Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b081ff12-3cdf-3c0b-ae46-7645b75ca5c7.roa
File:                     b081ff12-3cdf-3c0b-ae46-7645b75ca5c7.roa (raw, json)
Hash identifier:          O/pWj9pmxMQUe2diBfnVrnqt65jx2dV6tNQ4TSubKMY=
Subject key identifier:   1F:4E:77:74:3D:D8:D4:2F:30:06:EB:47:FC:C3:1C:30:F3:11:D9:AB
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849287E63036E6D9D5884EE1240
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b081ff12-3cdf-3c0b-ae46-7645b75ca5c7.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     55034
IP address blocks:        63.217.234.0/24 maxlen: 24
                          63.217.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:63:03:6e:6d:9d:58:84:ee:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=ce8b03d7-289a-4b74-a4a4-5fdddc8e929f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a3:3d:b0:46:43:d0:57:17:8c:b0:01:44:b1:
                    b0:ed:e6:67:c3:55:8e:09:c0:2e:ae:ec:a1:86:0b:
                    1b:fd:0c:7c:38:6e:5f:d2:6d:9b:4a:90:b3:81:bd:
                    d0:fd:5e:a3:2f:f0:12:98:f4:36:bb:62:ce:61:e7:
                    92:7f:cb:9c:62:50:62:03:27:17:30:bd:0e:77:6e:
                    f7:8f:ee:6c:6f:9e:38:87:23:f8:b6:e6:17:3d:3c:
                    23:aa:b9:16:ac:49:e3:ef:67:88:e9:1d:33:ba:91:
                    a4:82:6a:88:fc:79:6d:d6:40:ef:6c:72:e9:28:9f:
                    42:71:eb:5c:fc:da:ed:46:bc:6d:f6:d0:3b:c7:c5:
                    9b:06:52:eb:d7:46:ae:6f:0a:4d:c7:e1:57:bf:d7:
                    10:a2:60:95:ca:08:85:e9:3f:1e:ee:de:53:e3:d2:
                    7c:7e:b9:56:6f:7a:6c:d9:63:63:4f:98:a6:2c:c7:
                    75:1e:c4:ba:5a:81:45:5c:e3:9e:72:cd:ac:3a:3e:
                    db:32:32:91:e0:32:a7:ae:e4:9b:12:d9:cd:d3:38:
                    18:bf:23:1d:26:37:0c:1c:8a:c3:12:a5:f2:e6:00:
                    52:6d:3a:12:be:98:f0:b9:c6:47:78:0e:67:30:47:
                    d1:3f:4f:dd:1a:00:62:49:45:fa:dc:94:fb:0d:9c:
                    9d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:4E:77:74:3D:D8:D4:2F:30:06:EB:47:FC:C3:1C:30:F3:11:D9:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/b081ff12-3cdf-3c0b-ae46-7645b75ca5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b8:87:0f:54:f0:d2:28:cd:77:6b:60:27:76:b5:b9:0f:0f:
         56:d0:30:d8:35:de:27:db:23:65:e4:61:81:c8:52:d6:f1:52:
         ee:74:79:1c:c5:2a:6e:13:b6:ff:26:3d:9e:c7:b1:0a:fc:a4:
         54:49:0b:1c:68:27:a6:11:b8:1f:fc:ab:57:47:63:2d:39:41:
         50:6c:c8:e3:59:2e:7d:ae:91:da:58:68:96:df:da:73:68:1f:
         13:aa:55:e0:bb:48:18:4f:30:f4:b6:a5:61:c6:46:5a:fc:b5:
         98:92:89:d0:8c:fd:cc:80:bf:7c:8e:2d:95:57:e9:08:fc:06:
         45:01:43:34:2e:e5:17:97:55:d1:01:e0:9a:cb:72:92:6b:10:
         24:e4:bd:d0:94:c1:85:2e:07:37:ff:32:9a:98:7b:b9:94:c8:
         1a:35:00:fd:22:14:c5:2e:9e:76:22:6e:b6:be:6b:7d:c8:bb:
         6c:e1:8a:6f:09:6c:8f:82:aa:75:43:2c:b9:9e:aa:8b:93:b2:
         4e:88:85:e2:2d:a9:ee:d9:f3:65:16:eb:40:a9:23:1a:01:5c:
         df:ab:59:bc:68:0d:e0:63:49:36:30:eb:d7:28:9b:1d:f3:6b:
         1e:b6:84:c2:5a:20:09:78:7f:3f:27:6b:80:15:43:1c:9e:b4:
         29:9c:01:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:36:41 2025 by rpki-client