Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
File:                     666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa (raw, json)
Hash identifier:          lhDKxWCpJU+FKuu+OF32+R8jwmpb0SGjH/7chDFRrSM=
Subject key identifier:   66:43:8D:AC:A4:3C:80:05:49:0A:04:EF:FB:F6:E9:CE:3D:B5:95:25
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285844D71525EB7E0F12F318F87080
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
Signing time:             Sat 10 Feb 2024 02:00:26 +0000
ROA not before:           Sat 10 Feb 2024 02:00:26 +0000
ROA not after:            Fri 10 May 2024 01:00:26 +0000
asID:                     400317
IP address blocks:        63.160.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:d7:15:25:eb:7e:0f:12:f3:18:f8:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 10 02:00:26 2024 GMT
            Not After : May 10 01:00:26 2024 GMT
        Subject: CN=2ad582f9-31f7-48d0-ab20-5e1da694f4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:1f:64:2e:ea:f6:cc:07:a4:7f:bc:d2:cf:57:
                    49:9d:c4:aa:03:84:fc:44:e1:8c:e6:27:0a:7d:9d:
                    c0:72:73:52:74:a1:c4:9c:d8:92:b3:88:52:b8:ed:
                    63:fc:5b:08:ca:df:e2:26:ad:20:d5:64:16:03:39:
                    30:54:fc:a6:50:53:d8:89:b0:50:05:fb:ff:79:8a:
                    e3:d0:59:6d:e8:1d:2a:45:c0:0f:7d:01:8e:53:bc:
                    9d:cf:f8:9f:7b:df:1a:7a:d6:e0:42:92:6b:4f:fb:
                    2b:f5:40:e4:a6:58:a3:d0:2b:75:cf:79:c3:f4:90:
                    f0:57:b9:9e:40:17:b6:14:42:29:e6:69:f0:b3:79:
                    f7:6d:62:f1:2e:4c:88:53:64:21:62:33:0d:5c:9d:
                    f6:01:6c:98:82:53:9a:12:89:70:c1:03:d2:31:fa:
                    bd:18:63:f3:71:65:fe:9a:12:73:89:99:5e:d3:7b:
                    4f:63:a4:c1:60:47:8a:75:28:71:d4:23:7e:8d:0b:
                    b1:2d:ff:e3:b4:85:58:e7:77:a9:2a:2f:1c:33:37:
                    52:be:f1:0e:95:63:dd:0e:aa:ed:12:c6:0d:38:60:
                    01:dd:37:e6:c3:41:72:15:fa:66:88:c3:2f:6a:8e:
                    a7:df:70:2c:e6:af:28:7a:a6:5b:bc:86:fe:d3:8f:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:8D:AC:A4:3C:80:05:49:0A:04:EF:FB:F6:E9:CE:3D:B5:95:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a4:bc:72:08:09:08:79:ef:cd:3b:32:05:a4:61:77:6b:c4:
         84:bf:01:09:27:a2:01:2a:f8:b8:31:7a:7d:c3:2e:a3:c0:8c:
         de:ea:4b:a8:22:8e:b2:65:da:52:7c:09:9a:51:6c:02:4f:f4:
         f5:b2:d0:63:73:cd:fb:ee:06:93:49:5f:2e:8d:c4:3e:c2:e8:
         26:e3:67:74:87:38:56:a0:84:0e:90:6f:df:c3:96:87:5b:41:
         c4:08:c2:d4:21:62:19:bd:14:54:a3:da:48:29:38:b8:d9:04:
         f3:f9:21:98:63:a9:b6:e5:cf:3a:68:40:af:d5:fa:84:d8:7d:
         b4:8b:94:93:a3:b2:6d:2c:39:68:29:f3:e7:56:56:58:fb:3c:
         83:89:9d:b2:6f:b4:e0:fb:9b:74:49:3e:7c:d7:b0:ac:e8:49:
         d8:f7:3b:96:b3:f3:dc:e6:53:0b:c1:e7:ad:19:5e:7c:a5:52:
         f9:37:02:27:cf:63:f5:1d:c6:89:35:c4:84:b7:72:7f:af:ba:
         23:16:71:56:92:03:da:1d:5e:ea:61:33:5b:a4:bc:07:be:b5:
         c0:38:43:68:1f:e2:bf:0e:aa:f2:14:6c:ca:5f:32:bd:c0:a0:
         20:37:73:f2:dc:26:c0:d6:a3:36:24:04:17:10:08:53:77:5d:
         47:49:b2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:24:56 2024 by rpki-client on console-ams.rpki-client.org