Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa
File:                     11bcc124-4cf6-3112-89c9-a581f2cd3645.roa (raw, json)
Hash identifier:          9FnoNLqGdxtVidZKJANDPEnKAvTv/3XzHRwI4762mRg=
Subject key identifier:   5D:F5:6C:B2:38:96:7A:DD:FB:91:67:1A:26:D0:AB:D1:1C:DE:88:3D
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858454C380B4135F329C2D7489800
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa
Signing time:             Sat 23 Mar 2024 01:00:24 +0000
ROA not before:           Sat 23 Mar 2024 01:00:24 +0000
ROA not after:            Fri 21 Jun 2024 01:00:24 +0000
asID:                     14618
IP address blocks:        63.140.55.0/24 maxlen: 24
                          63.140.54.0/24 maxlen: 24
                          63.140.61.0/24 maxlen: 24
                          63.140.56.0/23 maxlen: 23
                          66.117.20.0/24 maxlen: 24
                          63.140.62.0/23 maxlen: 23
                          63.140.35.0/24 maxlen: 24
                          63.140.34.0/24 maxlen: 24
                          63.140.38.0/23 maxlen: 23
                          66.235.151.0/24 maxlen: 24
                          66.117.22.0/23 maxlen: 23
                          66.235.152.0/23 maxlen: 23
                          63.140.32.0/23 maxlen: 23
                          63.140.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:4c:38:0b:41:35:f3:29:c2:d7:48:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 23 01:00:24 2024 GMT
            Not After : Jun 21 01:00:24 2024 GMT
        Subject: CN=65b7be1f-b929-4244-afd1-6e2c375c6ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ec:d7:28:ab:b7:9c:76:7e:b7:b1:d6:9d:10:
                    60:6a:16:89:0c:06:cd:20:b5:21:71:04:d9:87:92:
                    81:6a:4d:30:d1:fd:22:2a:30:9e:27:aa:5b:e5:c5:
                    37:b7:3b:fc:10:14:28:31:13:7c:03:ec:45:61:f0:
                    36:38:70:c1:87:22:44:37:c3:91:2e:18:24:6e:31:
                    af:2e:d7:4b:b3:0b:1d:79:b2:5f:72:3d:ca:14:42:
                    a2:5b:42:f6:75:75:50:58:e5:2f:58:7e:16:f6:eb:
                    2d:f6:02:53:23:73:f8:28:27:28:d7:be:d3:f9:2e:
                    68:9c:3f:1e:81:70:81:4c:d5:66:ef:e9:0d:70:6a:
                    8d:a4:42:5e:91:7d:65:6b:b8:78:c0:7e:3e:a1:24:
                    e2:91:cd:99:f5:ce:9a:6d:64:91:c0:18:95:73:fa:
                    d7:f1:7e:c3:91:3e:39:a8:b3:9c:e3:fd:1f:10:7f:
                    13:68:07:7e:62:03:ba:86:57:f5:79:5c:29:6b:73:
                    20:2b:53:27:c0:93:2c:cc:29:cc:74:65:5e:00:a0:
                    74:f2:95:f5:e2:4e:5a:5d:80:5e:cd:8f:a0:a1:a6:
                    49:22:ae:9f:b2:aa:74:9c:53:50:e7:ba:96:d2:b3:
                    f8:4b:e3:d8:ed:00:d2:cf:58:8c:aa:ca:09:36:8e:
                    5a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F5:6C:B2:38:96:7A:DD:FB:91:67:1A:26:D0:AB:D1:1C:DE:88:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/11bcc124-4cf6-3112-89c9-a581f2cd3645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.32.0-63.140.36.255
                  63.140.38.0/23
                  63.140.54.0-63.140.57.255
                  63.140.61.0-63.140.63.255
                  66.117.20.0/24
                  66.117.22.0/23
                  66.235.151.0-66.235.153.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:70:87:1e:77:ed:d4:1b:ff:e4:ff:90:9c:b6:47:26:4d:eb:
         61:24:b4:df:7e:87:82:75:39:90:8a:5b:85:a8:55:be:f5:88:
         83:3f:98:cd:11:0b:42:36:7d:3c:4f:22:48:94:00:6b:f2:79:
         9f:fd:39:c8:fb:6a:10:eb:ba:f7:17:bb:45:84:78:f7:3f:50:
         d0:32:a4:b9:17:e4:35:9d:35:73:51:21:67:b0:af:b5:af:fa:
         2e:a2:7f:5e:24:eb:e5:ae:e9:af:ba:f4:0a:c0:15:11:49:1e:
         da:84:47:ef:05:b6:3b:c7:4f:30:94:c9:73:95:54:fe:da:48:
         52:d9:ea:e1:2f:0c:f9:66:54:2c:64:99:27:2a:bf:da:81:59:
         ce:a0:09:50:c7:8d:c8:96:6d:3c:88:14:f4:58:34:ca:ae:29:
         67:0d:cb:4c:02:03:97:54:bb:85:49:16:93:63:a8:fb:aa:f0:
         9e:5e:6c:52:31:31:63:58:4a:47:c7:5b:68:8e:25:90:66:da:
         cf:27:16:74:41:d2:38:bd:52:4f:5c:21:63:cd:3f:bc:cd:fa:
         c8:4a:76:df:36:94:8f:7d:8a:72:ad:12:9d:9a:56:2d:6c:a1:
         3c:7f:07:e5:45:47:e9:5b:76:7a:7f:8d:8f:a2:93:ce:1c:c6:
         91:17:3a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:49 2024 by rpki-client on console-ams.rpki-client.org