Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e05d80e1-df66-3f38-93db-6d320277ad39.roa
File:                     e05d80e1-df66-3f38-93db-6d320277ad39.roa (raw, json)
Hash identifier:          EqZmwOldnlCpEGN7LrHDSEoCsco6pyXI5AacEYcVM7E=
Subject key identifier:   BD:23:59:0E:66:D2:1B:56:DE:B9:FD:14:83:28:2C:AF:B4:0D:8E:53
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285848BFEB90650A8B7FFEB01D0500
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e05d80e1-df66-3f38-93db-6d320277ad39.roa
Signing time:             Sun 02 Feb 2025 14:00:53 +0000
ROA not before:           Sun 02 Feb 2025 14:00:53 +0000
ROA not after:            Sat 03 May 2025 13:00:53 +0000
asID:                     17984
IP address blocks:        63.222.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bf:eb:90:65:0a:8b:7f:fe:b0:1d:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Feb  2 14:00:53 2025 GMT
            Not After : May  3 13:00:53 2025 GMT
        Subject: CN=df00dd41-9f2e-4be4-82ec-a578a3f68252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7a:4a:a4:8a:c9:7b:76:21:97:48:03:bb:31:
                    b1:3b:1e:51:f5:1f:d8:fe:89:3d:8a:34:5a:db:2b:
                    60:a1:09:01:b9:d7:cd:2d:64:b7:07:3a:aa:17:e3:
                    b6:00:2f:ed:f8:db:b1:50:a5:2e:06:8e:26:e7:09:
                    66:d4:dc:9c:31:b9:37:ea:34:1a:a1:b9:a2:84:c1:
                    2d:d7:8c:b8:77:2a:f0:86:aa:42:b9:84:38:1b:3c:
                    2c:fb:f3:aa:9a:16:54:c3:83:51:53:07:03:fe:b9:
                    aa:03:bd:97:a2:b5:ab:c6:72:e9:e2:b0:8b:78:43:
                    5b:04:2b:90:44:4b:98:5f:85:a9:c0:be:ea:bb:c3:
                    4f:66:b3:5e:5e:4d:b2:7e:10:da:9f:a1:38:65:2a:
                    2e:db:cd:61:b8:4b:ba:2e:f6:3b:db:d7:03:8e:c8:
                    95:6a:9d:f1:55:2a:d8:33:14:47:12:7a:66:c6:60:
                    b7:66:05:f1:7f:03:0a:6e:dd:07:9f:da:78:36:3a:
                    25:6e:98:ce:bf:5f:de:84:d6:1e:f5:39:aa:c0:fa:
                    8a:a3:1f:74:c3:a5:cd:fc:8e:02:d1:c5:fb:4f:f2:
                    e9:23:1b:7a:1e:18:8b:21:ad:8a:43:9b:b8:fb:30:
                    1f:f6:77:a9:9d:5d:94:75:d0:50:b3:b7:cf:b2:09:
                    b3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:59:0E:66:D2:1B:56:DE:B9:FD:14:83:28:2C:AF:B4:0D:8E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/e05d80e1-df66-3f38-93db-6d320277ad39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.222.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:35:64:1b:f5:29:6b:76:90:39:a4:30:91:b1:69:3c:f2:03:
         a6:65:29:4f:7e:00:46:05:d0:51:1e:f6:21:84:fa:f4:a9:a3:
         87:f9:65:88:48:87:95:a6:9e:83:ff:69:47:e6:f8:81:f1:37:
         d0:0c:95:af:27:96:7c:ed:e8:8e:fd:3e:5f:cc:9b:c6:28:81:
         b1:a5:34:ae:40:53:99:52:e2:d3:e2:cf:b3:57:21:00:80:a0:
         9d:ca:54:af:41:19:d0:1b:b1:8e:2b:87:0f:21:ea:b6:41:c0:
         fe:72:32:bb:e0:e4:6f:56:e3:68:ab:6d:2c:f6:5e:7d:c6:fd:
         4d:43:bf:f8:03:88:5f:8c:39:1e:90:b3:39:1a:a4:b0:20:0d:
         84:72:74:cf:21:c5:d6:e6:cc:d8:90:24:23:49:29:8d:17:a2:
         a2:1a:ee:f9:c3:92:88:fd:b2:6a:e4:d5:61:b0:1d:82:80:0c:
         da:b9:7f:d4:21:f5:aa:9c:a0:8b:7e:9b:41:45:6c:66:3f:ec:
         00:61:55:40:38:fa:03:40:51:2f:26:06:b7:8e:d4:71:6f:55:
         c7:38:05:7c:d7:49:c5:b7:56:fe:8e:78:a0:f9:35:3d:b5:92:
         80:cb:af:c4:81:27:41:f2:63:9e:d2:ba:e9:44:3c:49:0f:3a:
         20:9c:c2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:16:14 2025 by rpki-client