Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/46771510-42af-37b3-9bbe-d0ae52b3c2b8.roa
File:                     46771510-42af-37b3-9bbe-d0ae52b3c2b8.roa (raw, json)
Hash identifier:          tsiCSs6n+02meoc6E2s2Ltf01JjX7ZP2X3m8kaFMT9o=
Subject key identifier:   81:72:14:EB:17:FB:FF:5C:14:9A:04:D8:92:74:83:3A:A8:01:34:65
Certificate issuer:       /CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
Certificate serial:       010D0C9F4328584A3A1586C6701BC4BFEC8B4780
Authority key identifier: AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/46771510-42af-37b3-9bbe-d0ae52b3c2b8.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     17675
IP address blocks:        63.251.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:86:c6:70:1b:c4:bf:ec:8b:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae465c0-2a10-495a-b7d2-2aa048b286a0
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=5ac9a358-ed82-4871-8df8-f6037b51ce65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:25:af:21:1f:f5:f7:b0:94:78:68:15:69:e6:
                    ef:55:ef:84:63:b8:36:70:7d:99:a8:1f:2c:b5:90:
                    d5:55:db:32:1b:71:6c:39:35:51:79:9b:a3:40:a5:
                    b5:e7:55:f2:ff:4f:ce:4e:3e:e0:1d:82:3d:c8:de:
                    78:d1:70:ee:ae:5d:e8:4f:79:f7:f7:c1:31:d0:ed:
                    10:b5:1c:9d:df:20:72:32:81:5a:62:0f:92:6b:10:
                    9b:c2:75:a9:aa:6c:0c:d3:19:e0:f9:e2:eb:61:eb:
                    68:76:02:36:e4:95:3a:42:dd:3b:90:69:e2:3c:1e:
                    4f:ed:c0:b2:04:ac:97:b1:76:ec:f2:02:cb:be:87:
                    d6:9f:30:29:84:3b:d8:84:03:77:68:d8:a5:e1:26:
                    72:f0:1f:03:21:43:5a:09:5c:b1:c5:6d:01:ee:99:
                    b8:1e:6e:7c:33:2e:32:20:8a:85:19:92:a9:20:c1:
                    ff:dd:70:78:43:73:5f:bf:85:8b:0e:30:1f:9b:45:
                    e5:8d:74:44:cc:2e:79:a5:2e:23:d0:f3:6a:49:0b:
                    c9:de:fc:89:5e:d3:82:b7:07:42:53:00:62:99:62:
                    1f:f9:c8:82:06:d9:ac:33:97:38:9a:06:82:cf:a0:
                    fc:16:09:a1:41:24:a7:a7:0e:32:b2:d4:e5:eb:8b:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:72:14:EB:17:FB:FF:5C:14:9A:04:D8:92:74:83:3A:A8:01:34:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/46771510-42af-37b3-9bbe-d0ae52b3c2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0/aae465c0-2a10-495a-b7d2-2aa048b286a0.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F1:A5:1A:EB:A8:A8:DC:25:2D:5B:78:B4:E1:9A:18:D9:8A:8F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aae465c0-2a10-495a-b7d2-2aa048b286a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.251.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:f5:45:13:44:ea:03:fe:73:41:23:93:6d:6a:05:8b:95:
         fa:b8:3b:3c:c7:da:cb:48:ba:0f:57:1e:6a:19:6e:22:f0:48:
         5f:9b:5a:ed:69:f8:7c:c9:e5:e8:6d:e8:03:14:23:60:ef:09:
         7e:4b:38:6f:13:64:1e:c7:16:cb:b1:27:b7:23:36:20:f1:7b:
         20:9a:30:15:62:ea:36:c5:44:eb:e5:51:e3:b6:31:7b:4f:e1:
         9e:19:45:83:67:b0:03:4c:6a:f3:9b:52:b6:79:c6:fd:cc:e1:
         f2:4b:57:6f:51:ee:4a:92:3f:f6:e6:19:b1:be:f0:c4:86:f3:
         d4:e1:47:5c:60:91:d0:2f:3f:82:92:c5:6f:fb:da:40:4f:3a:
         5e:c4:95:96:fd:93:a2:68:46:25:82:51:59:02:8c:de:7f:4e:
         ac:32:be:6a:2e:b6:23:36:8f:2b:ff:44:80:5f:51:d8:86:82:
         dd:31:e6:dc:0c:c9:01:11:78:0a:86:b1:ec:05:6b:e0:45:f8:
         c2:e5:d0:d7:02:b6:87:f3:38:61:a4:5f:b3:47:9d:b6:8e:b7:
         8c:85:d7:d8:20:b6:ed:9d:3f:63:3c:35:f2:53:c6:ee:30:53:
         e8:18:a1:95:2b:90:c3:f7:d6:ee:26:58:ce:1b:64:a7:78:10:
         68:b8:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:23:52 2025 by rpki-client