Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa
File:                     0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa (raw, json)
Hash identifier:          9Qy5hQWShDMV1Fcnl4RAdhAhF9WJstfMGPbkhDATn4s=
Subject key identifier:   FD:3B:92:D2:F0:E1:EA:60:42:77:97:4C:06:E6:83:9D:C7:B5:2C:5F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898665C183308D5CED203200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa
Signing time:             Tue 15 Apr 2025 19:10:22 +0000
ROA not before:           Tue 15 Apr 2025 19:10:22 +0000
ROA not after:            Mon 14 Jul 2025 19:10:22 +0000
asID:                     6984
IP address blocks:        63.24.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:65:c1:83:30:8d:5c:ed:20:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:22 2025 GMT
            Not After : Jul 14 19:10:22 2025 GMT
        Subject: CN=0ed87540-9c23-4168-b4c2-44966240ed87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7d:dc:1b:72:5a:0d:ea:c3:40:7a:f6:63:fb:
                    fc:14:50:6a:da:c0:95:18:f1:73:10:b1:a3:38:2c:
                    7f:5e:54:33:5f:58:6e:95:ac:76:7d:57:8a:2b:ff:
                    fe:04:5b:51:a4:4b:ea:97:82:f7:9f:76:5e:69:23:
                    70:f3:25:6c:13:b6:1a:e7:87:de:38:2e:93:d7:e7:
                    0a:a9:9b:cd:f6:25:af:e0:5b:c8:80:25:55:9b:0f:
                    27:91:d7:a6:9e:f4:a7:f5:94:a6:60:77:b2:68:78:
                    a8:4f:9c:c6:e7:93:3e:8d:b1:df:f1:45:f4:b8:3e:
                    6e:15:a3:92:a5:05:99:4d:a0:e8:e8:71:9b:a3:53:
                    24:4a:c3:9b:cd:68:b6:77:43:45:c9:3c:fa:47:66:
                    d1:ee:4a:6a:2b:f3:70:35:e2:2a:4a:82:1f:26:95:
                    f9:06:06:b0:96:1d:15:49:c6:e6:b2:13:39:92:2c:
                    b6:89:6c:fe:68:50:be:8c:2c:dc:cc:f6:e7:61:81:
                    c1:e5:f0:59:29:57:e0:a2:42:ce:d7:c0:df:a2:a2:
                    38:cc:51:ef:15:e4:6c:13:26:fd:6e:aa:b9:1a:b9:
                    08:f4:d1:78:e9:51:9c:7f:03:30:f3:f4:ad:e9:7f:
                    cb:77:b8:e0:03:80:15:af:10:84:47:c1:4d:79:aa:
                    d1:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:3B:92:D2:F0:E1:EA:60:42:77:97:4C:06:E6:83:9D:C7:B5:2C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/0ab86a01-9cd5-3e1c-94a0-6b9b8d995150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.24.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ad:05:b0:df:93:61:95:76:00:4f:1e:76:08:07:4a:51:d7:
         16:8a:32:27:ac:51:89:e2:09:d0:06:12:cf:b4:84:df:a9:a1:
         af:35:90:7b:94:c9:d5:fa:0e:69:80:2b:6e:2c:a3:5d:13:e5:
         aa:46:78:a7:f1:2a:82:23:f2:c0:67:07:22:d9:22:9c:c2:f4:
         72:99:de:c6:31:db:88:11:5e:91:07:ad:6c:2b:7b:08:7a:f2:
         26:65:5f:08:47:4c:dd:e7:03:41:26:2e:05:42:ae:a1:46:6d:
         25:87:20:01:f3:e5:4e:d9:d1:70:18:67:94:2b:08:d6:84:fe:
         47:e4:23:60:52:82:c6:c6:08:64:27:d6:10:95:b2:d4:7a:25:
         e3:15:8e:1d:f3:ce:4d:fa:b2:e7:f0:76:55:90:37:30:b4:a8:
         37:bd:2c:40:28:55:4e:1e:4c:40:ac:6b:df:83:a8:06:cf:03:
         d8:5d:a7:b3:e8:6c:2e:43:a4:04:8b:bc:23:fa:99:43:cf:52:
         a9:ed:bc:b8:3d:37:b8:f2:63:dc:eb:94:46:fe:70:a7:23:88:
         c2:36:9d:69:b5:a2:5a:6b:41:2b:91:88:1f:8a:7d:0e:7e:87:
         4b:6e:01:9e:9b:16:4a:69:48:bb:11:8e:02:59:b2:01:b6:40:
         2f:b3:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:53:02 2025 by rpki-client