Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa
File:                     64e46b4e-3e89-3daf-acc6-52f1fe989879.roa (raw, json)
Hash identifier:          MVml7abIktZ0x36p+6QacMyBfxTOphqh6ufoYaYGrdo=
Subject key identifier:   12:4A:80:F1:A5:32:FB:56:C2:36:B2:51:77:E9:29:52:9B:3A:3D:BA
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A549B129377C6F8241F82A000
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        63.142.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:12:93:77:c6:f8:24:1f:82:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=0b230eea-b95e-4ef4-a2e6-9cd9618ca9fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5c:84:96:26:c8:f8:45:f3:c1:74:6b:11:c5:
                    71:14:23:3f:98:c5:89:1a:a5:50:50:a9:13:53:ac:
                    60:e0:0d:9c:1b:94:c2:55:ee:a6:7a:a1:12:da:42:
                    af:47:97:8e:a4:25:8c:cb:af:19:53:3f:38:c8:e9:
                    c7:cd:07:f3:06:b1:6a:b1:c0:61:97:62:e3:9a:68:
                    da:ce:40:83:80:b7:28:88:62:fc:67:98:fc:3a:9f:
                    98:dc:65:e3:54:27:c1:c9:24:3d:7b:6e:af:e0:c7:
                    a2:cf:45:62:50:d0:5f:69:ac:05:b9:1a:50:2f:93:
                    b6:66:f5:43:e3:49:84:52:50:6b:e0:de:78:9b:4a:
                    e0:3f:48:dd:90:69:a3:10:d9:45:1f:93:fd:da:96:
                    ce:31:d5:ef:b1:9d:3a:e1:9d:b3:04:46:d2:2f:dc:
                    85:52:c8:b8:da:40:53:0b:e6:32:50:5b:0d:f6:5e:
                    65:a8:f0:c6:37:f5:9f:7c:7a:dc:95:87:b8:01:fe:
                    31:d2:72:6b:5a:62:96:9c:2f:11:be:40:51:9f:53:
                    cc:cb:87:ff:4d:ce:42:0c:d4:f0:5b:35:74:a1:26:
                    96:6f:7c:81:16:e0:59:f8:d0:8f:e3:bf:6e:a0:6b:
                    d4:e2:dd:23:f4:80:e8:6d:03:79:dc:b1:ba:9f:e5:
                    3d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:80:F1:A5:32:FB:56:C2:36:B2:51:77:E9:29:52:9B:3A:3D:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/64e46b4e-3e89-3daf-acc6-52f1fe989879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:a1:c5:75:3a:bf:40:21:e3:b8:da:4b:10:95:5c:ae:16:
         6b:24:76:7e:e8:e1:cf:90:0f:29:6f:78:72:4b:26:78:cc:a9:
         a1:29:9c:62:cb:a5:75:50:6c:52:a4:07:41:15:70:94:48:34:
         24:0c:16:3a:42:06:4f:0b:26:fb:71:db:ad:37:54:8c:f1:67:
         bf:72:8a:7d:65:c4:e5:df:81:cb:80:1a:21:88:e9:db:1e:85:
         6d:0b:2b:97:46:2a:71:45:f9:8e:4e:c7:42:09:43:0b:7c:e7:
         1a:d2:0b:58:fc:c0:28:58:b4:48:49:5a:da:04:8c:ae:52:8e:
         bb:c7:b9:ff:f2:66:58:c9:3f:77:b0:77:8d:66:7c:ff:22:fa:
         03:5f:01:f7:b7:1a:86:c3:3f:58:ef:00:3f:25:a1:8d:50:32:
         c0:ec:41:8a:cf:e9:e9:32:bc:15:d9:de:bf:c7:90:4b:40:5e:
         16:c9:b2:67:7e:1f:0a:57:ff:4b:31:9c:25:38:30:7c:09:6e:
         9e:cf:dd:85:dc:60:24:4d:8c:99:55:2c:c2:26:4c:e4:61:a6:
         4a:43:4f:94:3d:08:92:bd:7d:7b:7c:d3:3b:62:83:70:a1:21:
         ef:b6:37:02:57:84:c3:d7:ab:9a:18:f2:4e:96:8d:12:a9:d0:
         5d:51:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:48:42 2025 by rpki-client