Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa
File:                     9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa (raw, json)
Hash identifier:          dyWlCL6VTBgPqWiZArtoPSIvmQ6/VaojTfmU+hLbuX0=
Subject key identifier:   A3:8C:B7:8C:E8:A2:96:40:EF:2C:41:6E:2E:54:C7:78:7E:99:F4:45
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F4328584733608EACBB35622616019300
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     6453
IP address blocks:        63.243.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8e:ac:bb:35:62:26:16:01:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=db872298-3729-44fb-9663-a6d40af789de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5f:d1:4c:de:45:72:81:13:5f:31:9d:2a:fc:
                    c1:4e:46:4c:f4:29:f6:aa:0d:1c:30:25:73:4c:6c:
                    71:8a:d7:6c:9b:f1:96:56:20:a1:d0:69:61:18:11:
                    2c:99:d8:37:2a:b5:f7:b3:77:d7:d5:a7:47:3a:40:
                    5f:aa:6d:31:36:6c:f7:39:5e:d7:51:13:1d:78:53:
                    ee:fa:c9:a8:2b:a0:95:28:37:64:6f:c9:2a:a5:af:
                    70:4a:0f:e3:cf:78:52:c9:f1:df:e5:23:d5:e1:6b:
                    73:40:e6:8b:f0:04:a3:53:93:b2:54:cc:55:32:71:
                    0b:a3:99:69:e6:b5:b3:2a:69:ab:04:a6:eb:91:b9:
                    62:bd:98:49:69:5a:db:5f:d8:a2:d2:25:54:fe:db:
                    45:2a:7a:37:86:73:95:f2:2d:e2:c4:e9:fe:0e:d4:
                    fd:8c:90:a4:15:f6:e6:51:ad:1f:ca:b8:d7:22:68:
                    67:68:ee:da:0b:84:00:ab:f5:10:6b:e5:f2:e4:49:
                    2a:9f:f5:cb:4c:71:dd:d5:5f:7f:f8:be:a8:cf:42:
                    a4:cb:d9:f6:f7:c5:2f:b5:e7:69:b4:e0:41:a9:68:
                    64:27:1b:d6:61:4f:6b:65:a9:b3:96:e8:c6:30:ce:
                    e1:77:66:9a:4f:60:1e:9e:08:03:e2:dc:14:f2:3d:
                    70:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8C:B7:8C:E8:A2:96:40:EF:2C:41:6E:2E:54:C7:78:7E:99:F4:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/9cd8c4bf-6dc5-3c7b-bcb3-916d958cdcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.243.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:14:09:5e:e1:e0:a8:9c:8a:ec:d6:fd:05:54:d4:97:c5:1b:
         0c:71:fd:df:c4:e8:92:02:b4:45:59:42:ab:f9:ba:cb:2c:a1:
         e4:a2:e1:a9:6c:25:26:d9:14:07:cf:a8:0e:f3:c6:86:bc:55:
         71:71:7d:cd:cf:c4:0d:89:da:4f:9a:d3:f0:c2:73:e7:2b:0c:
         66:a7:2d:a6:c0:49:9b:d3:a8:93:34:b1:2c:d3:06:f3:72:4f:
         f0:c6:95:ee:6a:68:63:22:4a:4b:61:33:48:29:d4:37:07:6c:
         7c:4d:80:fd:bc:ab:c3:12:b9:92:d6:b8:4f:bc:8a:11:6b:9e:
         5d:52:70:07:7a:bf:ae:aa:f2:92:f0:f4:a2:59:56:8a:d4:c2:
         3b:0d:40:41:b1:a7:76:23:20:9f:42:fd:e8:36:3d:50:37:2d:
         5c:9a:5e:30:f4:e9:5d:8c:8a:1e:c5:d2:a4:0c:38:5e:99:66:
         3b:c9:7f:52:cf:ce:5f:ec:c1:41:14:13:91:c8:37:02:eb:d5:
         a3:1a:0e:1d:8f:67:bf:04:38:02:b8:23:4a:6e:58:fc:21:d5:
         7d:70:e8:95:a6:0f:85:53:72:c0:f3:01:e6:ff:4b:68:24:bb:
         94:de:c8:36:85:b1:05:d9:fe:c5:1f:17:01:a7:e0:a0:a7:5a:
         b9:c3:7f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:02 2024 by rpki-client on console-ams.rpki-client.org