Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3949815d-06c2-3bf3-bdd9-66592f6371dd.roa
File:                     3949815d-06c2-3bf3-bdd9-66592f6371dd.roa (raw, json)
Hash identifier:          n7JNFT0mkEzvWInnT0sOz5wcTZOEIwdmNXwb/5kz86E=
Subject key identifier:   4E:6D:7E:B8:7A:B2:1C:AD:96:3C:09:57:E4:4D:58:78:83:2A:81:D1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584A119AAC16BE8C4A4A41066380
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3949815d-06c2-3bf3-bdd9-66592f6371dd.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     32787
IP address blocks:        63.217.234.0/24 maxlen: 24
                          63.217.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:ac:16:be:8c:4a:4a:41:06:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=a1dedd77-5942-4d65-8fc7-d3915555cd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:41:ec:19:14:6b:36:6f:77:82:f8:3d:d9:a3:
                    63:62:74:67:13:53:4a:9f:3b:b3:48:43:0e:56:68:
                    eb:b8:f0:ac:b5:22:24:46:12:96:6b:c4:bc:46:99:
                    2c:35:09:08:f3:77:70:3c:2e:ee:41:f8:13:fc:4f:
                    08:01:66:a6:16:d9:b1:91:a6:a5:14:83:22:62:86:
                    84:89:c2:ae:b3:a7:cc:15:e3:f7:2b:83:5e:85:3d:
                    96:7a:ad:bb:de:e7:e6:41:7d:16:7f:26:0f:61:c0:
                    90:07:4b:53:20:f0:6b:6c:82:d7:f7:1c:82:56:ff:
                    50:bb:74:40:e5:0d:ee:84:77:9e:6b:05:fa:26:e6:
                    5b:0c:93:20:8f:37:18:e5:30:57:d1:19:22:e1:f7:
                    46:1a:90:d9:57:66:d2:7d:44:08:49:8d:1e:ad:9c:
                    3e:fd:c9:7a:fd:b3:8c:81:ae:fe:98:f9:e9:98:ea:
                    c5:98:31:85:6a:d5:6e:4d:89:6f:9d:f0:91:9f:34:
                    51:46:64:3e:8e:20:87:b7:c1:99:6b:64:d7:86:e9:
                    22:0a:8d:30:b6:0d:b9:7d:76:90:d9:5a:da:42:c9:
                    8b:98:ac:fd:ad:fe:5a:23:11:89:8d:8f:6d:7a:54:
                    72:49:0e:8e:ce:0f:c4:e2:e7:06:cd:72:e6:fa:d6:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6D:7E:B8:7A:B2:1C:AD:96:3C:09:57:E4:4D:58:78:83:2A:81:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3949815d-06c2-3bf3-bdd9-66592f6371dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:04:50:48:47:59:2d:f4:7a:a8:d9:04:53:85:a7:f5:56:30:
         de:cf:f5:05:17:d6:47:05:60:22:90:46:3e:42:69:0b:70:50:
         a7:f6:88:dd:8a:4f:fa:cb:c9:9c:49:e5:49:69:09:a4:74:4f:
         93:c1:4e:21:98:a1:31:a4:de:04:8e:49:5f:b6:ba:ae:2d:bb:
         16:53:dc:ec:08:2b:1d:3e:08:fa:6e:1f:46:74:50:22:32:e9:
         00:5c:58:59:55:71:eb:0f:a8:00:b8:58:a6:16:95:34:50:a4:
         cd:7f:c4:68:6e:f8:d7:dc:60:3b:6f:50:18:69:c0:8b:f6:09:
         39:df:63:71:68:37:1e:d1:45:88:59:91:1f:ec:ee:4b:fa:93:
         e8:a6:64:46:d2:88:e5:07:c5:01:cd:70:4b:e5:8b:62:ee:f0:
         09:cc:15:01:fc:7a:43:02:ea:c0:ef:d6:ea:5a:86:f4:51:fe:
         ce:af:af:50:91:68:14:b1:af:c8:2d:74:9b:b1:1f:e7:11:ba:
         be:71:14:4c:8f:9c:26:d3:48:a0:7c:da:28:5d:ec:70:c8:bd:
         88:b2:e8:83:50:c4:37:53:3d:63:dd:51:2f:f1:22:a9:04:af:
         68:82:12:8b:21:5a:01:57:13:a4:23:3e:66:4e:47:e5:08:f7:
         f7:43:55:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqwWvoxKSkEGY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
YTFkZWRkNzctNTk0Mi00ZDY1LThmYzctZDM5MTU1NTVjZDcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0HsGRRrNm93gvg92aNjYnRnE1NKnzuzSEMO
VmjruPCstSIkRhKWa8S8RpksNQkI83dwPC7uQfgT/E8IAWamFtmxkaalFIMiYoaE
icKus6fMFeP3K4NehT2Weq273ufmQX0WfyYPYcCQB0tTIPBrbILX9xyCVv9Qu3RA
5Q3uhHeeawX6JuZbDJMgjzcY5TBX0Rki4fdGGpDZV2bSfUQISY0erZw+/cl6/bOM
ga7+mPnpmOrFmDGFatVuTYlvnfCRnzRRRmQ+jiCHt8GZa2TXhukiCo0wtg25fXaQ
2VraQsmLmKz9rf5aIxGJjY9telRySQ6Ozg/E4ucGzXLm+tZxjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE5tfrh6shytljwJV+RNWHiDKoHRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvMzk0OTgxNWQtMDZjMi0z
YmYzLWJkZDktNjY1OTJmNjM3MWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP9nqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkEUEhHWS30eqjZBFOFp/VWMN7P9QUX1kcFYCKQRj5CaQtwUKf2iN2K
T/rLyZxJ5UlpCaR0T5PBTiGYoTGk3gSOSV+2uq4tuxZT3OwIKx0+CPpuH0Z0UCIy
6QBcWFlVcesPqAC4WKYWlTRQpM1/xGhu+NfcYDtvUBhpwIv2CTnfY3FoNx7RRYhZ
kR/s7kv6k+imZEbSiOUHxQHNcEvli2Lu8AnMFQH8ekMC6sDv1upahvRR/s6vr1CR
aBSxr8gtdJuxH+cRur5xFEyPnCbTSKB82ihd7HDIvYiy6INQxDdTPWPdUS/xIqkE
r2iCEoshWgFXE6QjPmZOR+UI9/dDVXI=
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:31:00 2025 by rpki-client