Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
File:                     40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa (raw, json)
Hash identifier:          AJXLSdOvqCeiMweSNYHqjYOrlHByb17kAG+RMKWym2A=
Subject key identifier:   D0:F0:25:55:5B:7C:BB:A5:EA:1A:4A:A4:78:B9:42:3B:14:21:D5:B3
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285844D9DFCF1EB926FAD3D0C43600
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa
Signing time:             Sun 11 Feb 2024 02:00:25 +0000
ROA not before:           Sun 11 Feb 2024 02:00:25 +0000
ROA not after:            Sat 11 May 2024 01:00:25 +0000
asID:                     1239
IP address blocks:        63.160.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d9:df:cf:1e:b9:26:fa:d3:d0:c4:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 11 02:00:25 2024 GMT
            Not After : May 11 01:00:25 2024 GMT
        Subject: CN=8cfdf795-0063-40b7-bf2e-c67230e08ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:4c:1f:95:44:e9:27:9a:3c:ec:19:66:70:
                    8d:68:26:6c:5b:d1:3f:43:3f:e3:2d:48:25:31:fe:
                    e5:18:04:f5:73:b3:54:5a:2a:df:f3:4f:3e:4f:0d:
                    8c:89:06:f8:62:47:66:97:d3:6b:91:94:30:6b:b6:
                    24:f8:ef:50:30:cb:71:6d:f2:fe:59:65:6b:e1:4f:
                    e8:ce:80:57:4f:36:88:f7:c3:ae:8c:62:e8:34:ce:
                    ab:63:ed:9a:ab:c2:88:ba:c8:ba:80:c1:37:61:6e:
                    38:45:83:6d:ab:3b:97:05:81:26:4c:27:c7:2d:e9:
                    2d:91:d2:e1:8d:ce:92:66:37:28:dd:50:28:0d:4c:
                    5e:d7:43:6a:81:b4:28:f4:77:65:ab:1a:95:89:e1:
                    f1:63:6a:fc:e3:10:9a:ad:e8:21:eb:19:e2:64:b0:
                    a0:77:8e:67:11:05:62:22:64:b5:90:19:67:8d:07:
                    d0:44:6f:39:ca:9d:01:db:15:6d:33:b5:8a:e1:b4:
                    d2:1d:ad:5b:6f:3d:2e:09:71:5b:b8:55:b5:0a:ca:
                    8c:67:c6:56:f0:01:7e:0f:e2:9a:5d:c0:24:d2:93:
                    d6:b6:a4:3e:86:29:cf:e7:68:bd:09:28:99:9c:0b:
                    23:0b:a9:1e:fb:bc:b1:a4:f8:af:b6:0d:30:64:80:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:F0:25:55:5B:7C:BB:A5:EA:1A:4A:A4:78:B9:42:3B:14:21:D5:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/40fcd6aa-94a1-3204-b20e-fff0a1a88352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:c5:36:9a:cd:f5:83:f3:73:af:68:9b:43:b5:a9:e5:ae:25:
         9b:b2:6b:92:08:e0:e1:16:09:5b:36:8c:e1:41:0b:21:d6:ba:
         a0:1e:26:14:2a:15:89:2b:9c:64:c9:35:b2:a1:35:cb:5d:b9:
         2e:8c:10:97:09:a1:50:34:b6:fc:4d:84:d0:bd:44:31:74:e3:
         bd:1b:90:45:70:2d:81:ba:db:9b:7d:da:80:e2:c5:c7:41:28:
         34:7e:a4:b6:8c:3d:7b:3f:bc:5e:08:09:d5:6e:e3:b1:00:de:
         d1:1b:23:b7:4e:77:20:f1:63:6c:f2:78:30:b9:35:28:1d:65:
         98:88:c2:a9:11:44:0f:55:1a:c7:c2:45:5f:0e:e7:b5:b8:7d:
         7c:5e:66:8a:6d:08:cc:40:f8:83:c7:12:9f:ab:06:4b:e0:d7:
         38:01:6d:9b:92:0d:8f:5e:73:d9:52:a9:b6:c1:52:00:46:24:
         1a:06:4b:b5:39:52:af:5d:9d:7b:ed:f6:14:c0:54:81:1a:f0:
         38:84:8c:e9:cd:cc:4a:cb:3a:00:ea:b7:64:10:53:7b:c9:88:
         81:ce:10:b8:71:9e:e2:5b:47:ea:dc:37:be:80:c3:ba:94:25:
         86:c6:c0:75:c0:f5:74:4a:e9:3a:96:79:75:a6:94:42:cf:0b:
         ec:e5:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:41:42 2024 by rpki-client on console-fra.rpki-client.org