Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa
File:                     63d52020-fd63-3e4c-b974-456f989ef686.roa (raw, json)
Hash identifier:          0PELNJd0H4xKO+uZgdL1946Abz/P7izHBAHi+rTFPu4=
Subject key identifier:   FF:1C:29:35:A9:C6:0A:AC:C7:5D:47:5D:DC:9C:3D:77:10:11:90:32
Certificate issuer:       /CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
Certificate serial:       010D0C9F43285847CA3F82343FAEB085F1FBE080
Authority key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     40321
IP address blocks:        206.53.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:82:34:3f:ae:b0:85:f1:fb:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=f0b031c6-2e1f-47c6-a80e-ce2cc6271db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:b3:4d:6d:67:50:0d:57:05:8d:e8:39:8b:
                    fd:cf:df:80:ae:3f:fb:f0:ae:b4:c5:ad:1d:32:d8:
                    41:57:b5:64:b7:ef:ad:e6:ba:9d:ec:74:5c:d0:ed:
                    cc:71:8a:56:fa:4e:91:47:31:66:a8:24:26:bb:5f:
                    e1:fd:b6:07:0a:3d:32:1a:43:dc:7b:99:9c:9d:b4:
                    a0:0b:11:61:e4:be:35:a6:e4:3e:63:21:65:d7:3d:
                    e6:c5:5b:aa:7c:c0:f1:f5:cf:c7:d2:ff:3f:56:0e:
                    a8:6d:5b:a4:f9:5f:e8:09:fb:aa:28:b9:53:af:5a:
                    78:73:f2:1c:0c:a5:f7:87:39:10:89:25:e3:b0:c8:
                    b7:d0:8f:16:d0:d6:32:7d:45:56:eb:ef:e0:11:35:
                    42:8e:f0:6e:11:1a:91:c6:96:25:83:ea:df:46:cd:
                    4b:14:0c:e3:2f:b2:61:c8:62:a0:2b:47:11:2f:c1:
                    62:08:3c:ac:2a:47:8b:ee:1a:e9:af:62:60:64:73:
                    2a:2d:8b:73:30:c1:f0:2e:78:0c:94:82:b1:18:d5:
                    48:77:63:4d:a9:a2:ab:8a:d7:99:b8:32:a8:2d:68:
                    d8:3c:76:d0:bd:d2:c9:a7:c4:3a:e7:d9:e4:53:25:
                    e1:19:c5:ab:d7:c4:a9:85:6e:cf:42:97:59:2f:72:
                    94:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1C:29:35:A9:C6:0A:AC:C7:5D:47:5D:DC:9C:3D:77:10:11:90:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl

            X509v3 Authority Key Identifier:
                keyid:5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:dd:97:49:87:d1:0d:0b:a4:f7:be:09:57:a0:c0:7d:fb:70:
         fb:5c:a8:6b:22:ad:a0:bd:bf:ea:70:1a:3c:3f:e1:b4:34:54:
         e3:37:5c:c1:0c:26:a2:92:47:43:2d:9b:e8:66:de:b9:7a:b2:
         a6:0e:83:51:d0:80:14:35:7e:04:2b:ed:1a:71:78:31:6e:db:
         11:6d:a2:3c:68:78:07:7d:e3:0d:4c:51:01:c9:d5:f0:94:89:
         80:ec:36:98:a6:87:93:bd:b0:47:20:92:cd:e5:94:5c:a5:5d:
         42:c8:55:5b:0e:e8:5f:f8:ff:ab:9f:19:29:3b:58:b3:e3:b9:
         e8:c1:72:23:44:12:31:8f:f4:0d:21:15:2b:07:81:aa:91:33:
         d3:d4:57:0d:90:38:3b:9e:52:c7:6c:32:9f:8b:03:0a:bb:ba:
         e3:18:22:3f:d3:ef:91:7f:6f:90:3f:a5:76:b0:01:4e:16:fd:
         72:5b:5f:5b:c8:3b:ea:37:23:9e:81:f9:a5:d1:a4:13:9b:98:
         b5:bd:16:0c:22:7d:a6:a0:82:38:c4:b3:ea:4d:a0:9b:0a:70:
         c4:b8:31:6f:c6:b4:17:27:0c:64:57:55:a3:a4:79:ca:15:ed:
         a0:59:e9:13:75:ca:24:29:18:02:b0:1f:a1:d1:4a:d6:3b:bf:
         76:68:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:42 2024 by rpki-client on console-ams.rpki-client.org