Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d86a8929-d40e-3743-ad33-9969ca7f9f24.roa
File:                     d86a8929-d40e-3743-ad33-9969ca7f9f24.roa (raw, json)
Hash identifier:          78St0VwXpLVm2RDJneUQE37Xw/KBZ89UTPOSKQw0cgo=
Subject key identifier:   8B:02:97:34:E7:0E:C4:6E:06:1D:41:B5:81:34:0A:E5:01:59:F3:8C
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285844E7089F7F9BB19E60A05A4700
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d86a8929-d40e-3743-ad33-9969ca7f9f24.roa
Signing time:             Thu 15 Feb 2024 19:08:14 +0000
ROA not before:           Thu 15 Feb 2024 19:08:14 +0000
ROA not after:            Wed 15 May 2024 18:08:14 +0000
asID:                     1239
IP address blocks:        63.174.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:e7:08:9f:7f:9b:b1:9e:60:a0:5a:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 15 19:08:14 2024 GMT
            Not After : May 15 18:08:14 2024 GMT
        Subject: CN=cc82d99f-138a-4551-9d6a-106cb913f93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:43:df:3d:b6:d5:48:19:2e:7c:2f:47:57:
                    02:de:84:ad:ca:fc:37:55:37:04:61:0b:31:aa:4e:
                    cc:a9:9b:b0:df:68:f5:6e:ed:66:c6:0a:6d:ba:e6:
                    cc:3a:c1:62:41:b8:71:9e:64:af:8f:73:8b:6d:0f:
                    65:a8:55:d3:3d:2a:44:26:5f:9c:d7:98:9b:c8:cb:
                    ab:44:94:0a:bb:1f:6e:6a:64:2d:5e:1c:55:bb:c2:
                    08:80:d6:17:c2:b7:b8:a8:99:37:36:61:35:87:b6:
                    58:ed:09:07:ed:52:5f:57:91:a7:04:a4:49:34:b9:
                    e8:3a:70:06:5c:13:5a:61:0a:8d:13:86:6d:08:30:
                    f4:71:74:81:20:e7:34:cb:5d:a7:6e:8a:13:c1:ff:
                    af:ef:1d:ed:79:8f:36:0f:d7:98:8a:f0:fe:a4:1e:
                    d1:47:8e:2d:79:a4:48:5d:0f:38:f5:26:23:f4:e5:
                    cb:a5:40:6f:36:8c:35:37:cd:a4:46:d6:5e:bc:45:
                    70:31:74:57:8f:4f:ca:23:cc:ad:6b:52:21:c6:fc:
                    ed:3c:29:46:8d:b7:3a:0a:f0:f8:7c:12:2b:87:64:
                    cd:51:29:17:78:90:63:20:72:8a:41:ea:2f:5b:52:
                    03:ae:75:d7:87:b5:23:84:7a:0b:8c:30:33:fc:37:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:02:97:34:E7:0E:C4:6E:06:1D:41:B5:81:34:0A:E5:01:59:F3:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/d86a8929-d40e-3743-ad33-9969ca7f9f24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.174.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:40:5c:b8:a1:4d:0f:60:3a:ec:51:93:93:56:13:9c:a8:10:
         be:99:8c:1d:f9:ef:ea:63:bc:b6:71:f7:b2:55:0d:e9:05:c3:
         43:78:72:35:b2:a1:b3:c3:2d:f5:55:25:e7:c1:ef:bc:f3:65:
         5a:7f:14:0c:a4:66:db:10:ab:05:3f:ce:c0:f1:d5:78:d6:c7:
         bd:c7:a8:e2:b0:93:9e:3b:3c:3f:9b:72:f8:a3:c2:cd:96:3b:
         c2:49:5c:a1:3f:46:9a:00:48:0b:41:57:02:33:23:2d:54:70:
         af:06:40:b4:cc:32:53:78:1f:46:90:83:72:6e:2a:12:fc:1d:
         c1:95:a2:7a:f1:54:74:a6:c4:63:2a:67:cd:ac:8d:8e:33:c6:
         ec:d5:62:2b:d6:65:f0:80:49:49:f2:75:a1:4d:99:5a:90:c5:
         4d:d9:4e:4b:f4:e2:43:b6:fb:86:c6:a3:4d:12:6d:24:71:67:
         b6:76:2c:d1:a6:eb:a3:ef:41:f2:e7:b0:e2:ae:d6:07:7c:ee:
         a6:34:d3:ba:32:41:b3:68:06:85:1a:af:b5:4f:2f:b7:6e:32:
         44:4c:9b:ab:0c:9f:2e:e4:31:27:8d:3b:7c:b3:5b:f2:12:59:
         0d:b8:dc:67:dc:b5:74:7e:c7:47:d6:5b:e1:d0:bb:61:8e:5f:
         68:5d:47:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 15:00:56 2024 by rpki-client on console-ams.rpki-client.org