Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa
File:                     f1dd0958-307b-3494-81ec-2170193c7886.roa (raw, json)
Hash identifier:          KoizbghIPMDihEWeTyluFX+/BGGhMBhQHjxAmOgmpCo=
Subject key identifier:   A2:BC:12:CE:56:41:D7:62:7E:47:07:F0:1F:39:56:E9:37:17:9D:F9
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845CC4FC48C0BF901A0A092BF00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa
Signing time:             Tue 07 May 2024 22:11:42 +0000
ROA not before:           Tue 07 May 2024 22:11:42 +0000
ROA not after:            Mon 05 Aug 2024 22:11:42 +0000
asID:                     3561
IP address blocks:        63.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cc:4f:c4:8c:0b:f9:01:a0:a0:92:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May  7 22:11:42 2024 GMT
            Not After : Aug  5 22:11:42 2024 GMT
        Subject: CN=e6ce1337-0d84-429d-bbf1-cb9bdd28a1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:99:1c:34:48:b8:ba:8f:71:0d:67:8b:24:b5:
                    15:26:df:59:c9:e9:dd:7e:0e:4a:42:86:1c:05:cb:
                    b7:b8:70:1b:34:5d:07:eb:44:f8:37:c6:52:a8:2a:
                    20:cd:25:56:ca:74:73:80:92:35:81:12:fc:40:ce:
                    7e:12:14:d3:6a:fe:a4:cc:80:0b:1c:53:e3:82:b0:
                    98:bc:3c:bc:b6:b9:55:ec:73:68:07:e2:0f:60:e8:
                    2f:ea:58:9d:21:79:23:3d:d2:0b:69:f4:de:5c:4b:
                    c7:83:6c:43:29:7c:97:d5:86:ee:c4:a1:7b:2a:2c:
                    c8:bd:af:93:a3:4d:70:5e:c2:ed:e8:e4:7b:7d:63:
                    da:5a:68:35:47:a1:af:f5:6a:b0:e3:65:d8:d3:26:
                    ab:0a:97:c1:5c:02:20:0a:b9:56:1f:bd:82:6b:ce:
                    93:ef:8b:97:e1:18:f5:cd:c0:38:d6:b8:08:d6:5f:
                    c1:ae:71:b7:95:11:a6:28:ef:29:8d:d2:f8:f9:b0:
                    d6:6b:6b:61:e6:2d:3e:55:56:4f:06:20:ce:26:d4:
                    3a:63:10:14:04:d6:fc:33:c0:2f:e9:38:48:e4:24:
                    eb:db:e6:80:dd:93:ae:21:f3:b9:34:c2:f5:c1:21:
                    50:3a:ea:1a:50:79:b6:6a:eb:45:c8:e1:c1:05:e0:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BC:12:CE:56:41:D7:62:7E:47:07:F0:1F:39:56:E9:37:17:9D:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f1dd0958-307b-3494-81ec-2170193c7886.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.129.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:2a:cf:91:e7:40:99:ba:f8:47:4a:17:b4:2d:5e:d0:5e:ec:
         10:26:e7:c4:ce:2b:9d:69:48:92:40:e0:05:42:c0:67:09:e4:
         2d:f5:ee:78:20:51:0b:77:62:7a:76:a7:08:86:76:2c:9a:ce:
         24:a9:41:dc:1b:03:d6:bc:ce:b1:c2:f7:89:3f:3c:ba:d4:39:
         b4:d3:09:ae:ba:9a:4c:ec:1e:9d:75:d4:50:ac:cf:2a:d7:22:
         08:42:c6:5f:7d:7b:d6:d7:a8:46:66:8d:07:43:4b:41:ac:3a:
         05:1a:05:a7:fc:da:d9:40:3e:24:69:29:c0:c7:61:aa:d2:87:
         21:49:9a:cc:55:fb:a6:4c:5d:2a:9d:c2:c1:68:59:32:0d:a3:
         b2:a1:65:c9:c4:4d:12:45:bf:76:48:a6:ca:4f:52:da:e5:4c:
         6b:8c:74:3f:c8:6c:ed:6f:09:75:d1:b2:b5:e2:28:47:4d:ea:
         81:d8:d3:ca:3b:45:96:34:0a:c8:8a:c4:8c:7b:0c:38:29:1f:
         03:4c:fe:4e:d7:ec:df:ca:03:e2:d8:22:dc:8a:31:7d:b4:c8:
         33:6c:d2:fe:06:fc:7c:7e:de:3f:d9:9f:e4:94:6a:21:ca:9e:
         8d:73:a9:17:2d:33:e4:65:b4:66:b9:9e:7a:6d:01:11:37:fa:
         1f:2a:44:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 00:53:49 2024 by rpki-client on console-fra.rpki-client.org