Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa
File:                     768b4f71-60ba-3bde-a104-888414103d2f.roa (raw, json)
Hash identifier:          mZp5KGYNx17yDtny77fSWltmxl98Mwa/rmRGbDLwh5U=
Subject key identifier:   34:D8:30:77:55:1F:BA:C7:57:B0:D2:2C:68:A9:2F:F9:72:2C:77:4E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849C42DA7353C1E05E0C9AC2700
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa
Signing time:             Tue 06 May 2025 19:24:15 +0000
ROA not before:           Tue 06 May 2025 19:24:15 +0000
ROA not after:            Mon 04 Aug 2025 19:24:15 +0000
asID:                     0
IP address blocks:        63.125.88.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:2d:a7:35:3c:1e:05:e0:c9:ac:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May  6 19:24:15 2025 GMT
            Not After : Aug  4 19:24:15 2025 GMT
        Subject: CN=6d0c7f83-a109-465f-bc0f-c58cb8743bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:e3:27:a7:3f:76:97:a1:d1:2b:28:fa:3b:
                    7a:87:89:3b:ad:e2:80:be:09:d8:5b:34:e6:11:25:
                    52:ce:ba:db:3d:d4:2c:86:c9:99:85:b6:f8:76:40:
                    96:22:2f:40:d8:37:3f:28:0f:e8:ac:b2:db:b4:1c:
                    5f:4c:8e:3c:cd:a9:00:f8:a2:ba:5b:24:13:eb:ad:
                    0b:9b:ba:38:e2:f6:c5:be:d6:f1:7d:ea:b2:bf:23:
                    ba:8f:c0:22:c6:e8:b5:0f:da:4f:78:0f:ec:7d:7c:
                    88:0d:ee:37:d4:c1:30:f8:dd:84:4a:bd:9e:cd:ec:
                    82:0d:10:4f:12:83:26:c2:53:ba:67:6a:7f:7e:b2:
                    92:56:bb:46:6c:0e:22:ff:0d:a4:75:c7:88:4a:89:
                    27:46:3b:6e:30:5d:ce:58:e3:82:74:cd:c5:33:5a:
                    72:45:e1:1a:67:0a:df:a6:70:4b:aa:5c:ec:57:c9:
                    64:e2:a5:9b:1f:47:1c:11:48:f3:4b:51:17:21:e4:
                    6e:a7:71:de:e9:e8:77:3d:96:4e:4f:ed:be:76:2b:
                    fc:b7:ea:4c:6b:b8:d0:01:93:e3:2e:c4:ea:39:27:
                    b6:b5:a8:03:4a:e1:7a:e2:ec:ad:5c:21:9f:55:e6:
                    31:8d:3f:b8:97:8c:70:5f:53:81:47:3e:f2:d4:93:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:30:77:55:1F:BA:C7:57:B0:D2:2C:68:A9:2F:F9:72:2C:77:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/768b4f71-60ba-3bde-a104-888414103d2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.125.88.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:be:3e:75:bf:05:f9:78:d0:b8:b5:ce:18:f9:e0:a6:ef:c5:
         a3:30:97:ad:a1:98:18:08:f7:83:bd:ea:df:85:bd:91:ea:83:
         f1:41:d5:82:7b:49:28:78:ea:0f:5c:7b:4f:35:ab:e0:f3:5d:
         2c:c5:67:bc:38:f8:37:c2:e5:79:1a:c2:91:e2:9c:b4:92:62:
         61:5c:65:ab:53:67:db:f2:e1:d7:c1:b8:14:93:42:c5:cb:83:
         8f:57:cc:ab:ad:19:2e:6f:61:3d:a8:31:70:a1:47:f0:a7:a0:
         7f:d0:71:8f:57:43:73:ed:5a:1f:18:ae:af:87:8f:0a:db:59:
         6b:05:8c:8e:6d:4b:d3:7c:1a:08:9d:18:3e:a7:aa:29:b3:90:
         d8:9d:08:94:bb:9b:f9:a3:1f:5c:17:a7:2f:88:43:85:e9:91:
         51:86:1c:11:a0:e7:60:76:69:78:f7:4f:14:8e:bd:bb:29:98:
         ee:f0:e9:35:7c:d8:cd:64:d0:c4:28:e0:12:55:31:c5:3e:91:
         84:42:b9:fc:95:4a:dc:15:e1:c2:d1:10:aa:4d:a2:96:5c:64:
         14:38:15:3f:1b:28:d6:75:1f:84:2b:1d:ad:8e:ec:7a:92:24:
         c9:66:5a:51:8b:ec:eb:18:3b:b8:cd:b5:c3:db:a6:bc:c9:21:
         37:0b:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 22:07:58 2025 by rpki-client