Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa
File:                     a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa (raw, json)
Hash identifier:          Uyy3CYO9m6G72gnyPIYcdDmhUdv3kgC80doU6Q1iXo8=
Subject key identifier:   C7:8C:F8:4D:EC:FB:17:53:86:E9:80:F8:9D:F5:55:FA:A6:81:86:0D
Certificate issuer:       /CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
Certificate serial:       010D0C9F432858473FF099FA3089A2247E629E80
Authority key identifier: 63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     20940
IP address blocks:        63.243.228.0/24 maxlen: 24
                          63.243.230.0/24 maxlen: 24
                          64.86.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:99:fa:30:89:a2:24:7e:62:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286639fc-94c4-4d6a-9de1-f1b3ebb5f758
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=c2770dcd-4639-48a3-9ce4-82c9ecd6145c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a3:7d:f6:0a:5c:e2:58:34:c9:96:fc:5c:2b:
                    08:ed:15:4c:21:6e:00:f4:ff:c6:a2:4f:6d:6c:e7:
                    96:90:ef:ef:ed:dc:4f:a1:f8:b8:1a:d1:47:37:e7:
                    05:bd:e8:c1:41:d2:47:88:55:e2:7b:32:75:de:cb:
                    c7:05:41:c1:b4:4b:77:50:1c:7f:fd:31:3b:d1:8d:
                    f1:d4:22:3e:ce:7e:a3:ae:2e:00:d8:8d:a7:86:49:
                    77:1f:54:41:e2:50:fe:5e:35:2b:18:4c:bd:b9:88:
                    d4:b7:23:e1:ab:52:00:74:fa:32:c6:a2:80:00:c5:
                    d7:c1:26:70:9a:2a:5b:09:32:00:7e:56:5f:34:73:
                    83:1a:a4:b6:ef:e0:be:e1:68:e4:32:95:b5:b6:07:
                    de:5f:b9:72:c7:8d:3c:06:b1:e8:7f:13:92:79:17:
                    ac:74:a2:ad:b1:75:4b:e1:32:07:9c:ed:23:2f:68:
                    1e:fa:c9:59:29:f3:cc:7f:b7:ec:a8:9c:51:09:3b:
                    7b:38:94:09:70:b7:f7:28:f2:83:a3:41:b4:67:82:
                    17:9a:40:a7:ae:79:52:aa:7f:f9:43:ab:20:f4:3c:
                    93:b2:4e:2e:38:e5:61:72:32:e4:cf:5c:7a:51:02:
                    70:94:44:01:21:71:ed:ea:ef:5d:99:92:d0:ad:43:
                    b3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8C:F8:4D:EC:FB:17:53:86:E9:80:F8:9D:F5:55:FA:A6:81:86:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/a3355fb3-d03a-3f23-ab1e-a37d0f03a377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.crl

            X509v3 Authority Key Identifier:
                keyid:63:C7:11:22:88:E9:0B:38:04:E5:58:20:EC:45:6D:8A:6F:96:C0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/286639fc-94c4-4d6a-9de1-f1b3ebb5f758.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.243.228.0/24
                  63.243.230.0/24
                  64.86.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:1e:3b:b7:ed:a4:6c:95:eb:84:49:bb:43:1a:89:ba:8e:b9:
         ab:73:b7:a5:3e:2b:48:67:5b:16:66:7f:8f:d0:f4:89:2b:e7:
         a9:d9:84:09:2a:99:2a:9f:f2:b4:49:6d:b7:50:17:5f:24:ad:
         b0:03:58:c6:82:fe:05:71:56:36:3a:32:e5:31:cf:98:44:6d:
         fd:8f:3a:ad:e8:dc:5b:9c:8c:49:60:ff:bf:a3:4f:93:5d:3d:
         be:4a:a3:c4:a9:07:79:17:23:b7:dc:bf:4d:27:60:9f:f5:37:
         f4:aa:82:f9:26:ba:5e:5a:05:d7:b9:f7:c9:20:e9:20:b1:61:
         c5:fe:7c:16:89:a3:a9:57:dc:1b:08:84:8a:3b:5f:37:3c:53:
         9a:ab:21:c3:b7:f8:3b:5b:c8:a2:ea:d0:81:15:f1:16:ea:0a:
         b1:d5:93:9a:ec:23:25:0c:71:35:14:2e:87:36:5d:62:cf:6d:
         86:83:90:67:ec:c4:20:4f:69:4e:5c:d6:ac:a3:a8:5a:66:63:
         d1:7e:f3:2f:d2:f1:b3:46:ff:12:a5:fe:bd:71:48:77:26:5e:
         62:57:f5:40:b2:09:dc:8d:35:46:08:e7:01:2b:19:90:73:4c:
         4c:3e:22:8a:42:d0:5b:2e:49:f3:b3:53:d0:56:27:03:45:17:
         44:3f:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:02 2024 by rpki-client on console-ams.rpki-client.org