Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa
File:                     7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa (raw, json)
Hash identifier:          5M05/gpv9PweXoBzfCXVbfpTGlBoJX7Yc1NFH2J+HoI=
Subject key identifier:   D7:1D:D5:93:01:D7:DD:60:39:BA:47:9E:68:05:AD:9A:26:F8:03:06
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845A15DFE9B73AB5B40F0CE0200
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     32056
IP address blocks:        63.156.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5d:fe:9b:73:ab:5b:40:f0:ce:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=1cd2e571-b755-4294-94f8-b5d25410e01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:62:5e:b4:b0:b0:13:56:e3:fc:77:8f:e8:
                    e3:52:2a:75:1f:80:ee:6e:dc:6e:00:9f:d4:21:e8:
                    98:e1:b7:a3:a8:41:b8:ad:e5:2d:2d:df:b7:d9:9e:
                    30:0a:9f:76:7f:cd:e3:f3:aa:19:32:e5:0b:65:d6:
                    d6:55:68:77:87:4a:31:97:f9:ba:0f:19:30:f4:06:
                    a9:a8:e4:8f:c7:1e:9a:75:b3:a3:42:f0:cb:8b:ba:
                    35:77:61:0f:da:64:16:84:14:01:05:e8:9c:3f:7e:
                    05:63:96:77:49:7e:02:a0:cb:75:32:41:94:80:68:
                    56:9d:58:02:49:b8:97:35:53:9a:33:e2:18:f4:68:
                    9a:1f:47:a2:05:cf:5a:b5:12:56:3a:fc:64:b1:59:
                    43:bd:36:45:03:29:d2:22:8b:f9:99:69:06:d7:30:
                    d1:42:5c:36:d6:d7:4d:25:7f:25:10:ea:0c:76:02:
                    c8:6a:81:fa:fd:45:0b:89:b6:79:27:f2:6a:fc:3a:
                    d9:6e:ad:cc:5b:3f:cb:2b:ab:54:b5:5a:2f:65:02:
                    64:fc:ae:8b:15:ae:17:37:b5:04:f8:ea:39:f7:c6:
                    c7:0c:da:93:25:df:cf:87:04:4a:39:1f:f8:cf:7f:
                    d1:0a:fc:f3:b3:00:8a:37:43:de:d4:b3:5e:ee:1d:
                    12:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:1D:D5:93:01:D7:DD:60:39:BA:47:9E:68:05:AD:9A:26:F8:03:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/7f13f528-b1c3-3ee6-8f3b-745d5315ede7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.156.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:56:49:45:39:99:a0:22:f2:da:f6:96:2a:c1:c4:cf:ce:2e:
         38:0b:a3:09:51:82:f1:16:d9:3d:07:e0:6b:c1:e9:f9:9a:56:
         f4:a7:1a:ca:98:4d:e9:0f:9f:57:d2:b1:6e:55:0e:ca:d7:65:
         88:24:9c:4f:ea:a7:f3:64:a8:e0:67:37:1f:99:5a:29:4e:d0:
         bf:7e:1e:e1:97:a2:62:d6:a9:da:a2:9e:fa:96:b9:07:e1:d2:
         c6:dc:bf:01:41:85:01:f4:8b:f9:8b:36:47:1d:40:3b:19:8d:
         c4:8a:9d:9a:9c:3d:f2:0f:13:4b:34:db:7b:b4:8e:c6:45:86:
         5f:bb:8b:65:86:bf:14:ab:39:e1:7f:85:e7:33:54:6e:c0:7b:
         97:0b:b3:71:93:03:5b:c6:a6:df:d1:a1:b7:d2:2a:39:19:fa:
         20:c4:7e:07:5a:a0:40:9d:5d:1d:7d:0b:53:aa:71:ba:76:7e:
         ee:72:11:42:84:67:d1:9b:7c:fd:47:6d:bd:62:34:e6:b6:4c:
         76:32:15:a1:1d:3b:7f:4c:1a:8f:ab:8c:b5:28:11:7a:4b:e5:
         0c:70:bc:58:71:18:82:d6:a2:d6:25:71:4b:a2:7e:2e:60:88:
         d8:98:d1:52:c0:34:81:53:de:80:1a:80:99:1f:b8:1d:71:89:
         9d:9d:d3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 01:30:35 2024 by rpki-client on console-ams.rpki-client.org