Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9d4ced42-9abd-383a-af46-6a162213c5bc.roa
File:                     9d4ced42-9abd-383a-af46-6a162213c5bc.roa (raw, json)
Hash identifier:          JGPb6BN1L4eGB0b0Dlvkh743evN8x2MsLymWHdS1GcQ=
Subject key identifier:   88:25:EE:AD:54:AA:3F:0B:84:54:E2:F2:D2:AD:C9:FA:3F:5F:54:BC
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285849350EB0C85133B900F0BFF680
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9d4ced42-9abd-383a-af46-6a162213c5bc.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     12430
IP address blocks:        47.63.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:b0:c8:51:33:b9:00:f0:bf:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=92e4bbe6-ffb4-44df-87c7-00f1efa140ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:26:3a:8e:bd:8a:fb:e5:5c:dd:ca:16:5d:
                    45:a0:66:bc:6f:bc:2b:8e:64:c2:7f:4b:18:6b:57:
                    bd:c1:38:22:9e:81:d5:1d:45:9f:5f:fe:80:63:be:
                    0b:a6:bf:d6:3b:73:0b:d5:08:84:48:e3:52:a0:0b:
                    74:59:d0:19:84:90:c3:51:4b:6c:97:79:03:4d:90:
                    74:ba:c0:76:c1:b8:b2:3a:d7:1f:15:61:57:16:6d:
                    a9:59:87:63:f2:42:60:e9:31:b0:8d:6f:4e:49:0f:
                    ec:ce:ee:99:07:56:42:34:4b:64:0e:70:8c:f1:ea:
                    b1:d1:f5:0b:bd:d2:d9:f2:10:9b:80:8c:71:05:7f:
                    5f:0a:9e:80:ad:e4:aa:5b:99:8a:59:1b:e0:a2:80:
                    43:ba:0f:29:ac:3a:cc:ee:00:10:f0:12:44:8c:8f:
                    60:8d:76:9e:dc:c3:a8:a9:04:0a:6c:21:a6:9e:25:
                    4e:11:8d:37:fd:c3:af:4e:cb:48:2e:08:ec:80:6a:
                    54:5c:4c:f8:19:18:42:cc:c9:d4:bb:8e:fc:ac:b9:
                    82:1d:22:72:64:c2:03:87:b0:95:2d:8a:48:cf:df:
                    6f:ab:89:96:15:fc:e4:47:c3:76:11:8f:69:7a:cc:
                    40:22:1f:dd:94:0e:52:67:90:a4:96:57:b9:8e:9a:
                    ea:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:25:EE:AD:54:AA:3F:0B:84:54:E2:F2:D2:AD:C9:FA:3F:5F:54:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/9d4ced42-9abd-383a-af46-6a162213c5bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.63.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:c5:35:7a:56:a5:89:0f:b5:27:f6:01:f7:97:1a:a2:80:
         7f:0d:ca:d9:8a:fc:85:61:63:28:99:51:65:66:fd:99:9b:44:
         7a:32:72:48:64:c0:6e:77:24:b5:ff:26:c7:d9:a8:84:51:fd:
         21:a2:04:4d:ec:6a:30:ff:28:fc:c1:e9:5a:06:c3:6e:2a:e7:
         aa:40:e9:98:86:d1:af:5a:8d:20:7a:e1:33:94:16:d0:74:b3:
         61:ea:d2:0c:13:23:a5:05:a0:51:d0:37:29:6e:9c:e1:30:a9:
         74:d2:de:96:21:a3:3c:c8:06:56:9a:4b:2e:3d:a1:0d:62:20:
         96:d5:7e:1c:1a:bf:1b:36:dc:2e:fc:b5:c2:5e:7e:17:d7:86:
         40:85:68:c4:51:2a:1e:9a:03:ee:a4:5a:c6:12:ca:98:32:c2:
         16:79:ea:24:c8:82:52:6c:d0:15:78:3f:d7:3f:e4:e7:59:e4:
         54:16:37:48:55:0f:30:4e:a4:ed:a1:04:b0:2f:71:b6:09:3f:
         6d:9d:0a:ce:49:a6:63:4b:af:de:2b:f7:f0:ca:29:74:ec:3b:
         38:14:94:b0:e9:58:b1:8c:3b:56:d1:ea:5f:68:24:78:83:86:
         3e:5b:6a:17:14:da:11:83:86:b5:75:f6:40:8c:fa:8d:3d:2c:
         07:5a:18:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:23:38 2025 by rpki-client