Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa
File:                     8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa (raw, json)
Hash identifier:          5vaQpT1c9w1xrDgVZMxbzA2g/YN67f0756glwBKATbs=
Subject key identifier:   A9:64:DC:F1:35:2B:77:14:6E:27:AD:DD:48:EA:DF:2F:25:73:1C:39
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847537B72E7020EA33B4AE904A0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     36667
IP address blocks:        63.247.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:72:e7:02:0e:a3:3b:4a:e9:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=fc386e1e-bfb2-462a-a412-c9735442fec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:bb:92:21:d1:73:e9:ff:ca:3a:41:9d:f0:d1:
                    18:01:8f:88:84:17:27:79:b5:59:54:5c:53:ca:30:
                    fd:70:cd:26:e4:ee:b7:87:04:27:cb:08:9d:c2:14:
                    e9:1b:88:fc:74:32:15:74:16:46:b9:b7:40:38:5d:
                    d8:27:d0:82:6b:34:23:86:6a:a9:ab:87:5f:02:c1:
                    e8:d5:6c:bd:99:e6:1b:4b:b1:9b:78:4f:fb:be:20:
                    90:a8:ca:7a:11:cf:fc:14:2c:0e:b1:23:30:90:4e:
                    21:b6:b7:ec:8b:8b:98:4c:0e:3a:3e:89:c9:1f:f9:
                    5a:69:75:93:97:31:b2:94:14:1d:13:e0:e2:b5:92:
                    f4:db:9b:c7:a5:62:3d:ae:1a:7e:47:10:9c:d5:5b:
                    a8:5f:3f:07:79:b1:68:78:51:00:ba:15:4a:c9:72:
                    a4:d6:e0:96:71:ff:9d:cb:cb:ea:48:7b:a4:38:a3:
                    ee:36:64:af:1f:6e:07:1c:24:6c:7d:46:c9:91:b3:
                    b9:6f:af:ee:af:8f:61:e8:04:4c:a0:62:77:82:47:
                    8d:b9:e6:42:55:33:21:c8:62:c6:32:78:fa:60:fe:
                    0b:c0:e9:f2:cb:99:6c:d8:4b:df:4c:ac:59:46:9a:
                    d0:bb:a4:eb:ee:4c:a6:0f:5c:4d:67:f6:03:6f:08:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:64:DC:F1:35:2B:77:14:6E:27:AD:DD:48:EA:DF:2F:25:73:1C:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8c5e089a-bfd3-3a39-9f29-f20d00bb8280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.247.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:45:2c:ee:d1:74:ca:5b:54:2c:1c:3c:38:33:41:29:a0:97:
         e7:51:51:a0:46:67:7d:15:32:0a:1b:41:e9:44:62:90:b0:a4:
         82:be:c0:9c:63:e4:2a:73:6d:11:cb:60:76:d7:ef:53:76:93:
         32:bc:76:3f:d9:66:14:85:a6:84:61:df:b8:88:5b:15:cb:fd:
         2e:c9:c4:5d:08:b5:28:f5:1b:51:b4:40:54:db:ac:b7:4e:10:
         1e:3e:0f:60:db:af:93:37:82:46:d6:36:ff:a2:e9:aa:d4:3a:
         0d:34:93:8a:d0:18:f6:12:c7:6b:d2:28:52:10:63:35:61:36:
         0e:40:61:fb:ae:f3:7e:1d:be:d0:1f:46:bc:1a:9d:9e:a2:a7:
         d6:27:52:2e:94:ed:20:64:4f:38:28:36:f7:22:29:f1:49:6e:
         f4:8a:08:34:f9:34:de:1c:be:88:bc:e1:29:4b:69:3e:e2:bb:
         86:45:01:b1:ba:41:fb:81:3a:a2:be:0b:31:ff:71:1b:fa:1c:
         42:14:ff:af:41:9b:ce:9d:2f:95:64:40:2a:48:7a:7c:4c:08:
         5d:f9:97:3d:35:0e:53:6f:e0:4a:e6:25:31:f0:38:e4:03:6e:
         cd:e4:67:d2:6a:9f:e4:87:22:19:27:6d:01:54:56:cc:62:0e:
         d3:75:86:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org