Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa
File:                     536cb05e-7fa8-38ae-aa5f-3bd108053855.roa (raw, json)
Hash identifier:          K/dQw9jsV7wj8DvlKPPWBnW8XrXZzcLMMtcfmbeAv38=
Subject key identifier:   B6:F6:4D:F6:71:C1:CE:FF:0F:B7:02:FF:AE:80:8B:98:FB:9D:DA:B5
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F4328584529529239C19F9B18777B19C0
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa
Signing time:             Sun 10 Mar 2024 13:00:31 +0000
ROA not before:           Sun 10 Mar 2024 13:00:31 +0000
ROA not after:            Sat 08 Jun 2024 13:00:31 +0000
asID:                     16509
IP address blocks:        63.140.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:29:52:92:39:c1:9f:9b:18:77:7b:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Mar 10 13:00:31 2024 GMT
            Not After : Jun  8 13:00:31 2024 GMT
        Subject: CN=5deff32e-b74a-4f0f-9874-76ecd4ba0877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fa:74:b9:e3:7d:c8:97:de:38:82:32:ef:2e:
                    81:4b:d8:74:d0:30:6a:d6:4b:b2:e9:08:16:09:9b:
                    7d:20:8b:6c:d4:3f:cc:01:5b:f3:dc:48:f3:ec:ed:
                    f3:74:bc:ce:cf:3e:2a:f3:8a:d4:95:f1:c8:71:9d:
                    46:c3:d5:dc:f1:da:a6:da:f7:0b:8a:76:7d:f9:2e:
                    37:c8:31:32:d8:84:39:ff:a4:fc:22:1c:54:4f:54:
                    ba:ad:33:2b:7a:a8:0b:6e:13:b8:fc:e9:cd:d0:21:
                    44:b3:bf:77:b9:39:6c:97:c9:fd:77:a7:ca:89:23:
                    33:f3:3c:21:20:89:a8:34:0f:81:bf:49:c6:12:22:
                    36:31:1c:d3:6b:57:e1:b8:a1:18:ea:0f:71:63:8b:
                    ca:f7:b1:38:cf:cd:16:ab:4b:72:05:90:f4:27:54:
                    f8:6d:a6:50:96:22:c0:88:a6:2e:74:ae:86:34:13:
                    95:52:aa:ee:a5:f1:3a:d7:77:66:48:d6:25:ea:a7:
                    4f:b9:96:3d:a0:e0:fa:44:50:dd:f0:ad:cf:92:1a:
                    ed:f1:1c:b6:04:5e:e4:f9:b8:c8:46:2e:03:24:58:
                    92:27:6c:86:e9:6b:6f:b3:f2:0f:df:f3:3a:4e:a2:
                    0e:21:de:94:4f:bf:03:20:bb:d7:0d:39:50:de:d7:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F6:4D:F6:71:C1:CE:FF:0F:B7:02:FF:AE:80:8B:98:FB:9D:DA:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/536cb05e-7fa8-38ae-aa5f-3bd108053855.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:c7:95:54:f0:75:3d:96:bc:7f:17:25:3a:7b:cc:ed:46:f4:
         07:2a:71:76:5e:6e:4e:cd:bc:9e:82:f0:cb:a2:ef:7e:c3:b8:
         f8:0e:f7:05:1a:28:75:fd:de:e8:f2:61:b7:04:28:f4:a5:a3:
         5d:ab:1d:1f:0b:ef:15:f3:6d:aa:8a:5b:bf:d2:25:83:c8:d9:
         8a:65:65:e3:e8:a4:dc:4d:9e:2e:60:b8:ad:62:e5:a1:3e:a0:
         42:00:e7:c5:ad:20:0c:4c:6b:09:12:65:ea:f1:b8:b4:d4:2a:
         45:99:ef:81:4a:e0:e0:4c:9b:2d:34:bb:da:9e:2f:a9:a0:62:
         6b:21:f4:46:e2:07:92:f8:48:86:ea:a2:a6:0e:97:8c:5a:63:
         4b:ce:4e:cf:64:c7:c2:cf:ae:1f:d0:7c:3e:7b:a6:7c:fb:f8:
         3d:cc:92:31:51:f7:79:08:95:4c:87:66:8a:4f:8d:41:1b:d1:
         d4:cc:12:af:a2:08:27:4f:cc:99:5c:28:64:95:bc:f0:ca:69:
         93:fd:ed:08:ae:03:05:ef:c9:6a:02:fe:c3:cf:6b:a0:be:7a:
         01:ce:57:19:60:f3:af:2d:9b:7e:cb:75:87:01:d1:09:ac:4f:
         d0:39:42:2d:65:07:e0:83:18:42:ec:95:74:52:0e:b3:6e:8e:
         bd:1f:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:57:50 2024 by rpki-client on console-fra.rpki-client.org