Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa
File:                     cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa (raw, json)
Hash identifier:          41l0sluxI1g8V5GpFHyP2cMzg4JmMLT1zgnZlSz5ma0=
Subject key identifier:   65:63:59:AB:A8:96:07:0B:73:65:B1:F7:5D:23:05:03:EB:4F:9C:A4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A29557B8C7A685FC1E943A180
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     22394
IP address blocks:        63.40.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:7b:8c:7a:68:5f:c1:e9:43:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=b2fad6e8-01fc-4682-b691-83ed71073766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:55:10:8f:d4:71:d0:d9:0e:e3:0e:b6:d9:
                    67:24:ab:ba:92:04:e2:15:2e:57:e2:bf:49:eb:76:
                    7d:bb:19:34:dd:b7:07:b0:e7:71:48:bd:cc:5f:f1:
                    a9:7a:1f:35:c6:b4:4e:2b:eb:5c:36:39:f3:39:c4:
                    b1:8b:53:e1:74:bc:49:cd:9d:0e:38:1f:79:8d:73:
                    02:bd:16:9e:db:da:46:14:00:b9:b9:f1:ee:b6:5c:
                    77:53:7b:45:93:01:75:23:51:f8:30:3b:f5:d7:c6:
                    9a:6e:a5:28:13:81:f0:c2:4f:61:65:31:da:99:a3:
                    c4:93:1a:c0:6d:ad:98:2e:41:6b:24:aa:5b:f4:f8:
                    01:7b:db:6b:96:3d:c0:87:17:da:99:6b:bf:67:d6:
                    f7:de:7b:36:2e:7e:0f:73:c8:cd:5e:be:fa:5c:d7:
                    bc:e4:fd:6a:c9:de:08:af:92:c9:28:91:7c:d8:53:
                    7a:08:9e:57:6d:cd:e9:7f:d9:f5:90:f8:4b:68:86:
                    d2:1e:90:40:98:18:c6:71:c1:46:e4:35:8d:1f:2c:
                    60:4b:99:1c:82:46:ae:a1:f0:17:4f:55:48:f4:88:
                    ae:bd:25:9d:91:95:00:c0:7e:65:a5:12:97:89:00:
                    84:0d:39:2b:75:6e:30:d4:24:0d:00:4c:22:d2:8e:
                    4f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:63:59:AB:A8:96:07:0B:73:65:B1:F7:5D:23:05:03:EB:4F:9C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cba5172f-fd50-3cd2-bec2-a25b7c7497cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.40.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:86:90:e0:48:19:92:7e:6a:22:31:8e:a6:83:98:2a:9c:cc:
         9c:22:90:b3:8d:c1:64:44:56:36:08:8d:a9:21:6b:6c:72:f2:
         68:a9:9b:eb:47:fb:9c:e2:21:30:ab:fd:ae:c4:c1:85:8c:a9:
         49:c2:bb:40:41:b6:7f:47:b7:66:c5:a6:c3:f1:30:c2:78:cd:
         84:c3:95:8f:6f:76:41:78:29:09:7b:53:bf:d3:03:98:c4:fa:
         9a:15:5c:05:16:39:2f:10:2e:43:12:81:c8:39:1e:ef:5b:69:
         f9:d9:46:a0:b6:9a:59:6a:d5:8f:48:2d:39:dd:ec:79:cb:33:
         16:13:66:3d:27:3a:3e:85:44:49:d8:4c:30:af:68:fb:13:b1:
         a5:8f:85:b2:5f:7e:64:3d:f8:77:39:7d:75:96:dd:62:d0:e1:
         c5:24:e9:e3:1a:35:2b:66:fd:93:5b:eb:dd:ff:25:a7:e4:24:
         f1:be:71:d8:ce:4d:5e:70:a4:d9:4b:b1:17:10:c6:bd:6a:f6:
         39:90:0b:18:a0:ac:59:92:5e:56:94:fd:d7:25:b8:dc:e2:79:
         15:1a:64:be:ef:3c:a5:89:e3:b2:f0:03:c7:a2:a5:14:7d:4b:
         a4:2c:28:66:0d:a1:cc:4c:58:9f:de:cc:82:6c:da:d9:22:bd:
         3b:33:f9:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEopVXuMemhfwelDoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
YjJmYWQ2ZTgtMDFmYy00NjgyLWI2OTEtODNlZDcxMDczNzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvV1VEI/UcdDZDuMOttlnJKu6kgTiFS5X4r9J
63Z9uxk03bcHsOdxSL3MX/Gpeh81xrROK+tcNjnzOcSxi1PhdLxJzZ0OOB95jXMC
vRae29pGFAC5ufHutlx3U3tFkwF1I1H4MDv118aabqUoE4Hwwk9hZTHamaPEkxrA
ba2YLkFrJKpb9PgBe9trlj3AhxfamWu/Z9b33ns2Ln4Pc8jNXr76XNe85P1qyd4I
r5LJKJF82FN6CJ5Xbc3pf9n1kPhLaIbSHpBAmBjGccFG5DWNHyxgS5kcgkauofAX
T1VI9IiuvSWdkZUAwH5lpRKXiQCEDTkrdW4w1CQNAEwi0o5PwwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGVjWauolgcLc2Wx910jBQPrT5ykMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvY2JhNTE3MmYtZmQ1MC0z
Y2QyLWJlYzItYTI1YjdjNzQ5N2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDPygwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUIaQ4EgZkn5qIjGOpoOYKpzMnCKQs43BZERWNgiNqSFrbHLyaKmb60f7
nOIhMKv9rsTBhYypScK7QEG2f0e3ZsWmw/EwwnjNhMOVj292QXgpCXtTv9MDmMT6
mhVcBRY5LxAuQxKByDke71tp+dlGoLaaWWrVj0gtOd3secszFhNmPSc6PoVESdhM
MK9o+xOxpY+Fsl9+ZD34dzl9dZbdYtDhxSTp4xo1K2b9k1vr3f8lp+Qk8b5x2M5N
XnCk2UuxFxDGvWr2OZALGKCsWZJeVpT91yW43OJ5FRpkvu88pYnjsvADx6KlFH1L
pCwoZg2hzExYn97Mgmza2SK9OzP5VQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 06:52:12 2025 by rpki-client