Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eedb3e4d-3349-3f62-be37-c54c92f368f4.roa
File:                     eedb3e4d-3349-3f62-be37-c54c92f368f4.roa (raw, json)
Hash identifier:          SI5cyCVXNhAm+qy0pEktOI5f5ob0rNaRawuJTRoZW50=
Subject key identifier:   98:8F:DD:EB:63:36:9D:C0:58:DE:E7:CA:D3:23:AA:32:F0:CD:9E:84
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A3B7AFFB70C7DC5F3DD76C680
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eedb3e4d-3349-3f62-be37-c54c92f368f4.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     14717
IP address blocks:        63.76.66.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:ff:b7:0c:7d:c5:f3:dd:76:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=8c85a665-38ee-4971-a10e-759bfab5d1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:76:85:a3:88:6d:ac:15:16:f6:59:05:4c:
                    95:01:7f:1e:6c:14:01:18:40:4e:5e:b5:66:c2:26:
                    3b:fe:3d:0c:1e:fa:f4:ea:49:72:3b:5e:84:57:b0:
                    80:67:41:44:b7:62:00:c1:fd:8f:69:14:a9:e5:8e:
                    78:61:4f:10:bf:97:33:d7:da:75:a2:d5:55:c4:a1:
                    3c:e4:53:07:10:4e:be:47:34:2c:95:ce:c3:ef:73:
                    79:dd:d0:f7:e0:dc:5b:e1:c2:5c:75:b7:c0:d3:3b:
                    b2:e0:35:b2:a3:15:01:52:b2:0d:9a:57:47:a7:8d:
                    d6:d6:01:ca:7e:bd:05:fa:63:e9:06:ce:77:9a:95:
                    d4:6e:18:62:07:0d:ee:fe:fb:bf:2a:88:1d:c5:17:
                    0a:4b:c0:79:47:70:c8:e2:00:e2:c3:29:fc:bd:c9:
                    b0:68:d6:91:54:df:f7:73:79:de:a4:23:3b:f6:b6:
                    9b:13:96:c7:95:29:32:3c:66:21:58:48:39:f3:d1:
                    1b:51:e4:9f:36:78:68:92:64:a8:8d:94:6a:43:ba:
                    c8:06:6a:11:75:5b:33:42:36:7b:f0:d8:c4:1d:3c:
                    c8:2c:49:d5:91:bb:b7:6a:8f:39:94:88:6c:fd:1a:
                    37:94:ba:41:15:ee:a5:5f:d8:2a:26:75:3d:15:21:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:DD:EB:63:36:9D:C0:58:DE:E7:CA:D3:23:AA:32:F0:CD:9E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eedb3e4d-3349-3f62-be37-c54c92f368f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.76.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:57:1f:b0:7e:7a:7f:1b:6f:3c:3b:81:4d:5d:84:c0:76:
         72:a8:db:ea:d9:5e:af:14:a6:b0:22:92:65:47:65:03:ca:c9:
         52:5a:6c:82:88:73:ab:2a:f1:59:bd:ff:8c:ac:f1:58:9d:be:
         43:bb:5d:39:2f:41:27:4c:dd:b1:e3:22:42:93:0c:12:90:c6:
         ec:7d:57:d6:4a:2a:b2:85:a2:71:56:1b:d6:87:88:8b:56:47:
         21:7b:5f:32:b2:3c:d0:b7:19:33:dd:c0:3a:a8:9d:e0:39:c2:
         00:ec:05:42:d4:fc:b0:1c:32:b2:f0:b5:20:8e:6c:47:be:8c:
         f2:cd:3a:ce:10:bb:c3:62:f5:34:a9:f3:d9:f3:9d:69:86:7c:
         84:70:a5:40:56:d3:e2:90:0d:84:e7:d4:77:bb:58:b3:8c:95:
         b4:ac:ae:e5:47:11:4f:00:d3:65:fc:f6:4e:c3:f2:8e:a8:ae:
         c0:5d:32:5f:20:16:94:db:34:69:3a:ff:93:60:64:d0:fe:27:
         de:61:27:a2:65:06:93:f4:cd:1f:c2:4c:25:9c:92:b1:e7:df:
         37:06:85:e7:ec:0e:9a:8b:b7:eb:10:11:a2:d7:11:5a:85:8a:
         10:b5:b7:db:70:9b:58:7c:e9:df:e7:fe:8d:4b:9f:b5:64:88:
         a1:31:b1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 03:52:00 2025 by rpki-client