Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4f5af371-d5c5-320c-bed7-c8894b9e763c.roa
File:                     4f5af371-d5c5-320c-bed7-c8894b9e763c.roa (raw, json)
Hash identifier:          KOxWW/2NFaC5k6Q0LmcfY0fRcFmWvqa4JLp+u/2pVhM=
Subject key identifier:   9C:64:06:E8:28:3E:F8:6C:64:4C:DE:49:FF:FB:CE:7F:7C:43:C9:E7
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849DC8FB9B1F5B0513E642750A0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4f5af371-d5c5-320c-bed7-c8894b9e763c.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     31713
IP address blocks:        63.218.58.0/24 maxlen: 24
                          63.218.188.0/23 maxlen: 24
                          63.222.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b9:b1:f5:b0:51:3e:64:27:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=33a05fc6-c19b-40e4-9992-7667feeba9e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:6a:78:5f:1b:cd:b7:04:3d:93:ce:b6:5c:63:
                    58:07:ed:4c:98:c9:91:b0:b8:f5:13:34:fb:17:8b:
                    bd:b1:cf:03:50:23:eb:ec:5b:a1:d8:5c:bc:2e:5b:
                    a4:b4:83:33:03:dd:74:44:ef:c3:4c:b0:5c:4f:53:
                    d8:fa:62:4f:f9:d7:22:71:20:dd:bf:41:a6:ba:89:
                    50:94:b6:8f:ac:22:65:e4:3a:a9:38:f7:59:86:82:
                    2f:c4:fe:36:b6:d8:e6:d2:3b:0c:a1:b2:70:95:0d:
                    9e:c7:9f:e6:1d:6a:52:a4:34:c3:2d:db:6b:57:b4:
                    c4:81:00:14:b8:7b:cb:68:c0:35:8a:1d:c9:ef:a3:
                    b5:4b:e1:cd:dc:2b:8b:51:9e:ad:c1:d9:29:8d:be:
                    55:9b:29:b7:5e:d0:9b:d8:1b:0b:f8:54:00:b4:d8:
                    12:e9:a9:00:31:22:f5:b8:f6:dc:cc:36:da:a5:6e:
                    be:72:0a:ef:6d:c8:43:8a:ae:f3:85:52:ce:33:de:
                    90:62:04:55:d7:e4:66:3e:7e:33:cf:5a:55:10:97:
                    13:e8:19:e0:1d:e2:2a:6b:10:25:29:4a:18:f4:94:
                    79:a2:2d:a6:f5:c2:3e:60:19:3f:5e:10:ec:fc:69:
                    cc:28:6d:ca:6b:17:6a:c1:73:ac:58:2d:ed:5f:27:
                    b2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:64:06:E8:28:3E:F8:6C:64:4C:DE:49:FF:FB:CE:7F:7C:43:C9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4f5af371-d5c5-320c-bed7-c8894b9e763c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.218.58.0/24
                  63.218.188.0/23
                  63.222.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:aa:0d:9e:79:98:aa:ad:5d:3b:40:ed:b9:a5:0d:91:6e:68:
         2f:1f:38:98:13:34:02:dc:e4:9d:20:a7:e1:e2:3c:0a:c8:5a:
         c7:f4:88:d7:4e:eb:ad:f6:59:1d:11:85:7f:03:9a:57:17:bd:
         bb:2e:4f:63:51:51:98:cd:98:11:e5:61:0b:d9:2d:16:67:81:
         54:10:6b:0e:40:f0:34:5f:64:34:57:03:43:fc:cf:16:cf:02:
         1f:72:b7:b9:c9:cd:f6:a3:b2:45:aa:db:c4:7e:91:ce:e7:58:
         ba:b2:68:b7:fc:74:e9:29:ab:0d:e4:7f:27:8e:65:16:d9:6e:
         83:31:cc:3e:3b:d5:8e:8f:03:11:58:39:f4:07:66:31:a9:9f:
         47:78:a1:a6:8e:fa:0d:4c:0a:1c:c4:25:1d:41:c3:9e:98:6c:
         06:70:66:8e:26:22:02:f3:9f:e9:be:aa:9f:29:18:64:08:41:
         c0:5c:f6:e9:34:65:7d:db:5f:fe:15:81:75:7c:8f:60:0d:a5:
         40:60:65:52:ed:39:8e:94:50:a1:9d:cc:17:bf:6b:a8:5a:83:
         f5:1f:83:34:90:ad:3c:a8:1d:5c:1c:6c:55:f0:91:fe:7c:ec:
         ee:6f:b7:de:be:ce:3b:3a:67:96:47:04:10:10:0a:9c:76:2a:
         d6:dd:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:10:31 2025 by rpki-client