Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa
File:                     06404272-5e27-34bc-a5a5-1ab011f00dd0.roa (raw, json)
Hash identifier:          kkDb6xZrt/AInDU+xTX0Uj2n8OFdeHPbULExXYJlKCk=
Subject key identifier:   AB:70:34:37:6F:55:0E:ED:09:FC:4A:EF:95:A7:44:2B:63:20:A6:73
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584919417D77778C5ABF96B64B70
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     27696
IP address blocks:        63.245.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7d:77:77:8c:5a:bf:96:b6:4b:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=4b97a962-ec5e-4091-8f80-e4201c57c955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:20:4b:da:56:24:36:6b:15:3c:b0:b7:b7:
                    ac:18:1f:11:0a:4e:11:02:fd:f1:0c:06:73:d5:99:
                    09:ba:f1:a3:3d:63:ef:2c:8a:7c:a7:f6:49:1d:2c:
                    b3:bb:8b:e2:f2:3c:a2:41:d5:bf:cf:d0:11:e5:86:
                    5d:19:0b:3f:2c:23:f4:a8:29:97:e1:11:73:2c:54:
                    1b:7b:91:03:51:2e:22:71:21:60:bb:ff:39:a5:ff:
                    04:08:c8:75:bc:0f:fd:14:7f:24:12:1b:ad:a1:a9:
                    cd:7d:5b:29:19:83:99:64:a9:5b:83:4c:e6:96:80:
                    02:b1:b0:37:f1:e6:a0:7f:80:e3:3d:50:11:32:59:
                    d5:e3:19:25:f5:b7:b6:28:10:f2:6d:f5:c9:23:f0:
                    bf:ef:7e:22:bf:25:5c:4e:26:54:6e:23:2e:4b:35:
                    83:9b:a5:60:2b:e0:4a:61:94:2f:bc:2e:db:5e:ef:
                    10:4e:d8:e8:0c:ed:a7:50:ea:ba:49:3a:e1:dc:54:
                    6e:89:e3:0e:79:62:4d:ca:64:12:a6:20:5a:70:f8:
                    3b:13:c7:d8:52:f0:49:57:e2:47:12:ec:3a:58:f8:
                    47:f3:57:f9:c8:e9:2a:72:a6:4d:4c:2e:1e:b4:57:
                    35:9e:a8:10:bf:4c:39:14:e0:4f:9b:85:e8:d6:ec:
                    ec:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:34:37:6F:55:0E:ED:09:FC:4A:EF:95:A7:44:2B:63:20:A6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/06404272-5e27-34bc-a5a5-1ab011f00dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:d6:90:60:41:c2:ac:08:ef:36:31:a8:f8:c0:4f:3d:e1:32:
         20:b2:26:65:b2:43:eb:46:78:4b:4e:35:c4:f4:9c:98:81:f5:
         16:9f:27:f2:2b:2f:53:6f:ff:d5:a1:95:3e:4b:fd:bc:7a:1b:
         49:6a:27:0d:bd:0f:82:9b:63:9a:37:72:80:04:e2:22:8f:8d:
         a3:d3:58:01:ae:cf:90:56:b6:51:ca:a5:22:f6:a5:86:b9:cb:
         45:0e:5f:1a:98:55:e6:5e:a6:07:87:5d:e9:47:13:af:3b:56:
         52:4a:70:58:8a:3f:4f:74:c2:1c:ea:ab:83:9c:ed:27:fa:68:
         a5:7c:d4:a7:c8:3d:57:a6:73:8e:2b:b6:2d:4f:14:03:a5:3d:
         f3:30:89:84:1e:cd:ad:95:b5:6e:fb:1e:f9:33:c9:06:8f:7f:
         d8:ce:ad:54:37:48:ce:8b:77:dd:41:7f:83:e4:92:aa:4c:5e:
         25:46:0d:00:19:ea:a2:d8:07:2f:0f:b8:02:ff:66:10:14:5c:
         f8:0e:95:97:f7:20:4e:35:3c:d7:2c:6d:7e:72:d0:48:25:2f:
         41:06:64:7e:42:26:7a:4c:47:61:47:6b:75:37:5f:ce:27:1c:
         03:bc:b1:ca:35:c9:b5:1a:8d:ae:31:76:13:cc:ee:dd:ae:3f:
         3f:68:c1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:07:53 2025 by rpki-client