Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa
File:                     fc787895-da58-3d06-bd49-e9c99ef26005.roa (raw, json)
Hash identifier:          cENO5fEyvg7UzpOFKzW/sAoNkgf339iqlfj+0TgEJaw=
Subject key identifier:   70:D7:DA:CE:83:20:1E:2E:B1:78:43:12:CF:59:E6:EE:09:79:67:D9
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F4328584509557114195987BC8487C100
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa
Signing time:             Wed 28 Feb 2024 02:00:26 +0000
ROA not before:           Wed 28 Feb 2024 02:00:26 +0000
ROA not after:            Tue 28 May 2024 01:00:26 +0000
asID:                     1239
IP address blocks:        63.161.76.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:09:55:71:14:19:59:87:bc:84:87:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Feb 28 02:00:26 2024 GMT
            Not After : May 28 01:00:26 2024 GMT
        Subject: CN=655a5afb-cb24-4287-80e5-f5e59e1df94c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:f4:6a:44:1c:8d:7c:09:09:10:0f:fb:fc:
                    30:96:10:21:8f:6b:ef:d6:7b:a2:f9:c5:41:38:dd:
                    82:c7:27:9a:c7:ab:c7:6d:fe:c1:b5:20:db:68:ba:
                    49:85:17:fd:54:eb:82:59:48:24:b1:88:9b:3a:3a:
                    fc:a6:30:3d:8b:13:fa:44:81:9f:ca:e7:c7:99:b1:
                    ce:fa:79:e2:3f:0f:a3:3c:ee:dd:7a:6a:d2:d5:45:
                    df:d3:2a:2c:92:f7:bc:0a:63:c6:61:98:d3:93:17:
                    5c:97:4a:59:a7:fb:9c:e8:35:df:89:4e:c9:ab:24:
                    7c:5d:97:5e:71:fa:3d:67:41:f6:33:c0:b2:cc:07:
                    60:cd:44:b3:05:c7:59:bb:a2:69:19:9c:77:38:6b:
                    68:af:88:1d:a8:81:a3:a1:47:29:ff:e4:a7:67:14:
                    e2:2c:9b:ac:56:f9:91:d2:49:8c:43:c2:eb:01:91:
                    81:fb:78:7c:5a:8d:1b:43:93:a4:0a:cb:32:c8:41:
                    ee:fb:80:ad:e7:79:79:0b:0b:64:36:25:61:c9:a9:
                    6d:86:b8:4d:6c:0c:60:1c:d4:fb:e0:57:21:40:79:
                    da:fa:18:ec:ba:29:46:7e:ab:0f:9e:69:29:34:a0:
                    49:ee:90:2b:07:38:25:43:62:14:f3:22:ba:e0:b7:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D7:DA:CE:83:20:1E:2E:B1:78:43:12:CF:59:E6:EE:09:79:67:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/fc787895-da58-3d06-bd49-e9c99ef26005.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:6f:78:2e:7f:91:88:93:27:8c:64:f4:ce:b4:c9:ae:5a:5e:
         1c:b1:ad:8a:68:ac:4f:4d:ad:82:9e:e3:83:ed:45:85:ae:b6:
         29:f8:1b:8b:3a:4d:71:78:b4:03:df:8f:97:1d:46:9e:d2:75:
         e8:70:a4:d2:af:01:9e:8f:9d:7f:dc:3c:31:89:99:78:e3:56:
         63:d4:99:ee:61:3d:30:d2:a4:62:bf:7b:18:98:ae:2f:bc:31:
         1a:26:d5:6a:86:16:d3:6a:84:0b:40:a8:bf:d8:96:01:22:80:
         7a:72:43:a7:20:0e:bf:37:e9:22:46:2c:8e:95:26:25:ae:6e:
         c8:a7:80:36:ed:31:f6:9f:0d:bc:5f:92:6a:d4:42:b3:90:e6:
         25:7d:1f:d7:b2:08:f0:8a:bc:a4:ec:1b:91:69:d7:e8:ed:bf:
         53:b2:f5:43:f0:93:e5:30:ee:7d:6f:fd:8c:0a:68:79:29:4e:
         3e:75:d3:76:a7:9d:e9:89:75:13:fd:7b:4c:41:fd:fb:81:7d:
         0f:3b:8c:cd:bb:b2:84:7a:97:58:af:bd:3f:39:fb:3f:5b:61:
         7d:78:3b:c3:9d:72:7b:0d:14:fc:5b:25:4a:84:ef:f1:5d:13:
         77:f9:3f:9a:3c:46:45:d4:f7:41:1a:35:2d:41:33:87:ae:f8:
         d5:fd:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 14:33:02 2024 by rpki-client on console-fra.rpki-client.org