Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
File:                     035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa (raw, json)
Hash identifier:          xizZgHNnVm0Br3nasYfahAoWUjtX874Jp6OvruAFa5g=
Subject key identifier:   25:3D:29:FF:0B:C9:D1:03:99:37:38:F1:48:F1:70:86:6B:2B:75:25
Certificate issuer:       /CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
Certificate serial:       010D0C9F43285847EBBF816D61D13162671B9400
Authority key identifier: 25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa
Signing time:             Mon 18 Nov 2024 14:00:40 +0000
ROA not before:           Mon 18 Nov 2024 14:00:40 +0000
ROA not after:            Sun 16 Feb 2025 14:00:40 +0000
asID:                     36780
IP address blocks:        63.246.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:eb:bf:81:6d:61:d1:31:62:67:1b:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e45201d6-ab25-40c8-a762-17e529ce9d0a
        Validity
            Not Before: Nov 18 14:00:40 2024 GMT
            Not After : Feb 16 14:00:40 2025 GMT
        Subject: CN=5f1c45c2-4eb4-4cbb-bb33-b952586ff258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:e0:48:cc:ad:78:06:3e:c6:d4:02:66:10:
                    9a:8d:ee:f8:87:c2:1f:7e:d9:b0:49:09:45:80:af:
                    b0:5c:5e:72:02:f1:8f:7f:01:19:74:fb:86:dd:3a:
                    3b:dd:3c:f1:4f:e5:39:99:3c:99:78:21:b2:8b:96:
                    db:28:f7:a7:e8:ef:60:f7:78:0f:67:2f:3c:5e:0c:
                    1b:d5:05:a2:d4:7a:a2:73:78:e9:f6:41:e5:45:a1:
                    92:09:03:9e:a8:66:db:07:04:e0:4d:14:cc:ae:7b:
                    92:62:7a:35:00:7a:94:69:30:e3:97:3e:8a:89:f7:
                    96:bf:8d:72:15:b1:10:be:eb:95:b2:c1:c6:57:f9:
                    43:90:ad:a4:35:72:a2:35:72:75:51:c8:fa:ec:3a:
                    3e:c4:66:27:e5:28:b6:cd:be:39:04:ee:45:26:15:
                    88:bf:4d:bc:09:6a:18:ee:fe:5d:d2:bd:c2:1f:82:
                    59:13:cc:3c:1f:91:72:8c:df:3b:97:99:be:ca:0d:
                    82:1d:07:e1:ef:c2:4d:09:10:49:85:f9:73:37:04:
                    87:4f:c0:3f:ea:f5:6a:52:0c:08:22:3b:f8:b4:94:
                    72:a8:ec:68:b4:1e:ac:96:da:72:6e:15:2b:2e:9e:
                    46:17:e4:a8:13:1b:df:5f:5d:2e:95:af:e0:c9:60:
                    09:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3D:29:FF:0B:C9:D1:03:99:37:38:F1:48:F1:70:86:6B:2B:75:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/035025b3-3512-3ae0-b896-bf1f5fa2ce4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a/e45201d6-ab25-40c8-a762-17e529ce9d0a.crl

            X509v3 Authority Key Identifier:
                keyid:25:6D:BC:60:18:2B:41:E2:AB:CC:3B:C0:E5:EA:BF:51:94:0C:5F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e45201d6-ab25-40c8-a762-17e529ce9d0a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.246.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d5:9a:10:9b:f3:8d:7c:82:d5:5d:1a:91:19:89:d2:40:3d:
         15:73:44:97:36:54:be:79:14:da:9f:d4:c1:18:b9:3b:81:ce:
         21:fe:46:95:40:6c:55:2e:71:8f:52:d4:62:15:fd:2f:fe:52:
         ab:f9:13:74:f8:cb:c5:54:cf:84:8d:09:69:0c:b5:37:ab:2a:
         58:24:8c:41:8b:60:cb:8a:0a:df:39:0a:31:d0:3c:f8:d2:22:
         a8:50:6d:3d:b5:6b:73:a5:bd:aa:0d:b3:ee:81:a1:97:e4:b4:
         9b:ae:4d:ef:f6:82:37:0b:ff:44:ba:aa:91:fa:e3:bb:3e:f3:
         e9:ca:ee:f8:3e:61:a4:ce:9c:a3:6a:fe:11:ce:cf:66:5d:6d:
         b2:25:91:10:29:a2:13:53:dd:5a:a2:2f:ca:9f:53:3f:5f:b3:
         ef:66:90:cf:55:dc:8e:b2:ee:50:33:13:77:27:f4:3a:4f:6e:
         77:fa:e6:84:62:2b:47:b2:cd:c5:04:14:30:1f:ff:a4:81:79:
         e0:58:e4:97:69:1f:92:ea:ed:58:4c:a6:cc:1e:8a:27:ad:83:
         85:16:89:11:60:b5:25:7f:57:de:8c:1e:79:0a:4b:d3:0d:6b:
         03:90:1b:fb:06:c8:8a:01:a2:3e:5c:12:29:e6:f0:9f:66:51:
         f2:6a:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:05 2024 by rpki-client on console-ams.rpki-client.org