd:17:9e:18:ae:40:a0:90:c0:44:
         57:04:74:59:a1:fe:11:fe:c1:27:9d:a3:9b:6c:83:91:af:1d:
         8d:ba:0a:ce:73:a6:9a:49:ca:f7:bf:76:3e:35:ff:2f:5f:8e:
         f3:bd:df:16:83:ae:c0:d5:f4:fa:40:ef:1a:67:19:d8:6b:09:
         e6:5b:b0:26:38:e8:9b:9e:64:f9:c2:b5:d0:d3:ce:27:d3:39:
         e2:a0:7b:64:e1:f9:37:ec:88:0a:9e:6f:33:f2:2d:99:1d:2f:
         a4:01:e8:e5:65:89:d5:c0:eb:10:3d:67:df:d2:c7:bb:c6:09:
         b4:b1:e2:ea:61:85:98:ac:7c:92:cd:2b:13:16:89:3f:fd:2d:
         1d:27:ca:d3:bd:b9:91:d2:b3:de:3b:05:20:7b:fe:30:99:ea:
         64:66:dd:16:ae:2d:fe:10:23:85:f8:c2:a0:75:7c:3b:94:aa:
         d4:4f:1e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:37 2025 by rpki-client