Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7f9bbc46-1c38-332f-9258-519ba66534d8.roa
File:                     7f9bbc46-1c38-332f-9258-519ba66534d8.roa (raw, json)
Hash identifier:          43+9QAziJdk10q5llyJ2fNBWjed47KV/XGYsbwybiJ4=
Subject key identifier:   C1:36:B3:17:94:05:0A:14:62:5E:A6:1B:FA:18:99:A1:04:8A:02:43
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848F65BDB6E4B5B2523D1FC4E00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7f9bbc46-1c38-332f-9258-519ba66534d8.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     3491
IP address blocks:        63.216.0.0/13 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:db:6e:4b:5b:25:23:d1:fc:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=9e1d9396-afd5-4ebd-aad1-9cb3c7eab545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:8c:63:95:d6:be:f2:67:18:36:3a:bf:b9:
                    24:3d:72:39:ca:21:59:eb:d4:01:f6:e8:0f:34:c7:
                    ee:ce:c4:8d:db:6e:f7:16:1f:50:ca:7f:4c:e1:a1:
                    7c:d6:23:60:a3:2a:c0:63:89:92:72:d4:01:ef:4c:
                    21:b0:d1:5f:12:94:fd:f5:6e:de:aa:7f:51:1c:19:
                    43:ea:30:2a:54:d2:7f:36:8b:cc:5e:65:4e:02:5d:
                    34:1f:5d:63:f3:b0:14:82:0e:e4:32:a0:27:30:a8:
                    81:c5:08:5d:1b:83:84:2a:b7:70:a1:65:07:78:87:
                    6a:31:33:97:ba:7f:6c:23:cc:b2:69:d1:33:6b:14:
                    6f:c6:d5:41:3d:5b:16:46:86:9c:ed:cf:71:64:77:
                    0c:29:1a:c6:3f:67:dd:a2:20:15:da:fd:58:b7:5d:
                    99:7b:37:4c:d9:7e:6a:e7:36:ac:2a:7a:74:75:9a:
                    37:44:b5:e6:a8:69:e7:43:8d:76:24:91:88:16:15:
                    bb:ea:f8:d4:d8:fa:ff:24:86:67:b2:7b:46:50:ac:
                    2f:97:09:94:19:f9:f6:47:d9:2f:c2:86:1e:c0:d0:
                    82:7a:24:fe:11:b5:02:1a:5d:ac:51:a2:cc:2f:e8:
                    ec:27:b4:7d:ec:06:5d:fa:93:df:7c:0d:72:ca:32:
                    c7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:B3:17:94:05:0A:14:62:5E:A6:1B:FA:18:99:A1:04:8A:02:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/7f9bbc46-1c38-332f-9258-519ba66534d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:6b:0a:db:f4:b3:e1:38:af:1b:29:85:a9:32:29:45:95:
         55:a2:2b:20:2a:ba:c4:2d:df:d8:44:f4:a4:e2:cc:24:ec:95:
         7e:d1:ed:fc:39:f0:74:6d:9e:73:0d:28:dd:92:af:68:90:e9:
         4a:cd:27:07:70:a7:16:2e:b1:70:f6:34:1c:e5:35:42:6e:7d:
         0e:9f:58:5c:4e:31:5e:2e:69:bb:4f:6b:e7:14:d7:7c:5e:88:
         cc:37:72:3b:58:78:a7:e5:5a:b3:0a:c5:09:5d:93:59:ce:2d:
         28:f7:b4:17:6e:c7:11:42:73:ca:90:47:92:b7:19:f8:3b:0c:
         ea:ab:67:1e:8a:52:74:01:f8:ff:26:b7:f4:8d:19:b1:20:5e:
         4c:d6:b0:46:d0:df:6b:f9:d8:55:39:bd:f5:a4:34:f6:12:34:
         81:72:83:71:4c:4f:15:b3:f5:82:61:df:b0:87:b2:f9:99:6d:
         73:e5:c6:53:2e:39:48:d0:44:ef:94:f8:e7:84:2e:05:16:3d:
         6b:42:87:c2:1e:93:fa:9c:ea:5e:5f:83:64:e9:20:95:20:9c:
         b4:26:7c:35:ed:2b:69:87:3b:a7:13:9b:cd:c0:1a:46:c7:62:
         02:4a:a6:ed:a3:9d:0c:41:c3:1c:80:74:b3:38:b4:a4:8a:ea:
         92:c4:e6:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:37:55 2025 by rpki-client