Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa
File:                     c3ea86db-b535-330e-bdb1-8169612f7759.roa (raw, json)
Hash identifier:          qo9o3j47biq65RS84t92HT4M73YAkYCbU7cG/eIlC3Y=
Subject key identifier:   56:C7:BC:91:D3:B9:93:34:45:24:77:30:AB:DB:19:C9:F1:44:E9:B6
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584765A0F59AFFF544362DA89560
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     25899
IP address blocks:        63.251.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:f5:9a:ff:f5:44:36:2d:a8:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=312a54e5-24e0-465a-b4d4-86426814e20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e1:c5:49:88:00:aa:0b:4d:8e:59:3c:a5:c6:
                    ae:1c:8e:9b:01:0f:e4:b7:f1:c1:e5:9d:9c:21:0b:
                    4a:f4:fb:ab:d7:79:7e:9d:74:83:9b:a7:46:a1:1b:
                    dd:e4:7f:41:95:6f:4a:06:8d:16:43:9e:c8:ce:ea:
                    d2:c7:25:35:43:bf:50:c6:d3:55:c9:1d:ad:e7:32:
                    e4:0a:b3:8e:e3:7e:e0:bf:99:48:fa:43:9e:49:7d:
                    bf:61:8a:c6:28:97:c5:39:3e:63:cc:87:05:d4:82:
                    f4:46:16:6e:4f:36:03:fa:e2:27:99:84:23:0e:55:
                    b9:b6:56:53:ec:e3:56:cb:64:d2:7e:e7:f2:6f:db:
                    50:89:24:0a:18:4e:77:a3:af:58:2b:bb:5c:d7:94:
                    77:17:4f:57:4e:9f:6b:e8:5f:87:90:8f:24:ab:be:
                    62:2f:92:87:22:15:10:a2:cd:59:68:5f:ba:9c:1f:
                    b5:fe:a7:f3:ed:92:e2:44:f9:13:ec:62:94:3d:1e:
                    34:e8:fe:56:1d:66:47:c6:19:4c:68:b4:c1:a0:2f:
                    ac:8b:4a:56:8f:0a:74:99:37:fd:8d:01:e9:f2:80:
                    7e:11:e2:57:43:a2:27:fe:9e:f3:2d:e7:e0:15:08:
                    19:fd:d0:7d:47:b2:2a:60:30:cd:6b:96:71:ac:75:
                    3f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C7:BC:91:D3:B9:93:34:45:24:77:30:AB:DB:19:C9:F1:44:E9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/c3ea86db-b535-330e-bdb1-8169612f7759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.251.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:fd:1a:0c:eb:3a:18:d0:59:09:50:1a:68:d9:b4:21:88:
         f5:83:63:38:b5:62:ff:c7:44:8a:9b:e6:0c:94:5e:8c:68:b2:
         1e:22:b0:8f:d3:09:ce:47:09:0e:13:6c:07:5f:81:e6:07:9d:
         70:54:71:d2:c0:f0:9b:69:c4:d6:85:40:67:28:c4:18:67:8d:
         05:67:e8:95:c7:ee:5b:2d:80:f3:2e:cf:c4:11:90:c4:da:19:
         da:59:a1:8a:5a:37:a7:25:e3:60:8e:2c:48:2f:0d:de:8f:7f:
         05:70:a0:b3:72:dc:72:60:28:54:d9:3f:f1:53:21:2a:23:37:
         f0:c2:a1:68:2b:ec:47:b0:31:52:d6:78:ba:4b:78:ce:55:ae:
         e4:6b:58:5e:f3:4b:17:9f:ea:10:3a:e8:d9:40:1f:2b:ec:81:
         ff:1c:c4:9d:07:d2:83:90:8d:21:50:24:e0:5d:64:26:48:c8:
         60:70:76:03:61:fb:94:bd:2b:92:06:d0:e4:d0:41:d1:fb:ac:
         17:45:11:23:97:dd:49:10:f6:fc:b1:43:5f:4c:ed:54:41:3c:
         a3:e6:cf:f7:a7:4d:f1:dd:41:88:ac:44:e3:5c:ef:28:cb:60:
         5c:6c:da:46:2a:d0:32:77:f2:b2:e4:1c:24:18:6b:fc:db:76:
         09:a2:c8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:17 2024 by rpki-client on console-ams.rpki-client.org