Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
File:                     4cddd1e8-4a48-3dbd-885a-05195287e404.roa (raw, json)
Hash identifier:          k1+4Ily3zKaPfKMZAojOa1mPdhOScwzzm99w9XeK2N4=
Subject key identifier:   84:44:42:DD:31:74:39:18:C2:86:BC:F9:B1:AD:E7:45:E2:21:84:3E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849DC8FBB8A262CC6F9C697F800
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     23875
IP address blocks:        63.216.59.0/24 maxlen: 24
                          63.216.61.0/24 maxlen: 24
                          63.216.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:bb:8a:26:2c:c6:f9:c6:97:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=60f7641d-0540-4756-98d8-e545b35ab823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:80:8b:f2:26:e6:b2:b9:20:4c:07:08:68:d8:
                    e4:b5:a0:b9:a1:98:99:86:09:ce:0e:17:3e:b6:a1:
                    56:70:a8:60:89:b7:c5:f0:b4:a6:b3:9f:e3:67:9b:
                    47:70:86:fe:34:66:d3:39:86:74:e7:4c:8d:71:f2:
                    d0:9f:66:45:bd:96:db:57:1e:fc:18:a9:75:8e:80:
                    fd:74:b2:3c:92:fa:b4:4a:75:dd:64:73:fd:ff:0e:
                    31:e1:a3:00:68:c1:77:0a:b2:e4:fc:2c:ca:f7:20:
                    9c:aa:28:a8:08:b4:3b:25:58:e1:82:be:1d:83:8e:
                    b1:be:98:3c:6d:0e:85:f4:41:41:58:77:94:06:fe:
                    74:66:dc:2d:32:60:82:ba:70:4e:a2:74:75:96:1c:
                    30:2f:4c:08:ed:18:d7:4b:2e:ca:a3:9f:a6:4d:64:
                    e4:66:37:4e:93:f2:b8:72:31:18:85:bc:9b:5e:ac:
                    19:89:66:ed:b2:0a:86:03:be:bf:26:f5:f3:b8:da:
                    2f:1d:0e:3d:fc:1b:bf:5a:f6:6b:be:36:b8:38:09:
                    51:43:1a:f0:38:f8:00:d6:9a:e2:1f:02:ae:6f:1e:
                    33:70:f7:40:91:c7:e8:f8:6d:da:57:ad:9f:4b:9e:
                    5c:37:b3:3d:5e:02:82:15:a4:8b:e5:5e:86:7c:fc:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:44:42:DD:31:74:39:18:C2:86:BC:F9:B1:AD:E7:45:E2:21:84:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.59.0/24
                  63.216.61.0-63.216.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:f1:9b:0d:21:6e:a5:92:94:3b:d1:bd:d7:bc:07:39:c4:cb:
         06:3a:2d:96:d0:54:08:03:92:9d:c2:a9:7d:43:85:9b:39:f4:
         63:3f:46:69:fe:69:a5:84:a5:4d:22:1c:fe:9e:2f:eb:2a:e1:
         5e:ac:d8:3c:0c:95:21:59:0a:da:dd:ac:3e:7d:f0:4c:fb:fb:
         d0:a8:9a:24:ff:3a:a1:12:f4:4d:6e:10:0d:df:3e:5a:a9:e4:
         15:de:ae:c2:9c:74:85:94:ac:f6:a3:bf:af:74:4d:5f:7c:05:
         68:ee:08:1b:06:23:54:63:a1:73:95:75:41:de:c0:3f:8d:f9:
         bf:c7:20:4c:48:2d:7a:b1:3b:52:76:fc:50:c5:bc:07:ba:30:
         0b:6d:93:8f:b4:41:43:bf:92:50:c0:af:8e:dc:ca:e5:a1:0e:
         b4:65:a9:8e:1b:f3:b5:6d:51:a6:5b:03:4a:a6:3b:a8:19:74:
         ac:bf:76:ef:6f:51:ac:c8:5f:1a:9f:c4:36:0b:33:b0:9c:a2:
         6b:e7:60:e0:e5:22:14:48:1b:29:d0:ee:b8:31:cf:94:6c:45:
         04:27:40:5d:72:28:96:d0:52:34:68:74:8f:fb:5d:66:a6:e2:
         1f:3b:47:c3:26:8e:64:5c:25:bd:cb:aa:2e:19:c4:4f:65:1b:
         37:3a:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:51:43 2025 by rpki-client