Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
File:                     666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa (raw, json)
Hash identifier:          YBdVnEsntdfNfktXTiWo5gOBdJYe+veYGdriox6YViM=
Subject key identifier:   06:95:5E:5B:2E:F7:E4:BB:56:3D:0F:6C:FF:04:EB:FA:3C:BD:DA:FF
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285845B7B37892C5FB023DDCC53F30
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa
Signing time:             Tue 30 Apr 2024 13:00:34 +0000
ROA not before:           Tue 30 Apr 2024 13:00:34 +0000
ROA not after:            Mon 29 Jul 2024 13:00:34 +0000
asID:                     400317
IP address blocks:        63.160.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:b3:78:92:c5:fb:02:3d:dc:c5:3f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Apr 30 13:00:34 2024 GMT
            Not After : Jul 29 13:00:34 2024 GMT
        Subject: CN=44a5a13a-e367-4eeb-baec-c5b205fc19a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:dd:a0:50:14:78:9c:23:14:1b:aa:9e:06:
                    ec:67:ad:4d:ff:75:ea:0e:38:24:93:69:37:a4:ae:
                    e4:1b:7d:0d:8f:65:ae:93:4d:fd:12:cc:1f:13:da:
                    6c:42:7e:e1:c3:b5:3a:9d:74:0c:83:c5:04:c7:dc:
                    90:21:e2:e3:5e:b5:83:d3:57:2c:03:04:9b:b9:2e:
                    0a:d4:a6:c8:fa:7c:b6:dc:bf:1a:04:86:8d:77:82:
                    f9:40:c0:6c:87:05:d8:3e:2b:f4:66:0c:f1:7a:d9:
                    78:d0:bb:cb:a6:66:47:5f:df:1a:7f:86:1e:93:3d:
                    95:cc:36:ef:a4:49:47:b2:e4:82:6a:10:e8:d1:7a:
                    0f:80:67:6d:6c:57:13:d8:a0:37:f9:2a:a2:35:b4:
                    0f:1c:da:2f:a1:47:d3:c0:b0:bb:4e:5a:61:e2:5f:
                    e5:84:85:1e:09:1c:a7:25:c1:88:4b:0f:53:0c:0e:
                    27:10:f6:61:28:98:92:5d:af:16:29:d3:da:9f:48:
                    9a:7e:3b:fd:d3:cc:67:00:c8:17:6d:8d:97:7a:55:
                    75:e7:cb:1d:c0:46:27:7b:88:d3:59:25:e1:97:b3:
                    21:78:91:24:b3:cd:af:d7:b2:bf:56:fd:e1:80:a0:
                    8d:ca:21:f4:b9:69:66:23:bb:5e:4c:24:a8:fa:d9:
                    dd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:5E:5B:2E:F7:E4:BB:56:3D:0F:6C:FF:04:EB:FA:3C:BD:DA:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/666e92f2-c98b-3e4f-a6b5-156d0325ce09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.160.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2c:68:d7:d5:15:9b:a8:b5:77:49:5e:ac:7e:a6:1f:99:c8:
         74:8a:e0:21:62:8a:f1:7b:10:04:00:fe:19:11:69:53:cd:e4:
         2f:7f:2f:74:8f:06:3d:38:45:2b:db:f0:2d:2a:c2:ae:80:08:
         65:a9:7c:00:48:8e:65:1c:09:d3:d9:1f:fa:06:5a:22:57:ce:
         8a:39:d5:2c:af:11:de:9c:12:00:a0:54:16:a7:fa:df:f5:1a:
         43:17:4e:cf:8d:2a:18:35:0f:71:b0:43:f4:8b:fd:81:34:ad:
         36:ff:1c:31:e5:b8:c3:1a:74:0b:8e:9f:a2:c7:a2:49:87:aa:
         2d:1c:45:56:d7:67:5b:29:b6:a6:4b:f3:c8:2e:8d:1e:5e:76:
         ca:78:dd:00:41:72:78:de:ec:c6:65:ec:8e:f6:e2:fb:0c:f7:
         c8:b3:f6:3a:be:83:83:40:bf:42:30:08:89:24:d4:e2:23:3e:
         7b:c8:e5:7c:15:16:f6:bb:04:e0:10:90:46:b1:4d:3c:ac:96:
         f1:08:dd:85:5b:82:ab:26:bd:53:df:ad:24:46:f8:66:f4:51:
         f7:3d:a0:87:6f:7e:6b:ab:5a:c2:8a:6c:2d:5b:d1:9c:d6:c1:
         a0:24:58:fb:20:21:fa:8a:36:f0:7f:be:b0:15:b2:7d:e2:19:
         f1:0f:33:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 02:56:35 2024 by rpki-client on console-fra.rpki-client.org