Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa
File:                     a5c0f087-7abc-37c1-b2c7-875764b403fd.roa (raw, json)
Hash identifier:          67AoSFHOPiDyF4LzXMZ6z8rbmUs5Mzhd1+x71aIW3gk=
Subject key identifier:   5B:BC:8F:62:47:20:0A:73:70:92:56:7F:F8:C0:7C:4E:3D:62:54:EF
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A698B151CB35E0216AE48E400
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     6984
IP address blocks:        63.23.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:15:1c:b3:5e:02:16:ae:48:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=333ccd95-ac0e-46c6-8c34-446f1b549a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0e:0c:b8:b7:a1:2d:6c:4f:85:e9:b3:f0:bc:
                    10:3d:bc:34:89:fb:b5:1a:92:07:85:d4:68:c6:47:
                    20:cd:80:74:17:39:09:a5:60:ca:b8:75:a2:07:52:
                    6b:7f:e4:a6:af:ad:cc:9e:80:02:8c:66:fd:9f:95:
                    53:e4:6b:1a:7d:b0:53:1d:64:b9:2b:b8:23:2e:ee:
                    00:ba:40:90:a3:8a:64:12:be:ee:f2:f3:18:80:6d:
                    2d:b2:f0:57:5a:e6:26:3e:53:6f:57:7e:98:38:d6:
                    ed:8b:31:dc:88:70:89:a4:af:bb:15:dc:4e:da:9c:
                    5b:9f:80:6c:3a:95:82:f1:b9:18:49:97:42:7c:1f:
                    2d:57:ad:a5:9e:90:3a:5e:18:7e:e3:4f:20:5b:76:
                    b6:90:03:bc:c9:b3:b5:11:74:bd:fb:43:29:9d:eb:
                    3f:1b:91:84:9e:b0:8a:ee:32:e7:f7:bc:e3:64:fd:
                    06:9a:59:10:7c:56:87:47:ed:53:cf:43:0f:f5:a5:
                    87:b8:2e:61:d2:4b:69:7b:be:9a:95:93:de:84:5c:
                    b1:f3:01:65:7d:b3:89:ae:48:0f:05:68:eb:27:24:
                    ea:3d:bf:9b:62:24:d6:96:66:1d:00:f6:af:81:82:
                    38:0a:3f:01:6f:15:25:1e:41:db:56:fd:c7:df:65:
                    da:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BC:8F:62:47:20:0A:73:70:92:56:7F:F8:C0:7C:4E:3D:62:54:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a5c0f087-7abc-37c1-b2c7-875764b403fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.23.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:45:16:dd:4a:6e:07:86:ae:77:a3:d5:17:ed:57:2e:6d:
         1d:a5:da:21:df:3f:91:da:52:54:1d:a4:98:59:e5:6b:af:08:
         d5:82:2d:ac:44:96:92:60:12:30:7f:e0:5b:00:53:7d:c1:41:
         2b:25:53:83:55:a4:d2:a3:3b:1d:30:52:3c:5b:04:39:aa:27:
         de:7b:1a:d6:d6:65:c3:59:d0:cb:2c:1a:92:87:c5:b7:56:cd:
         aa:d2:73:6b:f4:07:6b:d3:60:a2:3a:66:5f:64:56:ff:c0:86:
         22:1b:73:8a:a5:c3:e8:96:e0:8c:e5:ec:c1:b6:8a:2f:f2:c4:
         8b:a8:af:a5:c7:af:9a:8a:e6:0b:71:29:43:71:88:f1:62:00:
         78:fc:1b:7a:aa:f2:ed:ff:d6:69:a0:02:70:89:90:e2:8f:97:
         09:fb:05:cc:82:ee:1b:b4:88:2c:df:75:b4:06:26:5f:67:ef:
         22:ba:5a:e4:7f:7b:eb:3c:af:07:82:54:ca:14:2b:70:6b:bf:
         21:fc:25:a8:d9:3b:f9:bb:e7:7e:53:9a:2b:16:47:db:1a:78:
         b6:b9:9a:98:72:57:ec:87:a3:a4:16:15:8b:7f:21:7d:6a:0a:
         d5:8c:42:e9:76:44:b8:31:e5:9e:af:17:b4:86:ff:fe:80:6e:
         f1:92:9a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 21:57:17 2025 by rpki-client