Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa
File:                     3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa (raw, json)
Hash identifier:          4z/ZRK1BuHyyWBNQwqkABZqJ5FSWYVbqIDAGIb1inwo=
Subject key identifier:   D0:C7:D9:13:C4:1C:B5:BC:AB:D4:B7:4A:78:89:D4:1E:5A:C6:A4:53
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F432858455333374B4670C8A3024E5200
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa
Signing time:             Mon 25 Mar 2024 13:00:33 +0000
ROA not before:           Mon 25 Mar 2024 13:00:33 +0000
ROA not after:            Sun 23 Jun 2024 13:00:33 +0000
asID:                     19389
IP address blocks:        63.138.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:53:33:37:4b:46:70:c8:a3:02:4e:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 25 13:00:33 2024 GMT
            Not After : Jun 23 13:00:33 2024 GMT
        Subject: CN=808583e9-c98d-4f8b-bc41-02efb3dd5e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ad:57:5a:f6:59:2d:ee:34:df:4f:6f:7c:20:
                    8d:91:ca:60:32:68:12:11:1d:9a:eb:b0:cb:cc:8e:
                    ae:50:29:2a:bb:53:62:ba:ab:13:86:fc:1f:f9:13:
                    5f:f3:a1:5f:ff:bc:15:3f:c4:2c:08:19:0b:88:c2:
                    94:ef:e2:d7:a9:76:82:9a:56:da:f2:7e:59:84:50:
                    52:f7:0a:cf:c5:2f:d5:3e:58:f4:52:a0:4d:64:f6:
                    3c:94:e6:67:ab:9b:eb:78:ed:7d:37:d3:43:49:30:
                    1a:af:fc:83:c3:ef:ee:35:4e:9f:76:01:59:b4:c1:
                    2d:fa:59:92:b6:8b:b5:01:c3:46:a4:32:b1:4b:61:
                    6f:fa:9f:cd:a0:39:21:b1:d2:9c:1e:11:c1:e7:c2:
                    02:67:73:0b:71:0e:18:a8:0e:3a:84:aa:92:79:5f:
                    1a:c3:e5:7b:34:0c:7c:e6:09:64:60:97:fe:68:5f:
                    43:e2:5c:32:73:46:27:cf:ee:60:b2:73:96:45:1c:
                    fd:25:cf:28:f6:bd:29:a7:d7:b7:06:4b:7a:78:8a:
                    cf:31:27:82:9a:48:0a:a7:4c:13:66:2f:a1:51:b2:
                    8c:4d:3b:57:64:fb:0d:91:6d:7b:f0:0d:de:b4:a4:
                    75:9f:f9:34:69:6a:81:88:49:33:5e:5b:f3:30:c8:
                    20:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C7:D9:13:C4:1C:B5:BC:AB:D4:B7:4A:78:89:D4:1E:5A:C6:A4:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.138.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:aa:4d:c4:00:be:1a:59:76:f9:67:26:46:8b:ed:91:2d:af:
         1e:d3:fc:7d:65:d6:62:1b:4d:af:d2:5f:0e:01:c0:79:e9:19:
         c6:a4:a9:15:b9:34:96:e5:2e:cb:f0:b8:33:33:11:9e:5d:b5:
         9b:2c:7a:18:99:07:43:2c:ef:9f:30:19:56:5e:b0:8c:af:64:
         b8:b0:fe:be:e1:13:e8:ec:54:c7:2a:ee:94:44:7d:11:fe:33:
         15:f7:86:72:02:1f:4a:2c:34:ff:8a:f1:5f:1e:34:a0:1d:58:
         fb:9c:8e:54:ac:37:c8:d9:04:87:05:53:42:76:fb:e3:3f:c4:
         90:ee:25:7d:e5:9c:7c:f6:03:09:87:31:8d:64:44:a0:36:f9:
         40:49:36:bd:7b:c9:d4:bc:84:5e:6b:3c:6b:62:e9:c0:db:f4:
         b0:17:16:44:1e:b9:7e:dd:2a:43:0c:9e:fc:e7:c6:00:0f:20:
         11:8e:37:e2:cc:d4:58:04:ee:6c:c3:14:ac:20:0e:ed:30:1d:
         48:5b:9c:00:ea:c2:95:70:e7:7c:00:71:01:82:cd:44:5d:07:
         5a:4d:57:ee:36:52:41:af:67:73:79:83:bb:54:e7:ab:4c:56:
         d4:7a:2d:a5:7f:ac:9b:41:fc:a5:af:b4:75:3b:45:53:e2:2a:
         23:0d:c8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 16:33:33 2024 by rpki-client on console-ams.rpki-client.org