Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
File:                     b9903dfd-ddbe-3fba-9d99-deda5659260c.roa (raw, json)
Hash identifier:          l0wKh0JBnFcIlUWyZQjNRwfIKgrBTw8pBG4atRJaKDA=
Subject key identifier:   35:D1:7E:79:AE:37:0A:16:FF:50:7C:BB:EC:6B:18:E6:B2:5E:A4:EF
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847CE6F41ECE147CACD261A4700
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     11537
IP address blocks:        163.253.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:41:ec:e1:47:ca:cd:26:1a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=a011fecd-1e9e-4ce1-a68d-29e73d947a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:24:fe:6e:12:81:0d:a0:9d:45:86:c3:51:
                    ff:ac:25:ee:50:13:31:a4:1a:77:4f:91:cc:2f:83:
                    57:d5:bf:a2:77:d1:1d:ef:bc:dd:73:bb:cf:81:cc:
                    80:92:08:01:e0:0a:10:88:b2:90:65:a4:26:2a:fb:
                    e5:59:84:d2:3f:48:95:b9:9d:be:e1:d6:4d:b8:e3:
                    51:de:f7:64:db:1f:8b:74:44:9f:4e:64:8e:9a:55:
                    b4:0d:ea:41:f3:4d:16:8a:e8:d2:3f:bd:10:fd:c1:
                    36:55:24:4f:d0:71:da:00:4f:af:b6:19:05:54:23:
                    41:11:53:58:b5:75:9f:2b:ff:17:26:69:19:8a:2a:
                    b8:1a:8e:ce:a1:b4:46:16:c2:2a:02:59:2b:32:e1:
                    76:e7:3e:e5:9b:43:c8:0b:67:87:b0:87:1d:ff:30:
                    43:28:7b:c7:bb:86:6d:51:f7:2d:e7:06:50:87:6d:
                    d5:19:2f:56:aa:78:13:df:e5:0f:4c:76:f9:2a:9d:
                    b9:a5:03:f5:f4:13:01:16:ce:5e:8f:ee:30:04:64:
                    ba:3e:41:de:65:88:20:81:80:c2:ad:1e:89:f2:40:
                    b9:03:7a:28:e0:22:96:d5:63:79:33:da:3e:7c:b5:
                    1c:b4:c1:4b:fc:d1:7e:4a:54:e7:37:9c:ca:78:7f:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D1:7E:79:AE:37:0A:16:FF:50:7C:BB:EC:6B:18:E6:B2:5E:A4:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/b9903dfd-ddbe-3fba-9d99-deda5659260c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:40:c4:21:83:ac:2b:3f:d3:80:90:bb:2e:e9:db:cd:f0:b3:
         34:1a:c6:ee:56:72:90:40:ff:e8:1b:68:ba:79:da:cb:3e:d5:
         ab:17:6a:ca:b1:b2:08:a4:66:32:3e:8b:8d:ee:ce:7c:63:3b:
         c3:4f:6e:33:f8:1a:b1:0b:b4:cd:e0:87:e8:f2:92:d9:78:a8:
         17:1d:5b:18:f9:f9:96:e3:c3:86:1d:7b:fc:82:aa:a6:84:76:
         34:07:a9:c0:79:6a:ff:69:c1:c8:c3:47:ee:1c:60:5c:f0:36:
         6e:a1:94:b9:18:bc:c4:8c:b3:0a:27:45:5a:25:01:40:c0:a4:
         08:bf:ac:d0:89:7a:ec:c0:fa:a1:8d:d5:e0:1b:1f:bc:53:41:
         8d:b7:14:20:5e:73:31:f6:db:5d:42:13:6c:1c:ad:ca:9d:e9:
         a0:b8:4e:0c:43:9b:7a:94:32:c7:2d:fd:ca:0f:3f:bf:8e:7e:
         b0:86:9a:a2:90:b4:ab:40:9c:25:fd:5c:d5:5a:ef:a5:78:65:
         f6:3e:f1:d7:54:81:1a:df:7e:e7:1c:6a:20:d2:ff:39:f5:ba:
         0f:22:ca:46:dd:07:75:7e:05:85:ae:da:ca:0b:d7:c2:5e:e7:
         ad:4f:d8:bf:d3:eb:c2:f4:ef:14:ad:ba:2c:bf:70:11:bd:a9:
         a5:a4:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:46 2024 by rpki-client on console-fra.rpki-client.org