Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
File:                     49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (raw, json)
Hash identifier:          eXSvy9WYxd+fzZHwDBMegd3Z5f/zwRsy4Vi9AR+UuvE=
Subject key identifier:   31:C0:F4:5C:C9:5F:7D:A1:AF:DA:BA:84:30:98:DF:4E:8D:6E:DD:CE
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F432858476C9DBAECC712F396DEBC9400
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa
Signing time:             Fri 04 Oct 2024 01:00:31 +0000
ROA not before:           Fri 04 Oct 2024 01:00:31 +0000
ROA not after:            Thu 02 Jan 2025 02:00:31 +0000
asID:                     35860
IP address blocks:        63.133.208.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:9d:ba:ec:c7:12:f3:96:de:bc:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Oct  4 01:00:31 2024 GMT
            Not After : Jan  2 02:00:31 2025 GMT
        Subject: CN=01fe4905-025f-48c6-8ab4-6d4418e10381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:14:e3:94:d3:b6:f5:bf:57:c1:1e:fc:0b:
                    f6:22:31:d0:fb:7f:27:22:4c:a4:04:b2:90:3b:16:
                    0c:a0:7f:58:49:44:5a:0d:48:5f:59:88:95:f4:53:
                    03:97:f4:27:65:9f:5a:97:37:f3:1d:82:44:36:d3:
                    58:a7:56:2d:14:a3:93:ac:56:cb:68:3e:0f:4b:d3:
                    0b:5e:c0:78:55:2e:e4:2c:74:7c:4a:0e:63:a6:5d:
                    6f:83:67:cf:05:0c:03:d0:a1:09:f9:c5:79:94:2f:
                    43:71:93:0d:64:38:ce:14:3a:b8:5d:0b:a8:19:87:
                    3a:12:14:76:38:57:85:cc:71:fd:1c:5a:18:18:3b:
                    da:ac:fe:86:e6:27:04:d5:cc:24:75:f5:af:3a:a5:
                    3b:28:94:7b:91:d8:91:9f:95:cc:97:00:9f:80:cb:
                    3b:88:75:4b:87:df:da:f3:e3:35:2d:42:ad:3a:10:
                    cb:6d:eb:4a:f8:81:07:28:25:be:a6:2a:12:2f:51:
                    8f:0b:9d:d2:a9:f3:01:04:b7:91:be:7d:c6:9b:9c:
                    82:23:71:5d:42:e6:a7:e8:ac:b3:55:04:f7:e3:c8:
                    4a:85:7b:18:fa:16:20:db:1b:2f:b0:d7:13:68:fa:
                    ae:cb:8a:8b:3e:67:ee:5a:bb:4d:6e:07:06:ad:ce:
                    04:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C0:F4:5C:C9:5F:7D:A1:AF:DA:BA:84:30:98:DF:4E:8D:6E:DD:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:a8:4b:19:85:9b:20:7e:1d:59:54:18:76:fd:0d:76:ad:
         6e:d9:14:94:f5:f9:3c:fa:74:c8:41:4e:41:92:2a:b2:94:a2:
         c6:a4:79:e6:e4:da:db:f2:e2:73:45:61:a0:82:2d:dc:fc:45:
         2c:ee:6f:1f:a3:06:79:54:49:f1:dc:64:c4:98:39:c5:5a:db:
         f3:a3:db:c8:72:02:09:75:21:59:25:cf:a6:26:4f:42:90:37:
         6b:75:a0:89:52:1d:6a:7c:92:14:34:4c:39:dc:1a:c9:1b:15:
         1c:e0:5a:9f:88:cc:94:ef:51:d0:85:0b:d1:27:80:3f:91:38:
         53:a2:df:a0:f0:af:85:24:11:49:e7:17:ea:a2:9a:a1:69:5b:
         2a:ec:35:7e:04:4e:9f:c7:16:0b:f6:eb:17:a1:ce:8b:a5:74:
         3f:bf:2e:d2:30:9d:ba:f5:4a:b3:cd:90:50:d5:2a:8a:1d:47:
         67:85:08:1e:c9:23:03:bb:39:f5:b5:9a:f6:90:40:37:49:53:
         43:45:8b:ca:af:32:e8:46:15:73:b4:07:b7:de:60:ae:c6:7e:
         1e:a2:16:cc:52:31:ff:37:f0:2f:80:ad:8d:41:a3:77:5e:41:
         5c:84:03:65:a9:fa:44:74:6a:34:cc:fe:06:1b:d9:e5:37:4d:
         87:ad:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:33 2024 by rpki-client on console-fra.rpki-client.org