Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa
File:                     63502d4e-89a2-30eb-9321-3bea98daae34.roa (raw, json)
Hash identifier:          p9mv413uPK5hwLZDUhIQzjODrWXgnAjTWbDYha3mj+Y=
Subject key identifier:   88:64:C4:22:F3:FD:FE:00:DC:F1:51:6D:67:86:FF:3B:12:E8:51:4C
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285845453DC60ACF282E130FB0F800
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa
Signing time:             Wed 20 Mar 2024 13:00:33 +0000
ROA not before:           Wed 20 Mar 2024 13:00:33 +0000
ROA not after:            Tue 18 Jun 2024 13:00:33 +0000
asID:                     7155
IP address blocks:        172.243.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:45:3d:c6:0a:cf:28:2e:13:0f:b0:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 20 13:00:33 2024 GMT
            Not After : Jun 18 13:00:33 2024 GMT
        Subject: CN=c81ce7de-eb04-4bf3-a96d-c19d27a5c0cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:76:53:8f:58:0f:3b:ae:12:56:35:78:51:43:
                    ee:95:c6:78:b2:0e:7f:77:75:5f:18:0d:f3:c8:de:
                    94:25:2d:74:b5:ad:4b:5c:48:92:7e:50:de:8b:3d:
                    22:94:dc:9b:4f:65:9e:50:1e:77:bf:73:ff:50:3b:
                    6a:1c:2a:e2:84:be:c0:6d:3b:0c:f4:c9:30:44:ba:
                    67:45:95:3e:0c:4a:5f:0b:0d:fd:64:df:cb:3a:03:
                    9d:0d:96:bc:78:d8:81:ed:26:89:75:54:ca:b0:ac:
                    87:77:25:78:df:c5:ca:bb:41:07:ad:53:79:36:91:
                    84:ca:a7:1e:9d:38:1a:05:74:b9:d1:b2:58:04:57:
                    20:24:28:18:ff:58:21:06:f3:ea:44:03:52:52:a9:
                    bf:ac:b9:87:b7:4c:e4:ad:e8:df:e3:b7:7d:57:52:
                    dd:ab:bf:f3:48:0f:ce:ff:94:97:ab:c5:10:dc:ae:
                    d1:79:84:db:d9:6a:40:95:1b:c5:70:0e:3a:ce:dc:
                    4b:8d:6a:e1:ac:73:a2:70:70:64:e0:22:0a:19:48:
                    8f:a7:8e:f4:da:80:50:e8:4d:5b:3a:fc:a2:af:7a:
                    e0:66:ce:37:75:86:b4:51:59:07:f0:c9:92:4e:da:
                    ec:64:81:f7:67:9d:52:75:0d:17:4f:91:1a:9a:c3:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:64:C4:22:F3:FD:FE:00:DC:F1:51:6D:67:86:FF:3B:12:E8:51:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:13:75:b2:cf:2e:1e:a8:7b:b5:e2:d5:1b:aa:6b:46:2b:7f:
         c8:3a:51:21:98:18:bb:da:2d:aa:c1:a1:78:56:65:d9:53:de:
         e3:b9:2f:f7:30:e4:2e:35:40:e0:af:14:2f:70:79:71:95:ab:
         08:9d:c8:54:8b:cb:52:ae:ab:5e:bd:26:c9:21:9e:84:f5:73:
         66:1c:a6:f1:5b:a7:59:cd:a8:0a:c6:7f:38:39:31:c3:9f:ad:
         a3:40:50:6c:40:b5:6b:24:80:1f:bb:c1:35:2f:83:59:df:b9:
         bc:81:36:f8:cb:a4:d5:6d:27:52:66:0d:b4:02:13:43:4c:21:
         02:57:a0:5e:4a:a0:41:8c:15:73:59:04:f4:f3:d0:7f:f7:b8:
         ea:24:8b:f4:bf:dd:07:ad:72:40:fc:ab:8d:97:af:f4:ad:9f:
         bd:41:f2:c0:83:7f:28:d8:b3:c3:0f:d3:f9:8f:28:08:d7:08:
         91:21:c9:19:a8:e4:f9:85:cf:c8:a3:1c:3e:94:62:3c:75:7b:
         23:f8:0a:68:1f:43:81:0a:b9:ca:08:45:22:59:82:0c:42:ca:
         42:66:ce:f2:73:20:52:5d:ed:fa:bc:56:cf:29:1c:cd:78:b0:
         68:87:a4:de:30:14:8c:98:70:70:64:68:fa:3b:ab:9a:5f:04:
         19:50:f6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:11:34 2024 by rpki-client on console-ams.rpki-client.org