Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/63d8bf2d-a940-389b-b0f8-44f15d2c3ada.roa
File:                     63d8bf2d-a940-389b-b0f8-44f15d2c3ada.roa (raw, json)
Hash identifier:          raNsZFn5fcec2aFfFvcNBbcROnuF9CpoSZxuCHGLDY0=
Subject key identifier:   8A:3D:66:F6:DC:7E:E0:C8:FF:21:08:2A:83:0E:9B:36:C7:5D:D6:24
Certificate issuer:       /CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
Certificate serial:       010D0C9F4328584787213627EC6E6879EEE78080
Authority key identifier: A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/63d8bf2d-a940-389b-b0f8-44f15d2c3ada.roa
Signing time:             Sun 13 Oct 2024 13:00:42 +0000
ROA not before:           Sun 13 Oct 2024 13:00:42 +0000
ROA not after:            Sat 11 Jan 2025 14:00:42 +0000
asID:                     399358
IP address blocks:        160.79.106.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:21:36:27:ec:6e:68:79:ee:e7:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1fa0620-c80f-4a94-9e95-ead44fb79978
        Validity
            Not Before: Oct 13 13:00:42 2024 GMT
            Not After : Jan 11 14:00:42 2025 GMT
        Subject: CN=4186867f-ad96-4e42-94d4-d73f7956715d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ce:dc:10:87:97:db:90:13:72:19:b2:d3:78:
                    5e:b4:b9:6f:a7:87:bd:36:99:a9:17:48:68:c2:30:
                    19:b5:27:81:9d:a4:c7:46:65:ff:4d:d0:c6:73:2b:
                    46:11:15:99:1a:c3:32:82:58:d9:ea:bb:ce:d2:f5:
                    5a:b8:96:a2:08:c5:cd:e9:89:77:6f:cf:6d:a4:49:
                    7a:2b:3e:d8:fc:d3:a5:d9:ca:97:87:5e:47:ce:4d:
                    3d:c5:b9:1e:18:5f:0c:38:e8:ce:f9:b2:c7:89:c5:
                    5e:c4:9a:2c:74:d5:5a:db:a2:d5:7b:40:9a:a6:8a:
                    e1:45:02:f5:a3:74:19:9a:a4:c8:6b:56:7d:4e:7b:
                    d5:67:1c:32:fa:f0:14:a4:68:45:73:ff:cb:25:b8:
                    da:e2:e1:a9:89:29:fe:bc:99:94:dc:8b:98:29:3e:
                    f7:f7:8d:83:4a:b0:e2:07:9c:e0:be:0a:cf:30:f3:
                    b1:69:91:69:c2:ba:1f:6d:c5:71:7c:58:92:81:e7:
                    10:db:7e:55:7d:9b:9d:0a:8e:74:69:7a:91:25:4d:
                    ae:1b:c3:35:43:57:d5:be:1b:30:be:32:1a:5d:fa:
                    d0:b6:33:1c:5b:0c:2c:0b:9d:76:cc:ad:b3:f1:47:
                    11:ac:0e:6c:85:f1:de:c9:6e:49:99:ac:fa:df:de:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3D:66:F6:DC:7E:E0:C8:FF:21:08:2A:83:0E:9B:36:C7:5D:D6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/63d8bf2d-a940-389b-b0f8-44f15d2c3ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978/f1fa0620-c80f-4a94-9e95-ead44fb79978.crl

            X509v3 Authority Key Identifier:
                keyid:A6:11:BF:71:01:87:C4:1C:39:01:A2:AA:26:B9:D3:81:0C:FE:2B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f1fa0620-c80f-4a94-9e95-ead44fb79978.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.79.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:15:c6:77:93:6f:42:58:1b:68:dc:d9:6f:86:bc:76:af:fd:
         f2:dc:56:3b:da:65:d9:ff:e5:1e:3b:07:70:ce:a1:07:b4:8d:
         dc:31:fc:54:38:89:1c:72:bf:81:7a:b9:7a:44:0e:b0:32:bc:
         ee:35:7a:a6:3b:e6:a9:4f:08:be:e7:09:38:c9:eb:68:a8:cd:
         f7:0c:d1:e2:41:c1:90:2b:97:17:c1:dd:54:36:b1:36:09:b4:
         92:d9:13:dd:4b:42:c9:e3:46:25:54:7a:90:94:75:81:55:1c:
         90:ea:df:b3:a2:e4:f4:d7:a0:a2:08:3d:6e:3a:25:59:d8:c7:
         84:86:70:ef:ec:3c:28:38:f6:d3:65:90:69:dd:e8:cf:94:7b:
         b0:35:38:e1:28:97:2e:9c:70:8f:c0:c5:ae:67:de:b8:5e:5c:
         ed:a8:a0:ea:ff:bd:dd:a8:fc:95:ea:99:cc:ee:2d:fc:3b:01:
         bf:dc:19:5f:34:5e:6b:e3:24:a4:d8:ef:91:1a:5e:f7:45:e7:
         bc:f0:00:ff:cd:3c:cc:fa:3f:bc:23:04:fa:81:fe:60:d5:3d:
         d4:27:a1:ba:96:6c:2b:8e:8f:38:88:af:ff:c4:32:59:3d:37:
         e0:19:c4:79:64:9b:75:84:6f:cf:1a:6a:3e:93:5e:82:9b:20:
         0a:96:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:45:14 2024 by rpki-client on console-ams.rpki-client.org