Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
File:                     d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa (raw, json)
Hash identifier:          pdkjcv78E28Cj6WlqRzGEJqvre1qziUw5nCBVVSGrxA=
Subject key identifier:   BC:1A:D3:28:62:94:22:BB:7D:51:59:A8:A7:90:86:95:37:A1:E3:AF
Certificate issuer:       /CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
Certificate serial:       010D0C9F432858475910C2135387923CA8346580
Authority key identifier: 84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa
Signing time:             Fri 27 Sep 2024 01:00:31 +0000
ROA not before:           Fri 27 Sep 2024 01:00:31 +0000
ROA not after:            Thu 26 Dec 2024 02:00:31 +0000
asID:                     400141
IP address blocks:        63.135.70.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:59:10:c2:13:53:87:92:3c:a8:34:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bc8e9cb-88ee-455e-b012-1b1abfca72ab
        Validity
            Not Before: Sep 27 01:00:31 2024 GMT
            Not After : Dec 26 02:00:31 2024 GMT
        Subject: CN=1e13f5e1-8dfa-4ca9-a8a6-a6482def2def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:c0:8a:60:6e:00:ae:a2:1a:d9:8d:2c:d7:
                    9f:5b:24:36:1d:18:26:4b:9c:09:6e:08:35:39:00:
                    ce:cd:81:cc:e3:7e:57:05:ca:ef:b2:a1:25:22:77:
                    83:8a:c8:57:d3:87:b6:41:de:4b:82:1c:c7:47:90:
                    7b:0f:e6:ae:5f:17:d0:33:e9:46:76:bf:7d:00:b6:
                    d8:5a:ef:e4:70:af:c5:f1:c4:bf:00:10:5f:b1:77:
                    25:91:70:b6:e1:d0:14:95:2d:9e:a1:55:6d:e5:ac:
                    3a:49:c5:45:f5:7a:97:71:84:e1:cf:4c:d1:95:d8:
                    df:dd:ba:38:ac:e2:6c:8a:d1:c6:77:d9:8c:36:0e:
                    ee:e6:da:6d:5d:cd:27:17:d7:e4:d4:64:83:cc:fc:
                    66:c8:58:f5:5f:ee:a8:8f:c2:76:68:c1:41:e0:a3:
                    24:ca:74:c1:cf:f7:b2:97:cb:0f:d7:e8:3f:c8:fb:
                    68:be:d3:54:ab:d9:db:9d:e9:74:21:8c:48:38:a3:
                    09:7a:7d:e2:4e:4a:ae:48:c8:ce:2f:b7:f5:21:ab:
                    8e:76:77:9c:fb:26:19:6e:d5:38:f1:3e:28:11:4d:
                    1e:ee:d5:40:9c:73:f2:4b:b8:b6:2f:76:93:c3:e9:
                    07:07:db:a4:f9:3f:a5:08:c3:ae:94:4e:f8:75:82:
                    72:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1A:D3:28:62:94:22:BB:7D:51:59:A8:A7:90:86:95:37:A1:E3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/d9e1ae26-257a-3a0b-b46e-049aa014cc17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.crl

            X509v3 Authority Key Identifier:
                keyid:84:AD:69:95:E5:C7:F4:14:66:20:C8:C7:68:96:BA:C7:52:17:0D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc8e9cb-88ee-455e-b012-1b1abfca72ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.135.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:f0:9f:d9:29:cd:8c:7c:91:24:b1:b0:45:12:ef:1e:0e:
         41:2a:43:64:1e:2d:8d:ac:a9:bb:f3:1b:8b:a3:c8:21:3d:e7:
         31:bb:a5:09:0b:6e:5e:53:40:a8:1a:5e:41:eb:ef:f8:db:31:
         0a:21:b2:30:4e:3b:47:3f:71:e2:78:66:70:ba:f3:4e:66:d4:
         21:49:56:81:3a:20:54:1c:f4:52:75:79:77:89:56:83:a5:18:
         4a:86:26:6f:ee:7e:e5:ee:a7:cf:96:eb:14:51:0a:2f:79:e1:
         61:07:f1:83:45:53:19:0c:14:e3:f1:06:19:36:f9:19:18:ad:
         b8:12:f0:36:8f:c5:80:99:7c:5f:75:27:7f:20:01:d1:ad:f4:
         c0:b5:8a:e5:59:8f:e9:49:12:31:6d:4b:98:6b:93:91:b8:d7:
         2e:d2:70:d4:f3:14:5c:2a:4a:aa:ee:ae:fa:84:fa:99:88:01:
         d1:e9:46:9b:94:9d:47:bc:5d:36:cc:b1:0e:3d:4b:89:1e:ec:
         6f:ad:da:01:00:1f:40:4a:fe:54:ae:38:aa:a1:bc:d8:0b:ed:
         5b:9a:b4:0c:88:95:0c:97:34:60:d7:1e:fd:b9:7a:3d:77:af:
         ac:81:63:6b:c8:8a:19:d8:bf:13:68:df:ae:63:30:dd:64:1a:
         73:98:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:39:38 2024 by rpki-client on console-fra.rpki-client.org