Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/7b4634a3-a755-30e2-b71d-a5ee0e389b71.roa
File:                     7b4634a3-a755-30e2-b71d-a5ee0e389b71.roa (raw, json)
Hash identifier:          5PoohPwd+NiRG9PShpdgYz9nelDlnd++Ojf+NMmfJuE=
Subject key identifier:   91:02:98:4C:CB:3C:C0:14:BC:77:06:D4:B7:7A:01:82:AF:A1:8C:4B
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F4328584523DAF704026150BF84091640
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/7b4634a3-a755-30e2-b71d-a5ee0e389b71.roa
Signing time:             Fri 08 Mar 2024 14:00:30 +0000
ROA not before:           Fri 08 Mar 2024 14:00:30 +0000
ROA not after:            Thu 06 Jun 2024 13:00:30 +0000
asID:                     29909
IP address blocks:        63.250.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:23:da:f7:04:02:61:50:bf:84:09:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Mar  8 14:00:30 2024 GMT
            Not After : Jun  6 13:00:30 2024 GMT
        Subject: CN=bef08ac9-e83a-4a8c-8739-86a3f8f7f324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:08:81:52:9e:da:0b:bd:a3:e0:a9:59:7f:6f:
                    de:06:5f:ea:af:9c:56:21:b2:1a:08:e3:bb:94:a7:
                    b4:d2:83:7e:da:a1:01:3d:2f:37:9a:10:36:15:8a:
                    93:a3:e9:e1:01:8c:4c:64:c1:1d:98:52:bf:fe:5c:
                    66:4c:a7:c4:16:5f:c4:12:b5:a0:7f:02:1f:29:f8:
                    79:75:be:f2:69:a2:70:33:e5:bd:52:ae:25:7e:6c:
                    ba:5e:1b:61:d6:1c:e0:8d:55:f8:97:c2:c2:55:b3:
                    e2:1d:f9:8f:a3:0a:63:d9:0b:dc:76:32:b4:08:9b:
                    f8:aa:f3:6f:d4:78:b3:03:32:6d:49:ac:f2:b8:0d:
                    f0:28:f2:30:5e:79:7a:83:fd:f7:a2:4f:82:8a:12:
                    dd:3f:f9:16:3a:56:26:32:77:a6:53:30:c8:1d:27:
                    ff:fd:70:97:88:71:99:17:bd:4b:84:78:ec:a5:ab:
                    71:b6:e0:fd:4b:cc:4e:bd:89:2c:3e:13:91:8a:84:
                    97:d8:28:bb:80:50:29:e4:1c:da:ca:46:0f:4b:90:
                    37:10:12:87:ae:6e:bd:b3:b9:ea:27:f5:0b:c3:61:
                    e9:a1:78:5b:0c:90:84:cf:d6:95:e9:41:2c:54:45:
                    ed:b2:1b:ea:51:4d:fa:41:d2:0d:d2:da:29:20:2d:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:02:98:4C:CB:3C:C0:14:BC:77:06:D4:B7:7A:01:82:AF:A1:8C:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/7b4634a3-a755-30e2-b71d-a5ee0e389b71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:51:ad:f7:c4:cc:c7:2d:87:a1:05:63:aa:52:cf:7b:19:ae:
         57:ff:70:4a:fd:d0:a4:65:90:7f:a8:9d:95:80:d3:f0:0e:a4:
         11:3d:3a:80:bb:bc:ee:92:d4:25:a2:54:84:ce:8d:da:30:50:
         0d:9c:58:ff:59:c5:58:ab:35:a1:fa:a5:1e:a9:fd:4d:db:66:
         0e:a8:7f:3e:91:81:58:10:fc:a3:76:96:ac:00:46:a2:47:58:
         43:3e:3a:04:2c:17:ca:2d:b5:6c:1b:9d:17:b4:fb:cd:1b:47:
         74:93:6a:07:e3:bd:70:cb:ae:af:a6:0d:9f:6c:bb:da:b0:2a:
         34:77:61:0d:b1:f4:87:20:2d:cb:3e:3c:34:6e:70:87:01:05:
         7c:8a:89:fd:c3:4f:15:26:03:15:d6:f4:df:19:d5:68:40:28:
         40:05:83:a3:e4:e8:9c:56:6c:5f:5f:1c:41:cf:66:4a:8e:ff:
         76:24:a4:d7:4c:aa:6e:06:55:3d:68:da:84:c4:07:a5:7f:42:
         24:2f:a6:65:a5:d4:e3:4d:40:02:54:a3:10:d8:56:32:a3:6e:
         fc:06:40:b9:8c:cd:a8:0f:a2:9e:60:72:ea:46:a2:b6:e0:8c:
         a6:9f:2c:86:3c:20:5b:ac:8e:e0:1c:bc:38:fc:84:a5:7f:1c:
         f7:a3:a3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 15:09:09 2024 by rpki-client on console-fra.rpki-client.org