Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa
File:                     dc4bb194-d171-353d-8f29-814e5bba5989.roa (raw, json)
Hash identifier:          ZNljoTmpSDtr9QkXxhYXwrSmIXP2BcdygjCJ5v5XqSM=
Subject key identifier:   09:C3:30:C1:D8:ED:7D:B8:67:3F:49:75:85:F7:06:70:AE:B8:4E:A6
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285847E094BED3846C02CE0A950780
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa
Signing time:             Thu 14 Nov 2024 14:00:40 +0000
ROA not before:           Thu 14 Nov 2024 14:00:40 +0000
ROA not after:            Wed 12 Feb 2025 14:00:40 +0000
asID:                     16509
IP address blocks:        163.253.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e0:94:be:d3:84:6c:02:ce:0a:95:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: Nov 14 14:00:40 2024 GMT
            Not After : Feb 12 14:00:40 2025 GMT
        Subject: CN=a8dc246e-e1c7-454f-b584-5cc71a7fbca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:38:b0:fd:c7:88:5d:44:84:d0:56:b0:9d:
                    08:f7:7f:11:ad:45:71:52:be:1a:50:eb:52:a2:1e:
                    bf:72:22:8f:8a:37:e7:56:d1:a2:74:89:6a:fa:4a:
                    e4:82:71:41:a0:67:ac:2e:2e:d8:f5:6b:ed:c7:99:
                    8d:dc:14:2c:ee:90:83:5e:76:34:bf:eb:e9:bb:d3:
                    0e:7c:8c:c0:3b:4f:fd:8d:11:2e:e0:f4:fe:01:6b:
                    5b:98:9e:c2:c2:ea:f6:d3:cd:dc:de:17:4e:b4:51:
                    bb:db:ee:a4:59:c5:ea:14:0d:0e:b8:f0:4d:b8:99:
                    49:61:6f:92:04:2e:dc:62:eb:b9:27:7d:2f:bc:d4:
                    3a:d1:34:32:cb:78:f0:aa:46:73:09:20:ac:9b:4c:
                    45:18:29:28:74:38:f0:ca:c2:dd:d3:04:c8:e3:b6:
                    9c:91:42:8e:89:c0:28:2a:de:f8:94:36:81:31:00:
                    8e:be:5c:b4:02:36:3c:8a:59:9f:36:f5:32:f2:7c:
                    81:e8:cd:64:cc:48:71:23:53:65:42:e6:ad:d9:64:
                    cf:a3:72:f3:d0:9b:c2:5a:66:fa:7d:4d:82:b6:56:
                    9c:38:14:9c:21:10:23:47:46:8b:67:c6:d8:1d:29:
                    ab:0a:08:25:2f:aa:1f:7a:eb:62:09:54:72:3a:cf:
                    cd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C3:30:C1:D8:ED:7D:B8:67:3F:49:75:85:F7:06:70:AE:B8:4E:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/dc4bb194-d171-353d-8f29-814e5bba5989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:be:7f:d4:15:f0:b2:d2:a4:c6:8c:fd:83:c5:44:0a:bd:bf:
         67:26:e8:38:b3:31:19:31:73:2c:6a:6a:98:e3:d8:8d:77:af:
         35:54:f8:1a:40:a7:ee:b6:6d:07:50:74:c0:cd:9c:b8:2f:9c:
         32:35:39:16:f7:66:06:e5:f5:b7:f5:b2:ca:27:60:22:9b:08:
         40:3a:3f:e5:23:d7:82:07:d8:2b:7f:9c:b1:10:eb:9e:0b:1c:
         f7:e6:3a:57:28:02:01:36:df:c3:f5:af:95:94:7c:a8:89:5a:
         ac:1b:c9:54:9e:6a:ed:ab:b3:b1:5f:69:f3:ec:10:7b:7a:61:
         e2:b6:94:61:3b:41:54:9e:60:96:97:ca:d4:1a:d0:91:e9:f1:
         d0:01:f4:8d:42:f8:5b:91:8f:94:9b:f9:be:03:83:ae:68:d6:
         31:91:08:35:60:2e:d5:26:d2:d2:86:52:ce:10:54:a0:45:dd:
         98:d9:84:f1:8f:d3:ea:1d:c5:4e:38:fa:2a:4c:23:95:21:de:
         05:f7:00:2f:5c:74:5c:e7:ae:39:d1:82:1b:cd:92:8a:c5:43:
         c7:1c:59:38:1e:00:46:fe:b5:a1:fb:84:4d:9b:13:03:3f:b9:
         b5:1b:2f:a3:46:9c:43:68:2d:c2:50:13:c1:db:b3:de:e3:3d:
         6e:5b:ae:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:46 2024 by rpki-client on console-fra.rpki-client.org