Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfc8a96d-4cc0-3511-b7cd-8ca9b2778bed.roa
File:                     bfc8a96d-4cc0-3511-b7cd-8ca9b2778bed.roa (raw, json)
Hash identifier:          KLDENnGmX3WuCF/068ShIrax292e9mydQMg8hMVhp6I=
Subject key identifier:   63:C5:2E:7A:BF:1B:5A:6A:3B:54:59:F6:1E:E3:24:CD:7D:FA:81:FB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849DC8FA70391948D0F8E241700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfc8a96d-4cc0-3511-b7cd-8ca9b2778bed.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     30036
IP address blocks:        63.142.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:a7:03:91:94:8d:0f:8e:24:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=0c579ae8-5b52-4c7e-98e4-79783e0907b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:af:bb:df:1d:df:a0:b3:36:3d:47:06:bb:
                    00:4d:c7:33:45:d5:78:c4:00:57:3d:57:1e:a9:31:
                    cb:de:0e:2d:d3:28:2d:6d:3c:07:a8:97:e4:89:98:
                    c1:0b:db:eb:df:85:2d:e3:94:a9:16:3b:5d:e0:aa:
                    96:c8:76:71:85:aa:1c:88:08:b0:85:97:cf:61:d1:
                    d9:36:2c:c8:e6:5d:56:ad:fe:d3:e6:9b:18:0c:94:
                    86:56:e1:65:ce:d7:ec:cc:a5:f5:59:e8:3c:9f:2f:
                    c0:0f:d5:39:83:84:ad:6e:84:26:93:ca:0e:cd:2f:
                    f7:a1:80:56:d5:50:6b:75:f5:85:56:b4:0f:8f:59:
                    25:8e:be:92:3c:68:94:04:50:97:c1:0f:ca:bb:68:
                    c9:36:52:7a:25:d0:b2:e9:eb:30:43:e5:8c:16:48:
                    0a:72:34:e5:ee:7e:33:2b:33:c7:dc:10:82:c2:71:
                    68:01:f2:bf:62:49:3b:91:dc:1a:ec:8f:7d:cc:b4:
                    f9:45:69:01:52:9d:56:98:58:46:1f:57:bc:30:ed:
                    08:bc:fc:2d:7b:e2:d8:43:b4:a4:78:da:c3:08:0f:
                    4c:b7:37:c3:6c:a0:5e:1a:57:ba:cb:0e:88:25:de:
                    07:ea:77:3e:35:8e:56:88:2e:5a:e9:cf:99:8f:29:
                    9a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C5:2E:7A:BF:1B:5A:6A:3B:54:59:F6:1E:E3:24:CD:7D:FA:81:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/bfc8a96d-4cc0-3511-b7cd-8ca9b2778bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:55:0d:60:04:c9:09:2e:ae:b0:df:ab:b0:6a:9c:64:e9:
         68:8c:8d:91:43:3e:05:46:63:5b:de:8d:10:b0:95:b8:3f:58:
         79:80:b3:c4:73:9a:a6:62:65:80:a2:ac:60:90:57:2c:1a:ba:
         76:14:91:7d:89:82:33:2a:90:8f:bd:78:78:d8:a9:97:fb:37:
         32:59:b7:43:f0:1f:0b:e4:43:db:0f:aa:36:27:dd:94:e5:a3:
         bc:cd:ab:49:b9:aa:c9:36:e5:16:ec:c0:d9:86:58:b5:da:af:
         8b:dc:5c:47:8e:08:3e:3e:ab:07:99:da:9c:ed:80:b0:95:fd:
         a7:7b:5a:ba:eb:92:c5:d6:18:3a:b5:9d:92:da:de:73:f6:98:
         3f:dd:95:a8:b9:17:af:87:85:6e:e7:4d:29:eb:24:85:53:2b:
         52:ca:de:0e:17:89:51:04:51:eb:84:d8:3f:41:e0:9d:09:30:
         61:1b:2d:6f:38:42:f5:2f:d0:79:cd:26:78:89:06:1d:2c:27:
         2e:30:49:94:b6:0c:7a:5e:5f:d2:4e:bc:8f:3d:bf:51:12:9b:
         f1:16:64:4a:89:19:e6:64:ea:8e:00:61:22:55:7d:58:50:2f:
         03:27:2e:c4:66:43:c7:32:67:fa:15:08:3c:31:84:f4:8f:e4:
         10:61:33:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 08:58:10 2025 by rpki-client