Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa
File:                     9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa (raw, json)
Hash identifier:          LHtFY6GJEt38sg6W3uMc3ib2gJBJ/1zjNWoP1x8KriI=
Subject key identifier:   CE:B8:B5:AA:32:66:0C:95:EC:9F:00:F1:42:03:9B:88:62:F5:5E:33
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F43285845734DAA5044CEF69E3F7A68C0
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     6453
IP address blocks:        63.243.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:aa:50:44:ce:f6:9e:3f:7a:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=d2f7abc4-2966-475e-a90b-7440345a1c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a0:db:98:bb:59:00:bf:2f:ef:74:d7:09:b9:
                    40:25:ac:b6:cb:2a:bc:f7:09:2a:df:01:65:b1:96:
                    71:99:7d:26:91:1f:19:a4:a7:a6:6f:46:93:28:45:
                    7d:8e:1b:35:97:f0:2b:67:74:0e:76:32:cd:ac:f5:
                    07:b0:dc:ed:73:41:74:ca:3c:7f:36:77:fc:63:14:
                    4c:21:84:ea:05:5b:24:d5:50:d4:94:6d:72:0d:3a:
                    2e:8c:3d:a0:38:d2:01:6d:4d:86:4f:fc:bb:cc:ae:
                    02:c3:72:63:9a:9c:db:e9:26:dc:d8:35:f9:51:f2:
                    76:85:3f:76:50:03:03:e4:8a:7d:78:c5:7c:78:e1:
                    e5:51:2b:14:92:84:6d:a4:ed:d6:af:c6:8c:83:af:
                    56:61:42:91:a8:3a:df:1a:54:ca:af:91:4e:54:e7:
                    4f:22:92:02:26:97:af:cf:1b:1f:fb:c4:df:e2:46:
                    27:1c:19:58:74:0c:b8:c7:44:2c:e4:7d:61:08:71:
                    bf:3d:c2:eb:96:46:7f:5e:3c:2a:7d:d3:2f:ab:44:
                    58:f4:a1:96:5b:83:90:b7:7b:3f:f4:9d:01:20:73:
                    7f:97:49:44:00:1c:8f:b2:96:52:6a:c2:7c:29:6f:
                    ff:af:db:c5:5a:3e:6a:8d:2b:56:7c:57:fb:dc:c9:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B8:B5:AA:32:66:0C:95:EC:9F:00:F1:42:03:9B:88:62:F5:5E:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.243.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:c3:f1:22:f3:35:71:4b:78:ad:3e:33:9f:c6:12:5f:66:
         ac:2c:f4:cd:31:a5:e7:30:da:be:75:1c:18:2e:ca:25:81:9e:
         7e:bb:02:b5:1e:02:50:14:83:77:31:f5:e4:0d:4f:d8:4b:40:
         87:a1:21:4b:e4:b5:58:c8:51:b2:a0:21:84:5f:41:44:ca:8a:
         37:21:08:b3:a1:9f:d5:4e:2f:05:f3:c9:60:6f:05:ba:f9:21:
         a1:c1:de:59:8f:e3:a4:2a:a9:43:02:e5:d4:9c:fb:26:8f:7c:
         e8:e5:2a:6a:ea:a8:78:c2:e9:21:2a:1a:4a:d6:d8:1b:2b:de:
         19:3d:f4:a9:db:22:a8:d7:92:e4:bd:8b:77:66:82:e6:6b:ab:
         0a:50:e2:a9:c9:cb:36:ad:5e:29:4d:76:4d:85:81:85:0f:41:
         79:8a:18:45:ed:46:5c:f8:9c:7e:eb:45:91:b3:04:b7:a8:89:
         b3:53:a8:d9:95:c9:4a:23:45:1a:50:ba:88:bc:46:ef:22:a1:
         55:40:be:d5:7a:25:81:76:f2:b5:af:cf:dd:c1:64:65:f3:54:
         35:3f:43:7f:51:67:4f:3a:da:c1:95:d5:e8:73:79:43:6c:3e:
         04:55:4e:3d:8f:88:c5:6d:9e:d1:c3:a4:fe:08:ca:cb:74:a0:
         c8:4f:53:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVzTapQRM72nj96aMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjg2NjM5ZmMtOTRjNC00ZDZhLTlkZTEtZjFiM2ViYjVm
NzU4MB4XDTI0MDQwNjAxMDAyNloXDTI0MDcwNTAxMDAyNlowLzEtMCsGA1UEAxMk
ZDJmN2FiYzQtMjk2Ni00NzVlLWE5MGItNzQ0MDM0NWExYzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKDbmLtZAL8v73TXCblAJay2yyq89wkq3wFl
sZZxmX0mkR8ZpKemb0aTKEV9jhs1l/ArZ3QOdjLNrPUHsNztc0F0yjx/Nnf8YxRM
IYTqBVsk1VDUlG1yDToujD2gONIBbU2GT/y7zK4Cw3Jjmpzb6Sbc2DX5UfJ2hT92
UAMD5Ip9eMV8eOHlUSsUkoRtpO3Wr8aMg69WYUKRqDrfGlTKr5FOVOdPIpICJpev
zxsf+8Tf4kYnHBlYdAy4x0Qs5H1hCHG/PcLrlkZ/XjwqfdMvq0RY9KGWW4OQt3s/
9J0BIHN/l0lEAByPspZSasJ8KW//r9vFWj5qjStWfFf73MlcHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM64taoyZgyV7J8A8UIDm4hi9V4zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2
MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIzZWJiNWY3NTgvOWNkOGM0YmYtNmRjNS0z
YzdiLWJjYjMtOTE2ZDk1OGNkY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjg2NjM5ZmMtOTRjNC00ZDZhLTlk
ZTEtZjFiM2ViYjVmNzU4LzI4NjYzOWZjLTk0YzQtNGQ2YS05ZGUxLWYxYjNlYmI1
Zjc1OC5jcmwwHwYDVR0jBBgwFoAUY8cRIojpCzgE5Vgg7EVtim+WwAEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODY2MzlmYy05NGM0LTRkNmEtOWRlMS1mMWIz
ZWJiNWY3NTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHP/OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqEw/Ei8zVxS3itPjOfxhJfZqws9M0xpecw2r51HBguyiWBnn67ArUe
AlAUg3cx9eQNT9hLQIehIUvktVjIUbKgIYRfQUTKijchCLOhn9VOLwXzyWBvBbr5
IaHB3lmP46QqqUMC5dSc+yaPfOjlKmrqqHjC6SEqGkrW2Bsr3hk99KnbIqjXkuS9
i3dmguZrqwpQ4qnJyzatXilNdk2FgYUPQXmKGEXtRlz4nH7rRZGzBLeoibNTqNmV
yUojRRpQuoi8Ru8ioVVAvtV6JYF28rWvz93BZGXzVDU/Q39RZ0862sGV1ehzeUNs
PgRVTj2PiMVtntHDpP4Iyst0oMhPU/E=
-----END CERTIFICATE-----
Generated at Wed May 15 16:03:49 2024 by rpki-client on console-ams.rpki-client.org