Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa
File:                     dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa (raw, json)
Hash identifier:          JQFJvmTwsDU3DywbD/dikE04WxHeYW5hpQd7a+YP+rc=
Subject key identifier:   5C:24:88:3D:DC:88:FF:08:7B:60:FA:4C:97:3F:A6:B3:D1:3E:08:FF
Certificate issuer:       /CN=31009a8b-537b-4076-8ee6-38c45e51e37a
Certificate serial:       010D0C9F43285848186A8B51A8BFF5621522F800
Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa
Signing time:             Wed 04 Dec 2024 14:00:52 +0000
ROA not before:           Wed 04 Dec 2024 14:00:52 +0000
ROA not after:            Tue 04 Mar 2025 14:00:52 +0000
asID:                     16509
IP address blocks:        63.133.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:18:6a:8b:51:a8:bf:f5:62:15:22:f8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a
        Validity
            Not Before: Dec  4 14:00:52 2024 GMT
            Not After : Mar  4 14:00:52 2025 GMT
        Subject: CN=073c7677-845f-4689-b6c1-c6d991e40dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:5b:1b:a7:be:14:53:a5:78:94:a7:81:b0:
                    25:f9:78:e7:9d:f7:51:30:66:ae:78:1d:15:dd:5f:
                    53:7b:76:9e:1f:ea:85:18:60:b4:c0:80:b9:96:94:
                    c2:c9:a7:7a:a9:a2:18:bb:a6:9c:03:db:2e:cd:52:
                    bb:ff:17:2d:13:66:dd:59:ee:20:e7:8f:2c:74:99:
                    75:0e:d0:b9:5d:71:68:3a:98:3c:bc:04:93:18:c1:
                    9a:e4:0d:32:79:92:f2:8e:68:30:cc:05:62:19:24:
                    47:1b:40:a2:3d:e7:42:3f:12:df:c5:7c:af:e8:73:
                    22:8c:6f:ce:ad:3b:cb:5b:e8:f5:c7:ee:64:29:16:
                    58:16:e8:e3:62:41:08:32:f9:01:3b:6b:0d:4f:90:
                    08:d3:ef:9f:a3:e2:80:ab:41:63:dc:76:df:e0:78:
                    7e:e1:b9:cc:9a:d8:c8:c4:1d:30:6e:9c:cc:98:0f:
                    e2:34:44:a6:19:d1:9c:52:76:06:d7:31:fd:fb:6b:
                    d2:7f:7c:c7:0d:95:61:48:f7:80:b6:65:19:21:e5:
                    72:ca:62:9a:60:ba:92:97:83:bd:92:5b:0b:85:a2:
                    0f:56:f3:c4:e8:2a:1d:8c:57:01:86:7e:57:61:63:
                    8d:ae:4e:5b:36:ba:d3:88:85:80:f0:b9:5e:fd:35:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:24:88:3D:DC:88:FF:08:7B:60:FA:4C:97:3F:A6:B3:D1:3E:08:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/dda0c169-db63-3fc9-b3c3-8d75b6f7b493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl

            X509v3 Authority Key Identifier:
                keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.133.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:8a:86:5f:b8:58:c8:9b:f8:de:bc:b9:fa:62:3d:9f:ac:6d:
         d3:00:a1:5a:de:39:dc:22:92:69:12:d0:b6:43:6b:96:a4:89:
         9a:5e:49:6b:d2:c1:6e:e0:d7:62:fa:e0:52:97:08:f4:7a:12:
         4a:51:06:d1:9f:98:8c:28:ed:1e:d1:43:3c:e0:ef:66:96:1b:
         be:04:31:00:b0:8f:9e:87:e6:b0:ab:cb:eb:20:17:18:da:86:
         e9:07:54:43:e0:f1:cf:31:18:d6:73:ba:5d:3d:ee:f1:da:46:
         7a:ad:7c:7a:2d:4e:52:f5:82:24:5a:b9:15:b0:97:2f:27:12:
         14:69:6a:85:61:74:cb:b2:8f:e3:d0:22:a3:dd:0f:fc:41:b6:
         e3:e4:2f:b1:67:d4:b3:a5:24:d0:8e:ae:ee:41:b6:f2:1a:aa:
         b4:6c:27:a1:59:c6:41:0d:03:f3:cc:78:5c:ff:cc:59:18:41:
         d3:1f:73:86:76:93:3b:63:ec:e1:e5:92:c5:bd:2c:c0:7c:af:
         c6:b5:70:96:25:68:14:30:6a:54:bd:83:c1:15:6b:01:32:d9:
         ac:41:f7:bf:d2:66:88:b9:4c:a5:e8:e0:d6:c2:95:e8:86:a7:
         e0:95:79:b8:2d:a1:af:64:a3:41:72:bb:f4:f9:69:43:14:d4:
         a6:3f:86:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:04 2025 by rpki-client