Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/fcd92f6a-7d91-3e7c-867c-277182d19df8.roa
File:                     fcd92f6a-7d91-3e7c-867c-277182d19df8.roa (raw, json)
Hash identifier:          VUcrSiABcbnLfoV9MDfIOoQiKKS8XAcPQPga4sXOiSU=
Subject key identifier:   DD:57:F5:56:AB:5B:C0:BE:1B:08:74:7C:ED:E7:D4:F0:A2:81:D7:C4
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584563F31380764591EAD9465900
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/fcd92f6a-7d91-3e7c-867c-277182d19df8.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     23520
IP address blocks:        63.245.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:13:80:76:45:91:ea:d9:46:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=19172712-d67d-40a8-aeb6-a5856d934319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:df:4f:4e:aa:e9:d2:86:f1:0e:a8:5a:7c:e2:
                    98:18:90:a5:05:d1:83:20:dc:78:bb:6a:c8:93:c2:
                    0e:b9:cf:f0:f1:9e:5c:9e:57:29:ab:c1:f1:7f:7c:
                    50:1a:e2:4b:f2:bc:ae:2d:4e:ae:f5:87:77:6b:00:
                    85:03:b7:81:de:b2:1f:c3:f4:54:41:14:3a:d6:f8:
                    25:20:77:7c:9d:f6:4b:d2:e1:3d:01:99:37:b6:03:
                    e0:7d:fd:f7:d6:a0:5b:6b:9b:45:f1:02:58:19:6c:
                    e3:67:80:73:cf:1b:c5:fa:79:ac:a8:fe:25:31:ad:
                    0e:ba:b1:42:ec:67:fa:49:0a:e6:6b:23:e0:c3:5a:
                    31:58:6e:92:06:e2:1e:75:c6:8b:cb:89:5c:c4:8d:
                    db:d7:c6:06:2f:1e:bc:86:a2:fe:9c:33:bf:90:bb:
                    dd:30:87:31:70:96:52:61:0e:d8:98:e3:c4:a6:8f:
                    c9:d3:41:11:d0:21:fb:33:35:2e:0f:70:10:b5:16:
                    15:c9:ac:de:84:27:26:a6:98:97:38:a0:23:fd:14:
                    49:8d:9f:f5:0f:03:de:f5:7b:3d:03:e8:54:04:5a:
                    22:0c:d1:05:bd:cd:f4:8f:4b:9a:8d:a6:f3:e4:c9:
                    04:51:e4:41:61:b8:c7:64:42:3a:03:1f:f9:c4:18:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:57:F5:56:AB:5B:C0:BE:1B:08:74:7C:ED:E7:D4:F0:A2:81:D7:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/fcd92f6a-7d91-3e7c-867c-277182d19df8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:44:e3:3f:3f:3c:ed:24:24:a7:09:2f:83:2c:47:4a:fd:
         24:9b:3b:d4:c3:2e:ec:f1:16:15:e5:a5:de:fe:ed:56:5b:83:
         2d:94:99:a2:f0:e3:4d:35:00:49:61:e2:ba:c1:42:00:f2:e0:
         5c:b5:33:bf:39:c2:e6:64:9d:fc:16:59:a7:95:94:3b:04:c1:
         32:87:8a:8d:30:88:4c:32:29:bc:46:c4:17:cc:e9:d5:60:57:
         12:40:d5:a9:06:06:89:03:96:80:ad:43:f9:4e:3e:d7:a5:66:
         f8:68:bd:c5:dd:6d:82:d4:5e:88:0d:4d:c4:9c:d2:6e:d9:0f:
         7b:ed:e7:13:1b:a1:87:4c:b8:b2:d4:55:42:d2:04:c3:58:8d:
         91:1f:9e:46:e2:38:77:6a:58:74:e5:2b:9f:96:64:c4:91:be:
         74:e1:9d:f6:e0:db:d7:16:10:1f:2f:28:07:f8:12:65:cd:73:
         14:3b:db:22:2b:26:c6:5f:54:40:b5:d3:7e:ac:ca:7a:05:2e:
         11:b4:d8:4b:a6:c3:37:cf:83:7f:bb:64:a5:9b:9b:20:ed:4c:
         ac:02:4c:3b:5e:ee:5e:c5:2f:36:0f:fa:89:66:c8:21:10:48:
         0d:33:21:c3:5e:de:b6:a2:c8:a3:b7:a7:73:42:e8:74:a7:da:
         32:7b:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:50:33 2024 by rpki-client on console-fra.rpki-client.org