Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa
File:                     62fccc6a-8319-357d-be52-2c00240f1082.roa (raw, json)
Hash identifier:          KOEChgzTccXNRa+W0aaDuRDBh1ArIQkst8x/4oiRjow=
Subject key identifier:   67:36:16:07:5C:07:E1:0B:3F:9F:3E:27:29:9D:13:30:BF:2F:C0:CF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F432858456C5308654B134F8096297E00
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     14618
IP address blocks:        163.253.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:08:65:4b:13:4f:80:96:29:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=5e6342fc-042c-4566-8c83-290d29a207f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5c:dd:9a:9a:cf:2c:1d:a6:62:62:2a:92:b5:
                    7a:24:94:eb:be:eb:64:16:04:bc:a5:07:5c:a0:d0:
                    be:97:99:f4:f1:d2:3f:72:9c:bf:64:e0:d0:50:a4:
                    de:97:33:9b:90:77:6e:17:99:fe:c4:06:c0:d9:0c:
                    de:81:42:9e:48:f7:6a:15:8f:a2:cb:39:d5:b1:54:
                    42:2b:44:30:d8:66:f3:49:a7:22:5e:16:81:48:63:
                    f6:7b:b9:89:31:6d:9f:52:25:d0:1e:ce:67:42:3b:
                    a1:72:de:d2:41:87:5a:b8:d2:c1:14:05:e1:d9:c0:
                    5e:53:51:e6:87:4a:23:90:a0:55:75:70:39:f3:32:
                    47:e7:d8:92:81:fc:88:0c:80:52:a0:bb:84:fa:f5:
                    89:11:ee:8d:cb:57:f5:c2:6a:16:49:8e:c9:d6:1a:
                    1f:96:28:a7:5d:89:cd:1e:11:01:ac:51:0d:f9:15:
                    25:cf:06:b5:19:18:f0:ff:cc:d4:49:19:6c:30:c6:
                    68:e9:37:44:1d:da:cd:1f:c1:80:e5:47:b9:c1:8a:
                    98:86:3d:5a:ee:35:8a:c1:bc:d5:89:b4:55:39:61:
                    7e:62:be:d3:11:32:ac:b0:52:d1:8d:e8:c5:74:80:
                    39:d7:8c:59:92:76:5f:e1:f1:47:97:06:43:2e:09:
                    91:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:16:07:5C:07:E1:0B:3F:9F:3E:27:29:9D:13:30:BF:2F:C0:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/62fccc6a-8319-357d-be52-2c00240f1082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:29:73:b1:4a:51:bb:d5:e7:f2:34:b7:4d:cf:fd:a0:05:b9:
         61:e0:9f:32:eb:ed:dc:e2:57:f0:bf:56:84:87:14:46:59:4b:
         cb:12:53:ae:4e:f4:19:31:8e:1f:76:80:b3:6a:ba:3e:29:03:
         93:4e:a0:71:51:5d:96:82:65:ba:db:26:73:b1:d7:e0:12:5c:
         a0:36:e7:2e:5b:19:9a:16:18:90:78:be:f3:6a:ae:55:2e:31:
         fa:c4:eb:01:1a:fd:d0:61:7a:f0:d7:e3:e4:03:7c:b7:f4:a1:
         cf:e8:41:73:c3:6f:20:d0:a8:ee:a7:25:fc:a0:b2:51:29:7e:
         74:2b:fa:46:9c:04:ce:02:83:e7:76:8a:58:1a:6b:5e:d7:62:
         37:ba:49:0d:8b:b0:63:ab:d6:db:c5:78:b3:71:69:d5:bf:23:
         ee:8e:0c:ef:4c:8b:55:6c:32:ad:ce:8f:0b:17:2c:4c:d1:cc:
         bb:94:b1:26:a6:92:7a:2f:2c:20:cd:73:ab:2d:14:9c:1f:18:
         cb:14:8f:ba:2a:e8:5c:2e:6e:1e:14:3e:bd:9a:e2:3a:77:5f:
         53:69:94:8b:1e:12:a8:66:2c:ef:a9:1e:39:21:a7:bf:11:b3:
         ef:d9:be:da:df:00:10:32:29:8d:52:17:92:fa:d1:83:b0:23:
         42:eb:47:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:23:22 2024 by rpki-client on console-fra.rpki-client.org