Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f5419a0-aad6-3992-afed-5e88980a2de5.roa
File:                     0f5419a0-aad6-3992-afed-5e88980a2de5.roa (raw, json)
Hash identifier:          C2bgH3pFJ4mPkBJ8HwpLonAeWLaKM5ttppruHIOAYmM=
Subject key identifier:   0F:1F:17:54:22:48:99:C8:76:58:8A:E5:37:85:D9:0E:99:F3:06:5B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B14BF7C3F6179FCC88E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f5419a0-aad6-3992-afed-5e88980a2de5.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     6984
IP address blocks:        63.23.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:14:bf:7c:3f:61:79:fc:c8:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=c8133301-7ae8-4ff8-8a0c-e8dd78c49737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:30:32:26:cd:60:5f:37:ea:4e:34:c3:3d:
                    74:00:91:ba:eb:37:36:ca:c6:ff:42:68:25:db:04:
                    70:70:52:db:18:c1:a0:6a:c6:40:33:05:09:59:b6:
                    c2:ff:a6:fd:1f:6a:0e:d7:eb:3f:02:9b:d3:82:7f:
                    52:33:bd:fc:12:d1:65:00:79:4a:7d:27:5c:94:4b:
                    7a:2e:de:0a:fc:b0:93:a3:b8:01:fc:f8:ef:69:1c:
                    78:76:53:e6:8d:fe:a9:77:36:74:39:19:64:9d:c3:
                    78:45:67:74:cb:0f:ae:53:b7:c8:4c:3e:1d:63:72:
                    a6:9f:19:b6:c4:f1:29:23:a8:8a:63:bf:db:66:89:
                    67:6e:c2:1f:e4:9e:18:73:80:c3:fb:f2:a3:67:f0:
                    52:61:8e:18:0b:a5:b4:fa:2f:d1:8c:23:f3:ab:56:
                    94:6b:fc:56:2c:c5:b3:4b:3a:b1:03:93:72:a7:56:
                    b1:5c:5a:a8:78:1b:ea:a8:55:9c:90:62:48:31:dd:
                    b6:75:c0:8f:25:bf:ad:d4:35:a2:a3:07:63:84:da:
                    85:30:58:5d:be:a3:5f:17:ef:db:8f:31:aa:62:25:
                    56:c6:67:3d:85:37:17:34:cf:db:87:97:37:71:3c:
                    59:4d:1b:8b:54:ca:56:26:f3:37:51:e8:b1:1d:32:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:17:54:22:48:99:C8:76:58:8A:E5:37:85:D9:0E:99:F3:06:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0f5419a0-aad6-3992-afed-5e88980a2de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.23.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:55:0f:d5:9c:5f:74:26:e7:c9:1d:d4:a7:f0:b8:b1:0e:69:
         a5:ad:b3:2c:a4:96:55:31:38:86:29:06:5b:ec:07:5f:bd:f1:
         1c:84:2e:5c:c2:05:1e:a4:d9:93:9b:41:c1:2b:cd:e3:5b:ef:
         3d:b2:1c:ea:f7:e7:32:28:1b:48:89:80:1b:9e:c4:07:fc:74:
         74:f2:30:93:c6:90:7b:55:63:75:30:63:f2:02:97:2d:6e:69:
         a7:dc:ca:11:95:7e:7a:3d:45:b9:7e:3b:50:94:f2:37:50:98:
         c5:4a:53:0f:82:ac:b7:fb:56:8c:ed:52:62:d4:65:d6:6f:35:
         e7:ee:3f:53:ce:4c:61:c0:05:c8:d6:4a:88:60:03:eb:53:15:
         b9:84:85:77:10:79:fc:99:6a:3e:e6:3e:77:d0:6b:2e:dd:3f:
         a5:06:52:cf:9c:67:01:57:d7:6f:13:4c:44:66:50:0c:15:57:
         fc:a9:5b:81:60:b3:da:da:7a:42:1b:f0:29:13:80:41:ad:4c:
         8e:47:77:77:dd:1a:c5:5a:7c:b2:e4:f6:e5:37:11:f6:d5:4c:
         19:52:59:51:b1:9d:b5:9d:3e:03:04:17:95:68:ca:44:72:6c:
         18:ec:79:29:df:e0:f0:2b:c3:97:44:db:34:53:54:93:9a:6a:
         af:cc:0f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:33:40 2025 by rpki-client