Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
File:                     aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa (raw, json)
Hash identifier:          2fKLU93h/fH2bTCR8uSxbvbNZaedbmHspX8ytOI3oYI=
Subject key identifier:   99:DD:53:71:54:81:21:4B:D2:AA:4D:BD:4C:54:3E:C9:10:98:85:05
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F43285844DCAA80EBE98F0E1EE6F85910
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa
Signing time:             Mon 12 Feb 2024 02:00:25 +0000
ROA not before:           Mon 12 Feb 2024 02:00:25 +0000
ROA not after:            Sun 12 May 2024 01:00:25 +0000
asID:                     52262
IP address blocks:        200.12.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:dc:aa:80:eb:e9:8f:0e:1e:e6:f8:59:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Feb 12 02:00:25 2024 GMT
            Not After : May 12 01:00:25 2024 GMT
        Subject: CN=8e767709-d3a9-44fd-858f-4e1cb0e2d56c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:49:b2:01:db:e0:23:37:5c:50:c9:19:8d:f2:
                    f2:25:fc:08:80:7f:96:24:30:c6:6c:71:3b:0e:e8:
                    49:06:26:a7:03:25:59:df:51:7d:fc:f6:3e:6c:de:
                    72:06:3e:73:c5:01:93:42:f6:3e:c4:64:62:d2:59:
                    d4:70:75:d0:fe:2c:b0:37:d2:f8:4c:a9:8e:53:a2:
                    5f:3f:f6:75:59:95:6a:4c:f9:44:1d:58:f1:6f:80:
                    cd:7c:6d:c0:8c:cd:c0:1e:f6:1b:a0:91:28:7b:d3:
                    51:b5:7b:23:e9:7b:61:12:f9:b7:a3:50:a1:eb:e2:
                    a5:a6:21:db:70:a1:51:68:04:00:40:e8:b9:c1:e5:
                    95:53:11:f1:6a:c5:5e:59:6f:0a:93:75:f7:1f:15:
                    e3:dc:d9:c2:ce:04:27:36:8e:64:10:a1:31:92:1a:
                    d3:fb:29:95:d4:21:43:2c:56:d4:f5:b1:23:7b:68:
                    b1:42:7c:fb:b1:46:43:54:08:57:94:28:61:77:21:
                    6c:78:ae:23:f3:1f:36:68:60:4a:3b:fd:02:bc:71:
                    74:d6:65:c8:6a:be:0f:4d:89:4e:af:d0:8e:dc:26:
                    03:12:30:60:c7:a0:89:fd:3f:8d:b8:65:82:30:d5:
                    5b:39:b6:7b:9c:28:0d:49:18:2c:ed:25:94:51:92:
                    6c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:53:71:54:81:21:4B:D2:AA:4D:BD:4C:54:3E:C9:10:98:85:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/aa63a8c0-a18c-3729-be8f-5f31acd85c63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:84:48:72:45:20:95:58:36:0a:56:71:fa:53:04:1a:5a:
         be:69:ef:6c:aa:ae:03:ed:c9:ec:74:72:72:00:5f:af:a2:5e:
         c6:c4:58:2b:26:98:d5:33:75:c9:cd:f9:06:67:11:14:28:6b:
         01:bf:73:d1:56:90:15:cd:a8:41:e4:1d:18:46:6f:06:44:ab:
         57:f2:cc:68:b0:80:6b:21:fc:4c:b8:15:e8:63:53:f4:62:da:
         f0:cf:73:1f:49:91:02:29:37:f1:37:58:f9:38:67:3e:42:77:
         0f:d8:d6:29:c2:46:f9:bc:d7:da:02:5e:e5:6e:c0:5a:52:64:
         78:db:d4:54:84:e8:49:37:65:97:84:f3:78:18:b7:82:04:1b:
         9f:d0:82:a9:f6:b5:31:99:56:4e:61:9c:21:5d:80:96:6a:6c:
         52:b1:5a:f3:7d:53:9a:1a:35:b1:8d:2b:5f:e6:a1:a6:06:ec:
         60:be:06:be:ad:9a:7d:f0:23:3f:cf:5f:7b:28:eb:99:09:47:
         35:e3:a0:b2:fb:fc:ec:72:0f:be:cc:89:45:9b:b8:d6:fd:7c:
         0b:84:64:ec:d2:44:67:68:ae:30:f0:5b:d9:b7:8b:46:8a:37:
         c2:bd:5f:47:01:7e:b5:44:a1:3b:af:68:fd:7a:51:5b:24:5d:
         e1:ad:cc:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 01:56:43 2024 by rpki-client on console-fra.rpki-client.org