Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa
File:                     7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa (raw, json)
Hash identifier:          c07w0XffIx6JcmIUS6FGtjqaKJhWEhohGVvOPErzgwo=
Subject key identifier:   94:FE:91:D2:91:71:18:31:89:B6:2A:4E:15:6A:86:ED:6A:7F:25:4D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B176264C4D71420108100
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     6984
IP address blocks:        63.27.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:17:62:64:c4:d7:14:20:10:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=07d1dd3e-6fb9-407a-b6bc-70eeb20273a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:25:4c:6e:aa:f5:6f:81:ac:bc:b0:a8:94:
                    78:a3:15:37:81:3c:f8:8e:07:2e:fa:f5:2d:e1:3e:
                    f1:e2:01:ad:b5:22:7d:8c:d3:4c:75:e5:df:08:e5:
                    32:13:31:b9:bb:29:1f:90:23:f2:92:2b:4b:8e:c9:
                    13:ee:ee:ef:5a:49:d8:98:cf:8b:f9:6a:be:f3:3a:
                    2c:17:c4:25:55:ca:5b:e5:23:84:45:d8:02:3f:ce:
                    1d:58:f4:ce:a5:7e:93:75:7c:b2:9f:ce:51:f2:80:
                    0c:cf:00:a4:1d:03:77:80:40:92:17:06:f1:fc:86:
                    2a:93:26:9c:4c:25:cb:b1:d3:ee:98:5a:02:25:6e:
                    93:78:dd:bf:02:cd:ef:41:0b:fc:5a:44:3c:21:ce:
                    72:9e:7e:36:9e:7d:f5:fc:fc:ed:5d:da:f3:db:2b:
                    3f:ac:ba:45:19:df:68:2c:43:96:c0:d4:8a:08:2a:
                    dc:31:37:9a:cf:8b:62:4a:7b:e9:ad:24:1f:80:95:
                    ba:5f:43:7b:77:8f:63:76:43:31:14:50:1a:c1:ad:
                    00:00:e5:15:a0:3f:e1:3b:00:24:ff:91:b3:a7:6a:
                    b2:ea:7c:27:97:13:00:d1:9a:9c:c9:90:6a:1a:fe:
                    fb:f8:6c:7a:00:98:69:89:bf:fa:d6:9b:63:01:02:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:91:D2:91:71:18:31:89:B6:2A:4E:15:6A:86:ED:6A:7F:25:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/7a10e30a-1e66-3d95-99a6-10e997ffb61d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.27.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:cc:f5:fa:93:fb:ea:ee:3e:58:27:9d:f8:74:a8:50:e7:e5:
         98:2c:ee:36:10:65:15:d3:ea:54:6a:c5:0c:0c:db:4f:c7:1a:
         d6:c1:6b:0e:08:a9:a5:c6:4a:56:75:4c:7e:82:81:37:ff:f1:
         8e:c2:4b:b5:ae:a1:a7:31:b5:f4:d5:83:ab:64:a1:d8:ba:9b:
         b1:1a:5f:0c:58:52:be:d2:ea:08:9a:c0:29:25:06:e7:b9:04:
         47:c1:65:bb:ec:ac:d8:7a:c6:7c:03:b5:2f:7b:22:95:83:05:
         d8:99:1d:23:6d:a6:00:9f:89:42:6b:2f:0e:cf:3d:0f:c7:4f:
         9c:21:a8:7f:7b:24:42:ea:59:33:6b:c1:0b:8d:52:1e:f1:e4:
         51:c9:eb:9b:52:5b:c7:f5:c9:b7:00:58:d1:07:29:dd:7f:4d:
         01:9f:af:6d:13:6a:af:28:b1:00:59:85:df:fb:1e:42:d4:c6:
         88:28:dc:e5:1a:84:07:26:9c:ff:ab:a8:ed:93:3c:80:d4:6e:
         c3:86:cd:73:40:1d:44:4d:e0:7c:17:8d:07:1d:57:7b:19:53:
         9f:3d:d5:16:da:32:1e:a8:db:44:cd:8d:3e:c6:8f:64:83:3f:
         2e:dd:17:cb:5f:3f:aa:13:25:9c:c1:d5:18:79:8b:81:b7:93:
         9d:03:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 20:35:42 2025 by rpki-client