Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
File:                     631455e7-4f9a-3411-b724-56b44cd3c3be.roa (raw, json)
Hash identifier:          7kZAnH7BdxBwizO/hKAhCdNdvPE1Iwl63s8vMMPwaJs=
Subject key identifier:   7F:F8:9D:83:83:3E:60:67:F4:F0:60:62:CA:D7:25:99:64:5A:2B:A2
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F43285849B6DF518F7B0A71140A074840
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     23520
IP address blocks:        63.245.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:51:8f:7b:0a:71:14:0a:07:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=334c7ea1-4ad4-4185-90ca-be546194cf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:eb:5f:ca:16:04:a6:1a:24:2b:bf:ce:81:fc:
                    b8:a8:62:47:2e:e5:d3:68:e0:6e:49:38:07:2b:53:
                    69:07:19:95:52:fe:19:1a:cd:19:51:ec:e4:a9:9e:
                    42:0b:d6:e7:db:37:00:8f:6d:3f:5c:0b:ec:9a:b8:
                    83:08:54:3c:90:2a:4f:8e:71:1b:48:e4:a1:86:74:
                    cf:7a:e6:7f:d7:5b:61:e8:ea:09:bb:ab:1c:b3:e2:
                    d6:d5:6a:4f:19:65:2e:dd:3a:57:1d:9a:1c:fb:14:
                    ab:70:2c:ba:8a:ca:38:a5:16:ba:a6:86:d3:9b:5b:
                    3e:20:59:82:f9:b5:4a:d5:88:63:d2:67:1b:09:9b:
                    14:6e:1a:08:65:c9:f8:e0:e1:bc:59:fa:3d:d0:c3:
                    49:18:21:82:aa:5e:d0:4b:04:6d:fe:ec:d0:c9:92:
                    6d:b0:2e:9d:79:2f:e0:ca:21:9a:52:3e:4d:bb:49:
                    5b:4e:02:24:73:6f:60:e5:46:0a:bf:60:02:e3:6c:
                    96:9b:fb:fa:12:a8:f8:3b:6c:89:19:5b:25:23:e9:
                    c4:42:73:87:a5:9f:3c:d4:29:24:27:c4:38:c1:c4:
                    de:44:44:7c:ef:53:fe:55:10:43:d4:ad:1a:ca:6e:
                    6c:97:4a:6c:c0:37:22:0b:b7:d2:50:17:ff:73:3b:
                    dc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:9D:83:83:3E:60:67:F4:F0:60:62:CA:D7:25:99:64:5A:2B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/631455e7-4f9a-3411-b724-56b44cd3c3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:17:e1:8e:75:6a:15:3e:d2:fc:51:c0:6b:78:9c:fb:8d:07:
         0b:24:b8:95:16:b2:bf:d8:e3:3b:18:de:5c:af:59:01:ec:20:
         e5:b6:ee:42:16:0a:97:98:bd:ce:6d:92:2d:20:a3:1b:5c:68:
         b6:f3:1d:90:33:bf:d6:40:a9:df:8f:44:67:3d:a3:c3:2d:fd:
         3a:80:ae:64:2a:8f:84:05:73:b1:ab:24:c3:6f:e2:06:96:75:
         83:0b:62:e1:7b:12:34:c1:d0:ff:24:f7:bb:6d:ce:ed:6a:13:
         c6:af:fd:46:e4:9a:6e:43:bd:3f:ce:83:49:b4:8f:8c:c3:6b:
         e3:2a:90:43:d0:20:1c:b0:72:ac:4a:5b:88:df:e5:37:85:27:
         90:09:c4:bf:e2:86:e4:0e:fe:f1:18:95:23:9d:f9:c3:96:d5:
         16:a6:7e:8e:10:ac:81:8d:fa:ce:86:cd:21:28:11:69:c9:59:
         2b:2a:dc:2b:aa:90:f8:43:8e:52:b1:c3:ed:20:6b:86:c5:b9:
         ff:45:7c:18:8d:c5:39:32:c3:aa:90:49:a2:62:43:26:d0:d5:
         31:54:b2:ef:8c:c9:91:ac:81:4a:2b:61:b8:e5:b0:ee:4c:46:
         cd:95:a4:31:ab:6a:0b:54:0b:ae:e8:f2:e5:a6:cd:d8:c9:81:
         40:1d:64:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:20:12 2025 by rpki-client