Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
File:                     631455e7-4f9a-3411-b724-56b44cd3c3be.roa (raw, json)
Hash identifier:          hWzuk2hvGzojyS1Mb8zavkkj3Xilb+yQhCvLGP/OSvA=
Subject key identifier:   ED:19:BC:76:25:8B:EA:B8:18:99:B3:11:57:80:4B:30:36:32:F6:82
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F43285848D7A64EBFA9EDDE622FD201E0
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     23520
IP address blocks:        63.245.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:4e:bf:a9:ed:de:62:2f:d2:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=1f634d15-8242-445c-a03b-b7a0985978d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:62:61:5e:81:15:13:57:69:bc:b5:a8:84:
                    32:cf:18:2e:33:de:dd:dc:c2:17:e9:f7:9c:b5:4f:
                    d0:5f:bf:dc:05:e4:47:d1:73:d8:ea:3c:2a:e3:22:
                    66:2a:51:cc:b8:3b:13:fc:80:42:2c:ec:cc:52:42:
                    37:e5:85:26:26:93:b7:e0:ee:b9:d0:60:51:98:f6:
                    cc:7e:04:ef:8e:a1:5d:ac:5a:3e:bf:07:d2:3b:64:
                    22:bb:5a:c3:fd:a1:fb:65:9d:09:23:c7:b6:46:0d:
                    0f:b9:7b:f2:87:56:3d:63:d3:16:c4:6f:52:63:a4:
                    ce:61:0f:fc:1a:8b:d1:ad:fe:ee:86:bd:91:39:44:
                    fc:32:8b:27:71:8a:ac:d1:7e:40:9b:0e:4a:9c:ca:
                    c9:5b:3c:29:65:e4:c3:6a:bd:e7:bd:75:19:af:a9:
                    d1:88:af:ef:90:3c:01:0a:74:9c:ca:d6:31:9e:6e:
                    80:3f:13:aa:8e:8f:f9:bf:10:71:f3:01:12:68:8a:
                    3d:fd:44:cb:8b:41:56:0f:f1:53:84:03:1c:ed:60:
                    c2:05:e2:f4:0f:3d:cc:8d:bf:fc:de:51:1d:24:a6:
                    ad:03:4f:16:72:0c:fe:bf:34:86:25:f2:e6:64:61:
                    6c:7e:dd:e0:28:0a:9b:ac:1e:6d:a4:1b:5b:8c:76:
                    13:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:19:BC:76:25:8B:EA:B8:18:99:B3:11:57:80:4B:30:36:32:F6:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:08:a3:06:13:13:86:c5:ac:b2:02:40:dd:ae:d0:9d:85:da:
         76:8f:eb:90:51:a5:51:5f:c3:77:e9:cf:a0:1a:19:c4:a4:79:
         70:92:a9:08:2c:63:3d:91:f7:8e:07:b5:91:56:36:86:ea:af:
         c0:e9:00:12:03:62:e2:73:33:ff:91:3c:28:e7:7d:10:7a:21:
         e2:b1:bf:19:02:61:70:c8:61:a9:73:19:a7:a9:ea:ad:c8:8c:
         8f:8d:46:5a:8b:c1:af:39:58:17:24:70:9b:51:af:9d:0a:3b:
         69:84:d6:28:69:a1:c4:44:25:64:e3:ab:e6:d7:95:99:d0:1b:
         74:60:72:46:8c:47:d4:2a:37:9f:9f:9a:ee:1e:69:16:de:36:
         9f:f1:81:05:ae:ee:ae:cd:30:ae:63:c4:b6:e6:a5:ee:85:ee:
         15:25:34:d0:c0:3a:92:bb:84:60:8d:53:2d:2d:07:72:28:1a:
         b9:d6:cf:4f:e1:df:c9:d5:69:ce:00:c2:8b:a8:7b:1a:9b:8c:
         c9:ab:43:96:65:f0:5a:b0:cc:f9:37:16:4c:21:47:a5:bd:3c:
         45:82:83:ba:c7:fa:14:ca:68:6f:68:18:4c:30:14:71:c0:97:
         83:5e:3b:3a:aa:44:c7:82:19:c8:b5:8a:50:72:90:80:75:76:
         85:c5:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:24 2025 by rpki-client