Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/499e187f-4dc1-3bf7-848a-a507aa45233a.roa
File:                     499e187f-4dc1-3bf7-848a-a507aa45233a.roa (raw, json)
Hash identifier:          YE3nf8c7ZFH1rJx9pfysb2yYxvcgJKfrcNV/twvd3fs=
Subject key identifier:   47:13:3C:58:1B:9B:9F:EF:0E:B9:0C:C0:D2:A5:16:72:CA:9C:EA:BA
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285847E512363FFC3B1069F8AFC300
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/499e187f-4dc1-3bf7-848a-a507aa45233a.roa
Signing time:             Sat 16 Nov 2024 04:36:45 +0000
ROA not before:           Sat 16 Nov 2024 04:36:45 +0000
ROA not after:            Fri 14 Feb 2025 04:36:45 +0000
asID:                     16509
IP address blocks:        163.53.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e5:12:36:3f:fc:3b:10:69:f8:af:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Nov 16 04:36:45 2024 GMT
            Not After : Feb 14 04:36:45 2025 GMT
        Subject: CN=f64e4c26-08d7-4b5a-b2bc-d51b9b9444af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:df:3c:b9:aa:55:43:f0:94:4e:2f:7b:8e:
                    a2:b4:6a:cd:e2:be:ed:1e:d9:2c:05:55:3e:6c:5d:
                    34:ef:2d:4c:6f:db:20:c7:f4:e3:3d:ff:0e:ff:bd:
                    1d:51:d6:dc:85:78:76:c1:f9:fc:62:92:81:92:fc:
                    f2:c8:30:b2:9b:b1:a8:b1:d5:b0:42:de:ba:44:55:
                    be:e5:4f:6d:86:a5:c6:dc:d4:d2:16:2f:04:56:0d:
                    b8:ea:9b:04:e0:09:2a:fa:d2:17:99:e6:60:c0:62:
                    7f:d6:66:e0:8b:de:fb:fc:6f:42:32:83:36:ee:7b:
                    6c:e9:9b:ff:f6:a5:36:30:6d:c5:a0:3d:2f:c6:82:
                    db:59:e7:4b:31:43:c4:c8:05:bf:15:77:cb:ec:d0:
                    c4:38:9c:04:f8:8f:90:b5:d7:6c:ba:a0:7b:78:22:
                    53:3b:3f:d4:25:dd:79:5b:3e:62:ba:51:cf:87:a8:
                    cd:1d:0c:40:d8:bc:4b:72:82:8f:56:bb:53:ae:25:
                    b8:d1:ba:62:c1:3c:b1:15:60:22:4d:54:3c:fc:25:
                    5b:f8:8b:49:f7:43:3a:e7:6f:3b:8c:5a:87:89:05:
                    02:30:01:29:5a:08:b9:f1:9f:2a:41:65:2f:8e:84:
                    41:c7:f2:2f:82:e2:98:db:13:56:00:c1:e4:cf:48:
                    07:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:13:3C:58:1B:9B:9F:EF:0E:B9:0C:C0:D2:A5:16:72:CA:9C:EA:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/499e187f-4dc1-3bf7-848a-a507aa45233a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:91:f2:21:1f:86:a3:8c:d0:a2:47:ae:66:39:9e:5f:a0:
         e9:70:ba:f1:ee:f8:d6:76:f1:b3:1d:34:6c:cf:06:cf:64:43:
         e0:61:3f:7f:a8:fa:07:76:9d:b6:fb:a7:e5:13:b1:00:72:18:
         0c:32:41:8f:45:90:68:97:dc:9c:c7:b7:91:1a:9c:c6:fe:fe:
         24:af:f1:75:56:82:c4:ab:26:a3:e3:c1:f0:84:ab:cb:0d:f4:
         4a:19:d6:a2:d5:46:0b:2a:42:73:f1:3f:0f:1b:ce:77:40:bd:
         49:49:19:aa:c5:64:3a:5b:80:50:15:0a:01:6d:f0:4e:5d:b6:
         3c:9f:74:3f:5a:a1:d0:08:a8:ba:38:f4:bb:93:b8:44:be:05:
         9a:a6:b8:3e:74:01:44:ec:bd:49:a9:0e:6d:85:af:25:d3:3a:
         f0:01:68:b6:82:21:f0:fd:f7:a9:5f:08:3d:b9:6b:06:8f:19:
         f1:a6:13:03:8f:66:47:b9:8a:32:ec:64:a4:bb:0b:4c:ec:95:
         0b:be:cd:5b:7e:2c:09:24:d9:3f:fc:bd:b1:bf:4f:53:38:2a:
         68:5d:56:f4:43:a1:b8:ec:89:6a:eb:7a:d2:e2:56:4b:16:2a:
         9b:91:d7:b4:08:9b:4c:ca:21:a6:3c:07:84:b2:28:0b:64:9c:
         e6:3b:69:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:48:23 2024 by rpki-client on console-ams.rpki-client.org