Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa
File:                     2119d135-fbe2-37ef-9c8e-60af45ede476.roa (raw, json)
Hash identifier:          g1uDS1j3+SPAOnhHPmeUAynbYblNV8ZF62WJObGZhjI=
Subject key identifier:   52:48:47:84:85:0E:CE:47:8A:1E:2B:CA:2A:E2:C5:EC:28:17:EC:00
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849D594E557301DA6C6CEA3B320
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     7262
IP address blocks:        63.217.85.0/24 maxlen: 24
                          63.223.203.0/24 maxlen: 24
                          63.223.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:e5:57:30:1d:a6:c6:ce:a3:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=a06e1cb6-a13f-44d0-ae07-d08c5c3a7d39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:51:a8:bf:f8:73:41:65:f4:11:80:8a:7c:3e:
                    59:20:2c:6a:38:8c:2b:47:0a:a0:db:17:51:d6:f3:
                    58:d4:df:dd:3a:5f:69:21:b4:65:87:f3:7b:15:a5:
                    7f:b6:01:d0:31:c4:05:6e:e3:20:21:6f:00:5a:85:
                    85:54:43:e2:41:8d:f4:d7:0c:83:e0:73:47:dc:c2:
                    65:07:f7:90:33:d2:80:af:cc:c6:b1:7c:79:44:79:
                    97:53:ee:de:bc:d6:9b:b9:b4:8a:1e:0d:78:a0:04:
                    32:62:32:66:fb:6d:78:95:c5:82:88:fe:a3:7c:4f:
                    90:73:e3:6d:67:47:32:0d:7c:f8:17:e2:bc:3e:7a:
                    b9:f0:7e:34:1f:91:b0:3a:08:84:7d:cf:cd:bb:9c:
                    46:41:80:04:25:7b:31:8a:38:c6:d4:49:2e:01:25:
                    a1:c4:6a:86:e2:ba:dd:74:17:d5:3a:e7:2a:3c:69:
                    4d:41:c0:8b:c6:07:e2:29:5e:23:c6:f0:88:84:95:
                    35:b2:15:be:d4:b4:19:d8:e7:aa:f8:da:bc:97:9d:
                    18:94:56:ba:c9:6a:cd:60:6c:7b:2c:c3:65:04:a4:
                    b7:52:d7:09:0e:21:d3:48:7b:b9:3e:fd:0d:50:e0:
                    6d:0e:6f:22:ee:e8:d2:c5:e5:e9:74:3a:7f:5e:4c:
                    f5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:47:84:85:0E:CE:47:8A:1E:2B:CA:2A:E2:C5:EC:28:17:EC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/2119d135-fbe2-37ef-9c8e-60af45ede476.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.85.0/24
                  63.223.203.0-63.223.204.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:24:7d:fc:4e:1f:cc:6e:0e:af:07:6c:32:44:cb:d9:dd:
         79:7f:ae:67:5c:b0:54:a6:c8:10:a8:9e:ee:10:3f:8f:4c:58:
         52:f8:22:cd:af:46:17:58:96:1b:d8:88:38:b7:da:cf:33:10:
         30:cc:e8:30:6e:b5:88:5c:d7:c5:f9:ba:9b:56:8e:47:16:70:
         f0:75:e8:59:2a:cc:1d:a4:31:b9:d6:2c:67:eb:96:ac:f2:6e:
         56:c0:29:83:24:b8:52:08:41:e5:89:44:7a:d1:77:08:95:d3:
         84:bb:8a:c0:72:a4:1d:e8:ed:3e:a9:bd:f7:0d:47:87:25:c3:
         f0:b7:88:78:fa:0c:7a:f2:d7:3c:2b:f0:66:3f:b5:7a:88:6b:
         38:34:b0:22:7f:c7:d9:8e:fc:42:99:12:7c:84:22:07:25:e8:
         0d:79:4d:d7:52:e4:64:1a:eb:bb:2b:a6:49:08:00:f4:c3:87:
         d2:05:a7:10:8a:04:8e:93:45:c0:27:5a:ee:fd:43:44:60:fd:
         28:51:be:7b:81:b8:c5:dc:28:81:5e:02:7b:0c:2e:3d:4c:d3:
         fa:b9:7f:99:ed:46:fd:d9:1e:da:17:84:eb:ce:bd:f8:5d:31:
         db:2c:41:c9:e7:34:da:72:64:2f:01:2c:58:16:1f:80:bf:d2:
         0a:94:ef:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 02:12:23 2025 by rpki-client