Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f41b439-a070-3789-98c8-0300156f5fed.roa
File:                     3f41b439-a070-3789-98c8-0300156f5fed.roa (raw, json)
Hash identifier:          FTpyhm1PJqIQ50M44OK6AcpoSaNJ/xS2xzS8QRV16/o=
Subject key identifier:   36:17:30:EE:7E:BC:47:06:48:68:74:04:73:C9:AD:1D:FA:AC:CD:B6
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B15BFDD4B2C03746F13A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f41b439-a070-3789-98c8-0300156f5fed.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     6984
IP address blocks:        63.24.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:15:bf:dd:4b:2c:03:74:6f:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=5ece654d-9b4b-4b6f-b7a7-8cc9e725acca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ba:12:4e:26:a2:c9:44:4b:ea:a1:fd:cf:48:
                    72:91:3b:0e:f2:5a:3c:91:79:1e:98:72:f8:36:c4:
                    f2:a6:2b:70:68:71:bc:77:00:fe:0e:ff:79:40:df:
                    cc:82:42:33:4a:4d:bd:2a:2b:d4:46:54:ef:3c:9a:
                    84:20:c4:c2:16:24:5f:c1:3e:88:ae:e8:94:09:f2:
                    12:4e:7f:2a:4f:07:0b:8b:b2:c2:11:a1:31:04:76:
                    69:69:1c:1b:41:d6:a1:31:56:18:3c:40:73:85:40:
                    eb:33:46:03:50:2e:f7:a2:95:96:a6:a4:a1:7f:db:
                    ec:83:13:0d:b7:e7:3f:80:0b:4b:16:66:32:7c:9d:
                    1d:6a:65:5a:85:1a:ec:6d:1e:fa:ac:79:77:69:ad:
                    b4:30:b2:cb:b9:89:8c:4c:9c:98:2d:f5:db:7d:4c:
                    3c:a0:5b:17:fc:3c:33:7c:b6:f6:52:c9:5f:dd:de:
                    1a:46:ff:a9:d4:4a:09:57:1c:e2:fc:75:60:b0:69:
                    cd:5a:9b:32:ed:b1:b8:49:26:a4:22:f2:c1:39:d4:
                    c8:03:c2:b7:a8:c9:da:85:79:60:c0:7e:b7:d8:33:
                    38:9c:06:2a:15:93:c2:e4:29:6a:92:8b:e2:51:c8:
                    b8:01:bb:b1:77:7b:ae:33:ca:d8:f5:d9:c0:17:47:
                    5a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:30:EE:7E:BC:47:06:48:68:74:04:73:C9:AD:1D:FA:AC:CD:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3f41b439-a070-3789-98c8-0300156f5fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.24.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:44:b9:2a:01:b4:4c:6a:65:86:b7:32:84:91:97:8d:04:7a:
         f0:08:77:49:11:49:d2:92:8c:ef:b6:05:f7:25:35:74:ca:3a:
         20:97:bb:5d:e6:bb:6b:0b:6d:88:25:69:b9:1e:c0:2f:b7:40:
         a7:b4:66:29:7b:3b:18:9c:cf:e7:8e:94:4d:f4:56:24:7d:93:
         c7:f1:70:54:9b:f8:93:71:4c:57:30:3b:b3:2e:e8:2d:cf:18:
         9d:54:58:b4:f6:79:a9:49:43:0d:61:59:a9:70:55:07:65:69:
         6a:3e:ba:88:dd:cf:99:36:c3:32:f5:ca:1d:cb:c5:00:40:0a:
         b3:24:8c:0e:f1:da:75:89:a4:74:55:bc:28:76:8c:c5:7d:8b:
         70:c2:1a:9e:92:cb:71:8d:be:97:05:e8:1a:d5:42:9f:5c:eb:
         b7:3a:ea:73:fb:f4:6c:64:55:3c:b9:b4:2b:fa:39:41:88:5f:
         d2:d8:fe:74:f4:26:6d:ea:2e:95:fb:ed:ca:6d:66:2b:88:ed:
         d3:3d:7c:f4:87:7e:6c:53:12:61:75:56:3a:b2:9b:7d:e1:9a:
         e3:f8:a7:4b:c6:d8:4e:52:b9:0d:62:bf:2b:0d:41:6d:3d:b5:
         99:3b:3e:3e:1f:8b:7e:84:62:0f:d3:bd:64:85:eb:e1:d9:58:
         21:f2:69:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppixW/3UssA3RvE6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
NWVjZTY1NGQtOWI0Yi00YjZmLWI3YTctOGNjOWU3MjVhY2NhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7oSTiaiyURL6qH9z0hykTsO8lo8kXkemHL4
NsTypitwaHG8dwD+Dv95QN/MgkIzSk29KivURlTvPJqEIMTCFiRfwT6IruiUCfIS
Tn8qTwcLi7LCEaExBHZpaRwbQdahMVYYPEBzhUDrM0YDUC73opWWpqShf9vsgxMN
t+c/gAtLFmYyfJ0damVahRrsbR76rHl3aa20MLLLuYmMTJyYLfXbfUw8oFsX/Dwz
fLb2Uslf3d4aRv+p1EoJVxzi/HVgsGnNWpsy7bG4SSakIvLBOdTIA8K3qMnahXlg
wH632DM4nAYqFZPC5ClqkoviUci4Abuxd3uuM8rY9dnAF0dahwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDYXMO5+vEcGSGh0BHPJrR36rM22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2Y0MWI0MzktYTA3MC0z
Nzg5LTk4YzgtMDMwMDE1NmY1ZmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPxjNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZEuSoBtExqZYa3MoSRl40EevAId0kRSdKSjO+2BfclNXTKOiCXu13m
u2sLbYglabkewC+3QKe0Zil7Oxicz+eOlE30ViR9k8fxcFSb+JNxTFcwO7Mu6C3P
GJ1UWLT2ealJQw1hWalwVQdlaWo+uojdz5k2wzL1yh3LxQBACrMkjA7x2nWJpHRV
vCh2jMV9i3DCGp6Sy3GNvpcF6BrVQp9c67c66nP79GxkVTy5tCv6OUGIX9LY/nT0
Jm3qLpX77cptZiuI7dM9fPSHfmxTEmF1Vjqym33hmuP4p0vG2E5SuQ1ivysNQW09
tZk7Pj4fi36EYg/TvWSF6+HZWCHyaYY=
-----END CERTIFICATE-----
Generated at Wed Jul 9 21:46:03 2025 by rpki-client