Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e744cc-f745-3e01-b922-1d097f0dcda9.roa
File:                     18e744cc-f745-3e01-b922-1d097f0dcda9.roa (raw, json)
Hash identifier:          f/4suvdaKq0X1wQqPm39fDZLP4hUvcnl3PSs+3AknTA=
Subject key identifier:   3A:2C:41:30:E3:8E:58:9F:E2:D2:03:DC:7A:04:29:32:DB:30:04:72
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584949FE996DD8CEC7A3C8D8B4C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e744cc-f745-3e01-b922-1d097f0dcda9.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     6167
IP address blocks:        63.47.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:99:6d:d8:ce:c7:a3:c8:d8:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=2afa333a-c5bf-4eaa-948a-e37e38023320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:e4:5a:8f:78:5f:a1:b2:57:66:15:8c:ea:
                    44:59:7a:b5:29:85:0d:d9:68:0c:e4:43:36:ef:c4:
                    fb:23:d6:63:bc:bd:c7:6c:c1:77:60:b2:4b:99:77:
                    5c:c3:59:24:9c:75:f9:e6:aa:c0:21:5d:2d:51:e7:
                    33:b5:0f:1e:81:b3:5f:ad:e9:33:af:39:a0:e1:22:
                    24:fc:f8:63:f5:78:87:ba:2a:5e:9e:0e:46:56:af:
                    ad:98:74:a4:90:32:f4:a7:95:fc:7e:ab:f0:07:ad:
                    ff:fc:21:98:26:4e:ec:5f:e2:2d:2f:6c:d3:50:ab:
                    a1:59:c9:e7:7e:1e:7a:cd:04:47:89:d6:bc:2b:ad:
                    69:24:9e:d2:21:06:61:6c:2c:3e:92:02:30:ce:0c:
                    c7:a7:bb:05:44:61:12:02:f1:f8:41:e8:8b:7f:79:
                    7b:7f:f5:e9:44:52:82:96:ea:36:e3:10:10:00:b8:
                    49:b3:ec:3d:a6:9a:ed:e8:47:ac:8c:df:cd:20:83:
                    06:3a:ef:62:82:a6:32:2f:8e:e5:6c:7f:f9:f9:02:
                    62:28:aa:ac:2e:a8:9d:25:76:04:a4:2c:52:47:ae:
                    c1:38:8c:23:76:24:c8:69:be:ea:5c:6d:cc:e6:ad:
                    fb:71:40:9d:94:2b:68:65:bc:79:c4:86:aa:49:d2:
                    55:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2C:41:30:E3:8E:58:9F:E2:D2:03:DC:7A:04:29:32:DB:30:04:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/18e744cc-f745-3e01-b922-1d097f0dcda9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.47.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:f6:3f:8c:41:f5:52:5b:1b:bd:04:a1:29:91:5a:4f:a4:
         34:42:8f:1f:94:fa:bc:75:da:17:47:62:ee:c6:23:5f:ef:d7:
         28:90:8a:32:fb:83:5c:d9:35:85:3a:9f:ea:d6:ae:7e:51:13:
         f2:7e:d8:d4:b8:10:53:b3:78:20:58:fe:41:2d:43:36:0d:74:
         71:32:04:4a:27:4d:94:85:93:c5:f9:51:04:b2:0c:58:5f:da:
         f1:8f:eb:62:65:ec:9a:ca:64:6b:7b:d2:92:5a:97:55:13:bb:
         e0:77:d6:e0:d7:92:88:f5:bf:c9:8e:7f:71:d3:94:9f:0f:28:
         84:86:42:59:66:b4:97:f8:94:25:a5:db:d5:6b:d5:91:73:e7:
         be:ae:bb:25:3b:8f:85:2d:3c:32:cf:c1:ba:12:e5:47:81:83:
         ae:6b:58:8f:fc:ea:be:5f:08:92:a9:d3:ba:20:dc:7c:da:e2:
         6b:df:86:6d:e1:53:71:64:38:23:84:0f:e2:ad:14:5e:a7:89:
         d9:87:99:8c:90:c4:06:b7:bc:90:99:e6:a8:a4:f6:f2:13:c2:
         2e:9d:99:e1:5a:dd:49:8f:ee:83:c7:56:e2:a0:9f:22:81:ec:
         eb:44:18:95:5b:86:0a:21:ba:38:f8:a4:58:25:81:f6:4a:84:
         15:43:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:09 2025 by rpki-client