Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
File:                     d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (raw, json)
Hash identifier:          f/2O31afitLfjMJws5BKVmW3/szIS10eDPphssTubqI=
Subject key identifier:   B4:8D:91:10:E9:BE:46:61:69:65:54:A6:CE:39:C7:F0:94:0D:73:EC
Certificate issuer:       /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
Certificate serial:       010D0C9F4328584598FDFACF4D32928E549E6AC0
Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
Signing time:             Fri 19 Apr 2024 13:00:36 +0000
ROA not before:           Fri 19 Apr 2024 13:00:36 +0000
ROA not after:            Thu 18 Jul 2024 13:00:36 +0000
asID:                     400141
IP address blocks:        63.135.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:98:fd:fa:cf:4d:32:92:8e:54:9e:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
        Validity
            Not Before: Apr 19 13:00:36 2024 GMT
            Not After : Jul 18 13:00:36 2024 GMT
        Subject: CN=9436d979-8839-4082-8ff4-67e6f21b4596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9d:23:ef:c0:90:61:3e:65:32:db:1e:16:c1:
                    67:30:1a:7a:a1:d7:fd:5d:ec:93:c5:60:97:f7:00:
                    b7:0a:2b:a7:7f:ca:b9:e8:4a:36:62:29:22:75:11:
                    42:26:a8:c4:22:80:bb:bd:8c:0d:0d:03:b1:db:70:
                    fd:03:a2:f9:aa:0a:3e:6d:5c:d1:50:58:6e:89:1f:
                    4d:88:bb:28:e9:0e:01:d3:e4:a7:41:a5:a1:e1:81:
                    b9:5f:65:7e:6a:d2:a1:32:9c:02:98:12:1b:ae:63:
                    47:c6:8f:78:b1:89:ce:de:98:43:46:fc:26:4a:03:
                    e3:67:65:c1:34:07:61:f6:c9:2d:f1:6d:f3:31:80:
                    b3:dc:e1:7c:a7:67:3a:e5:00:c5:b0:20:34:f1:d1:
                    b3:1f:60:f5:d4:8a:ff:4d:b8:e5:55:f7:ea:60:e7:
                    32:18:1d:e1:b7:f4:e6:63:d6:62:cb:55:f6:39:5f:
                    b1:3d:9c:8e:be:03:67:4e:b4:16:fb:12:52:c4:b2:
                    0c:f6:d2:77:73:86:2b:d9:0a:a6:67:dc:aa:d3:e6:
                    bd:4d:3e:02:7d:bf:bd:67:f0:5a:5c:17:02:88:c3:
                    2d:93:fa:bb:96:08:55:a5:10:60:29:43:5c:9f:04:
                    fb:83:74:1e:07:ba:50:75:c3:35:47:41:8e:65:68:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8D:91:10:E9:BE:46:61:69:65:54:A6:CE:39:C7:F0:94:0D:73:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl

            X509v3 Authority Key Identifier:
                keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:90:b8:ed:2d:8d:2f:ea:6e:6c:29:20:ce:54:18:f8:42:
         ca:a9:b5:52:6b:c5:cd:d3:d5:54:38:d3:32:a2:ad:84:50:bd:
         b3:43:05:59:4e:6a:77:4d:67:29:87:81:6b:04:25:37:68:d7:
         af:39:22:38:df:7e:cf:b4:87:b8:b8:0f:31:62:2f:d0:11:92:
         55:1d:6a:8e:47:cb:c2:0f:76:b1:59:af:bf:0e:9f:c2:da:97:
         5c:b3:68:aa:83:d7:ae:a7:fc:45:ea:d5:de:de:49:1e:4c:01:
         36:e3:43:c9:9a:dc:3b:84:6f:1d:bf:8d:ae:a6:cf:80:99:9c:
         e5:8f:19:71:2e:ab:b3:b3:9c:c4:14:9d:aa:bf:e5:c5:a1:03:
         cd:3a:ca:47:a6:10:4f:bd:4c:47:de:2b:c0:65:dd:8a:a5:27:
         89:59:0c:72:66:1b:0d:2b:63:2f:b9:00:55:3a:7d:7e:a6:82:
         90:04:04:80:f0:e7:d0:a8:91:84:46:b5:8c:bf:39:19:46:07:
         05:f2:32:1d:ff:a6:df:38:9e:cb:92:db:d3:ac:43:cf:b5:cc:
         40:dd:23:da:b6:4b:25:5b:32:e5:1f:ef:5b:cc:b8:2a:ae:01:
         3a:60:e3:98:92:ac:8b:18:02:f6:80:fc:4d:ca:8e:1e:02:b9:
         cb:06:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 09:23:45 2024 by rpki-client on console-fra.rpki-client.org