Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e47d51-accc-3bd6-9632-bfea98439ab2.roa
File:                     f9e47d51-accc-3bd6-9632-bfea98439ab2.roa (raw, json)
Hash identifier:          1Ti+MG4ZNUsHWv8G9CpX2NzTp0kKKtLHysxLDxlK9Rk=
Subject key identifier:   D2:EC:ED:45:FB:89:A4:2B:65:91:C7:AE:7A:D3:B6:86:0C:9B:E1:96
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584A549B1278E34EB7DCB31A6440
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e47d51-accc-3bd6-9632-bfea98439ab2.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     30036
IP address blocks:        63.142.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:12:78:e3:4e:b7:dc:b3:1a:64:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=5fb6699e-2f94-4161-a2a0-fc9ed9628055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:80:23:b3:9d:61:f1:dc:16:ff:be:4d:73:
                    79:47:a8:17:e5:43:35:3b:15:49:f9:e0:cc:4a:a9:
                    fc:43:2d:0f:52:cc:70:99:83:0e:2b:47:9c:7f:33:
                    0b:9f:c2:3f:bb:63:1c:c1:d9:13:16:82:c9:70:0b:
                    b7:bc:af:ba:8f:2b:73:fd:ce:10:97:48:db:0b:f9:
                    a5:63:a5:23:7d:cc:cf:f3:50:bf:44:cf:e8:54:e9:
                    10:aa:21:fc:83:d7:d9:1f:88:f5:11:34:05:b5:f6:
                    53:83:9f:da:93:e8:f2:bd:f2:67:68:58:84:24:e6:
                    0b:10:a2:4f:07:af:94:1b:dd:4a:74:c8:af:f3:cb:
                    47:9e:d9:eb:c8:56:fe:9a:e8:f6:95:4a:3d:d0:4c:
                    0f:e4:ce:85:3e:aa:25:19:ac:5f:a9:45:be:4f:e5:
                    43:e0:51:5d:8b:5d:9d:a3:1b:14:b7:b8:5a:85:18:
                    b6:17:e4:ef:1e:94:1e:26:2c:12:74:82:11:6d:57:
                    ea:6b:89:22:45:80:dc:45:54:ee:43:9c:65:ac:4d:
                    0c:4f:a3:f0:c1:58:35:cf:80:3d:2c:6c:9f:c8:28:
                    fe:de:c9:3e:b6:61:76:bc:81:7d:cb:21:58:28:34:
                    8e:81:22:87:af:c9:08:1a:83:5e:dc:0d:47:bf:fc:
                    9f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:ED:45:FB:89:A4:2B:65:91:C7:AE:7A:D3:B6:86:0C:9B:E1:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/f9e47d51-accc-3bd6-9632-bfea98439ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.142.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0b:69:95:f1:72:32:9d:62:ce:cc:2b:34:a1:4e:cc:41:3a:
         cb:b0:2d:45:94:79:79:05:2d:57:5e:60:f1:b6:b0:80:1a:24:
         d6:2e:4c:06:1b:b5:e1:d5:95:bd:76:f4:a9:0f:45:f7:93:7e:
         db:5f:d8:fd:bd:51:9a:a0:3b:c7:b3:67:1d:c6:03:0f:75:f9:
         8b:3a:bb:10:e4:96:ad:83:c8:fc:18:98:cb:37:73:71:ec:5d:
         0b:2e:74:76:81:ea:55:ab:bd:a2:6d:d3:5e:e1:fd:56:f1:5d:
         fc:fd:ef:b6:c5:41:4b:1e:06:f6:a9:5e:61:0d:89:55:e8:1d:
         cd:7b:dd:52:9b:35:14:08:88:f3:1a:1a:a0:6b:32:06:81:89:
         9e:f9:73:71:55:45:8f:98:c3:a4:ea:e6:31:f4:23:be:3d:66:
         20:eb:de:6e:7f:c4:af:18:58:8c:92:f1:d2:b9:5c:28:d1:98:
         15:9f:90:9d:5e:73:b4:a3:d1:ab:cc:35:76:74:da:56:bd:07:
         fd:80:f7:83:da:92:f6:5a:94:a1:ec:3e:d2:ad:23:fa:3d:1e:
         89:c2:c7:a7:9d:60:cc:b8:89:2c:88:c9:a7:08:25:8b:c2:fe:
         33:30:5a:83:47:cf:bf:cd:b5:fe:29:0b:09:48:be:34:eb:73:
         3c:f6:b4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:29:34 2025 by rpki-client