Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa
File:                     7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa (raw, json)
Hash identifier:          YJqSRIr+r+f7FXIwVvkNk+s/weq8TRY6w3u4YIh94Lc=
Subject key identifier:   97:CD:42:42:3E:1D:E6:DA:B1:10:F7:42:0F:36:E1:55:A2:48:F0:5A
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584A146561CFF42405A0472BD580
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     400317
IP address blocks:        63.160.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:61:cf:f4:24:05:a0:47:2b:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=afade8e1-c99b-4e4a-9e2d-83fcff3919f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:42:87:0c:a9:d1:90:fe:72:6b:7e:a9:c8:
                    74:78:3c:ef:60:be:5f:a0:d0:2e:69:4e:a5:cd:1f:
                    93:ad:42:ae:6d:4a:e0:74:5c:86:f0:89:b6:e1:9c:
                    fc:1b:f4:41:d2:d0:90:26:6e:2d:9a:65:cc:0c:80:
                    27:a3:33:46:88:9d:3d:df:23:3e:54:e5:f6:3f:da:
                    5b:32:a7:dc:f8:1a:de:88:b1:84:a6:a2:d6:10:87:
                    2e:d9:7d:11:cc:ef:18:1d:73:0c:67:b8:88:61:ce:
                    2d:ca:e5:18:f6:53:58:d3:09:97:86:59:f6:ab:d8:
                    76:d8:9e:bd:ee:a2:73:ac:17:f8:16:f1:6e:60:57:
                    ea:8b:9d:71:f4:29:f3:b8:4c:be:d8:6f:cd:65:67:
                    33:e7:aa:ba:a8:19:1f:2f:14:1d:cc:b8:49:4c:9c:
                    bd:2a:b7:d9:19:16:d9:14:8f:27:1c:48:24:1c:0f:
                    4f:37:62:65:e4:83:9f:a7:30:fb:46:0b:01:8b:cb:
                    83:ab:cf:8c:bf:f8:96:3e:d3:2e:a7:b1:cd:1e:1a:
                    bd:68:b8:bd:df:f3:5c:bb:33:d2:c9:c5:0e:99:44:
                    b3:3a:de:3b:21:6a:56:29:af:ff:dc:0e:bd:00:e7:
                    a3:37:c0:a0:76:8e:bf:99:88:eb:e8:13:27:aa:d9:
                    0e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:42:42:3E:1D:E6:DA:B1:10:F7:42:0F:36:E1:55:A2:48:F0:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/7e5d60ed-5daa-3e56-91e1-1395f24bdb91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f9:55:81:bf:c2:80:20:f8:a8:c6:8f:77:09:47:34:2e:ab:
         60:d9:e5:38:bd:16:b6:50:c6:f9:27:2f:72:89:45:8f:72:aa:
         b1:d2:e4:c9:c8:d5:81:20:6a:d7:d8:f5:18:cb:77:0a:33:87:
         c9:42:21:1d:c9:03:d9:75:4a:b7:53:17:62:32:c4:ee:e8:eb:
         75:ea:0a:d0:f4:7b:6a:83:e4:c4:0c:6c:67:f6:2e:96:60:e8:
         dc:ec:27:8c:0e:55:4d:77:4e:d1:ec:fa:ef:10:61:a0:3f:9d:
         c2:c9:64:b5:1f:82:b4:0f:21:f8:f8:a4:bf:d9:bd:4d:0c:4e:
         f2:67:ee:40:be:f3:13:f4:08:34:5f:9f:0d:d6:21:53:5c:3c:
         af:f4:0d:c3:71:de:2a:c2:95:d2:bf:a5:6d:72:96:35:5d:30:
         d6:b3:e4:8f:0d:55:00:6d:d4:ef:c9:24:0d:0d:d4:7b:08:a3:
         9e:61:06:c0:c7:e2:33:8c:7f:59:fd:e0:d9:fb:50:3a:3e:01:
         0f:fe:57:62:fc:ee:54:22:63:92:01:36:c2:6d:84:91:41:47:
         6b:8c:a8:ad:32:71:55:23:fa:ba:48:1a:94:fe:dc:91:98:fc:
         56:54:a4:00:c4:21:67:33:c2:fa:02:0e:8e:72:57:4b:27:ab:
         3e:fa:fa:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:01:45 2025 by rpki-client