Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa
File:                     f214b74c-400e-3cf1-b976-685a01ebde20.roa (raw, json)
Hash identifier:          zgPrbNeib6y9s8S3SwCi6OhVfT9ZWKN0akPWPYVkGzY=
Subject key identifier:   E2:64:8C:33:65:4F:40:17:A9:D1:10:CD:F3:54:4A:42:60:C6:B1:73
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285847F15545CCC4BA2F30A0E3DD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa
Signing time:             Wed 20 Nov 2024 14:00:52 +0000
ROA not before:           Wed 20 Nov 2024 14:00:52 +0000
ROA not after:            Tue 18 Feb 2025 14:00:52 +0000
asID:                     53610
IP address blocks:        63.252.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f1:55:45:cc:c4:ba:2f:30:a0:e3:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Nov 20 14:00:52 2024 GMT
            Not After : Feb 18 14:00:52 2025 GMT
        Subject: CN=232b97fd-856a-4415-83af-3745a4ce88b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:7b:b5:81:11:8c:0d:0d:30:37:23:c4:2f:
                    d2:65:7b:d6:1b:d3:61:89:40:31:25:2e:6b:66:e3:
                    d5:ed:70:e4:e8:97:9b:3d:01:71:6d:41:0b:81:f3:
                    ef:8c:9f:3b:92:2e:63:77:f8:0b:65:0b:02:45:61:
                    3e:d3:74:a8:3a:ac:16:e7:78:12:69:9f:2f:5c:31:
                    22:a9:d4:da:c1:97:ce:c0:c3:57:33:a1:47:ab:a6:
                    c0:d6:c6:12:80:e6:fe:5e:2d:1f:cc:d5:e0:ec:51:
                    5f:60:4f:b0:7c:1d:43:17:b5:70:0c:75:51:90:21:
                    a3:c7:63:d4:59:66:75:77:04:90:2e:c8:30:5e:b5:
                    9c:db:5d:4c:c7:31:76:65:98:dc:62:ea:2a:9d:9d:
                    da:1c:ac:0e:c5:31:99:53:fb:9b:fd:90:b6:f6:7d:
                    d1:b0:03:6d:45:62:5d:ac:f6:83:4f:e8:89:bb:90:
                    d7:25:9d:5c:d8:60:1e:25:f4:84:ba:0f:df:f2:bb:
                    30:f7:2d:38:4a:7b:53:65:f3:6c:07:19:92:06:ff:
                    62:c5:9b:ff:3f:91:f3:aa:16:2a:b4:af:a8:88:5e:
                    9f:97:1b:c8:ad:b6:4b:47:54:ff:dd:f4:5d:c3:01:
                    02:6a:3d:d1:61:8e:87:fd:f0:6d:9f:4f:a9:2d:84:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:64:8C:33:65:4F:40:17:A9:D1:10:CD:F3:54:4A:42:60:C6:B1:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.252.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f7:df:55:a9:e1:61:30:41:80:62:e0:77:61:96:93:a4:54:
         ed:53:e6:8b:ca:64:ec:fe:a3:be:02:08:50:cc:10:0e:4a:c3:
         ab:2e:9f:e9:e2:b1:ad:cf:14:72:75:8b:9c:43:c1:f6:05:df:
         c3:a1:5a:cd:85:34:5b:0c:fc:57:a5:5c:d8:e3:47:b5:f8:24:
         21:b0:72:19:ca:53:a3:cf:d7:05:11:18:69:b0:21:10:cc:0d:
         ad:87:eb:5c:28:f4:b1:49:32:af:3f:b6:ce:22:ef:02:b0:2b:
         35:e7:18:bd:d4:98:6b:15:e8:58:73:c7:46:8e:27:5e:8d:4c:
         52:a1:39:70:56:79:cc:72:74:fe:1c:1d:a6:2a:c0:7c:07:67:
         3a:c2:91:d2:12:68:f9:ad:3a:b7:dd:90:e1:d4:80:8c:27:2c:
         7e:fa:1e:6b:31:fb:a3:1a:dd:6a:16:00:4a:c8:a3:5c:c8:5e:
         25:fc:c8:3c:dd:88:96:8a:db:2a:1b:30:0b:dd:83:44:3b:70:
         f3:9b:a3:4f:ec:47:d4:28:d6:c1:7f:99:94:fb:1b:fe:db:e0:
         93:47:96:e6:54:3a:86:cf:96:62:70:69:10:66:3f:f6:3e:58:
         2e:59:d0:e5:60:d4:71:32:87:96:05:83:40:01:ad:36:08:51:
         87:24:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:37:00 2024 by rpki-client on console-ams.rpki-client.org