Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/f1017b10-98f0-31c8-8e45-d984db1d93b3.roa
File:                     f1017b10-98f0-31c8-8e45-d984db1d93b3.roa (raw, json)
Hash identifier:          9ijXmQKKKe9HZmNDQvSm2EnW1YeofFzI902qUaCtv+4=
Subject key identifier:   CF:D0:7C:A7:37:F0:97:1B:CB:F0:F2:F8:CC:F4:B8:B6:9B:A6:5B:8A
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285845B7B378A4B3A3E08C32C0BE00
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/f1017b10-98f0-31c8-8e45-d984db1d93b3.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     400317
IP address blocks:        63.160.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:78:a4:b3:a3:e0:8c:32:c0:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=4eebd3af-8aa4-427f-ae76-eff50f437b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ba:9f:42:8a:d6:39:5b:e1:ed:09:5b:9a:79:
                    1b:eb:b3:6b:43:e0:32:db:0c:08:d2:a7:9b:9e:0d:
                    a0:4b:5b:9c:0f:49:06:bf:05:4e:d5:23:aa:8d:8d:
                    5b:11:4d:c5:52:95:aa:ad:63:ba:56:fc:cd:6a:e5:
                    ca:90:8a:b1:7b:86:4d:ac:8e:df:09:a4:88:a8:6f:
                    0a:e6:62:f4:bb:07:e2:7d:ad:21:a5:ea:67:8a:2b:
                    63:45:f9:2a:a3:74:7e:d2:89:f3:e6:a3:1a:95:07:
                    c4:53:95:e3:00:f1:e9:dc:ec:78:21:df:ab:e8:8f:
                    03:03:c3:45:72:7d:67:91:b1:0c:4e:e1:cf:06:01:
                    f4:c5:a9:1d:28:8d:c7:1a:85:dc:63:0d:db:5e:0c:
                    2d:32:13:04:20:6e:36:04:1b:f8:96:3b:5e:e1:5d:
                    74:6d:8e:55:a4:e7:da:da:c2:b1:75:ba:07:9d:26:
                    1a:46:bc:2d:88:2b:94:c6:2f:fb:a1:0b:63:97:b6:
                    be:36:b3:5e:a5:c8:e3:5b:b5:6d:60:78:ae:55:5b:
                    b9:f6:9c:56:5b:fb:4f:d2:3b:d6:fc:9e:55:e3:a0:
                    14:ec:26:fd:a4:46:7e:aa:b1:5c:e0:b7:98:ce:f1:
                    59:41:2f:f6:f9:57:38:63:9c:24:ee:8f:dc:11:89:
                    30:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D0:7C:A7:37:F0:97:1B:CB:F0:F2:F8:CC:F4:B8:B6:9B:A6:5B:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/f1017b10-98f0-31c8-8e45-d984db1d93b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:da:86:c4:93:31:77:72:4c:57:9b:9a:aa:a6:8f:2d:0c:
         9b:f1:96:a9:05:e0:f1:9f:18:08:25:1d:db:0e:d7:7c:da:10:
         21:62:65:8c:36:46:5d:b3:b7:74:7a:e9:d0:04:d7:d8:10:3a:
         91:7c:cc:36:d0:85:da:60:d0:ee:3c:3a:b5:0b:58:38:f1:cf:
         85:90:42:5f:38:77:ee:98:3b:55:91:27:7e:a5:21:2d:36:6a:
         d4:76:da:7e:08:db:47:da:39:6a:9e:58:68:20:05:61:22:04:
         75:8d:a2:82:5b:fc:07:d4:fe:78:e2:03:24:46:97:21:50:71:
         57:7d:37:9f:5d:b8:ff:59:c6:50:9b:27:17:99:c9:4a:c9:e9:
         56:c3:f6:f0:f0:94:67:f8:78:21:38:6c:c8:79:40:98:72:a6:
         f3:89:a0:34:4d:c1:48:d5:e7:17:ff:28:74:d4:c6:04:c6:01:
         37:7c:79:d5:e9:75:1e:1c:22:68:a1:bf:25:b3:de:d9:c1:e2:
         d3:c6:5d:b6:85:49:69:35:33:b7:54:53:9f:81:65:fd:3f:da:
         f8:9f:9b:6e:af:12:f0:b0:b7:8b:16:14:43:3c:cb:90:a8:f5:
         21:52:8b:03:eb:ba:81:31:6c:a0:eb:51:e1:71:7c:cf:c1:e6:
         e0:5b:64:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 16:12:13 2024 by rpki-client on console-fra.rpki-client.org