Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
File:                     2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa (raw, json)
Hash identifier:          kqpfftfsO+zySUDZ8ng7CIwJy30jK4JVoaMPPZgNIsY=
Subject key identifier:   6F:4F:1E:81:3D:13:B8:A5:2F:59:A6:D3:3F:AA:6F:51:BD:F6:AA:21
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858472405D014777F3BBF645D3000
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     23520
IP address blocks:        63.245.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:d0:14:77:7f:3b:bf:64:5d:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=0febed60-4048-4c2a-9d45-e6431e6237af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:a6:ca:e3:d3:96:71:00:c3:91:94:5c:76:
                    b7:55:6b:59:77:05:88:c5:2d:15:72:0a:8c:48:44:
                    d4:d9:22:d9:38:7f:04:e5:9f:a5:c1:87:ec:7f:24:
                    ca:b8:5f:a9:23:45:6e:01:b9:b2:18:35:67:f1:c6:
                    3c:af:de:63:4b:d6:d7:af:cc:35:08:93:61:c8:51:
                    e6:d7:da:43:4f:1f:81:6a:c7:4d:e8:77:05:23:27:
                    1d:20:27:f4:10:cc:b7:7f:64:66:3d:2f:5a:93:d5:
                    d7:52:41:c9:0a:e3:6f:ce:44:71:29:fb:fa:75:ad:
                    39:73:cd:9c:d1:42:f1:ba:ea:19:19:4d:c4:a2:07:
                    c7:09:ba:2c:59:27:de:d7:db:57:e1:55:93:3f:7d:
                    c4:67:67:f8:20:84:f3:b8:ef:fe:e7:c2:49:f8:ab:
                    c3:e8:88:50:3c:b2:9a:c6:af:68:21:38:26:c4:f4:
                    0d:59:73:f8:fa:69:26:e8:7a:bd:b4:78:9d:3d:71:
                    90:b4:62:0c:5b:44:a8:21:9a:97:e4:2c:fa:2c:16:
                    47:10:ab:65:37:5f:87:48:cf:fc:34:48:dc:17:d8:
                    47:fb:17:81:b0:de:20:d2:61:20:be:71:6c:92:06:
                    d4:f9:47:59:2e:c9:18:b4:bc:4e:6b:56:71:8c:db:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4F:1E:81:3D:13:B8:A5:2F:59:A6:D3:3F:AA:6F:51:BD:F6:AA:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c5:ab:83:56:98:a8:ce:11:0e:65:cf:d9:fa:3a:40:c8:72:
         b8:d8:0a:14:1a:c7:b2:05:0f:11:fa:25:ce:07:19:3b:84:1a:
         20:71:93:7c:5f:19:9c:db:a0:e7:40:ea:b4:fe:1e:87:d8:6b:
         ae:4c:59:32:7f:d5:ef:69:62:a9:b7:e9:15:9e:9d:e5:5a:c7:
         2c:fe:a6:ed:73:30:a6:99:7d:b2:2e:09:dc:06:2c:85:d9:28:
         a5:3d:ab:ed:27:df:f8:77:f2:65:b6:6a:ef:e7:ec:39:19:e5:
         18:ef:59:45:f5:47:ab:15:94:fe:e1:a6:34:13:f1:12:da:71:
         52:f9:d0:b6:7c:e1:8f:b3:f2:e0:24:11:eb:56:80:71:35:bb:
         b9:35:a4:77:b7:2a:2b:00:4e:06:99:db:67:e2:dd:e7:cf:e8:
         35:d4:b9:39:a0:4b:c3:e6:a6:78:fb:39:df:17:40:71:33:ac:
         1c:94:02:29:51:2e:3d:01:8c:86:e2:10:51:5b:28:f0:9d:c5:
         6f:5f:e5:64:cf:f3:17:ff:86:f3:18:40:16:4e:ed:f7:48:d5:
         4a:53:0b:8f:81:ae:ba:60:40:71:8e:b8:f0:e7:1c:dd:ba:d9:
         4b:d3:42:8b:3f:67:95:b2:44:33:bc:b3:13:df:c7:20:1b:1f:
         df:a9:2d:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEckBdAUd387v2RdMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI0MDkwODAxMDAzMVoXDTI0MTIwNzAyMDAzMVowLzEtMCsGA1UEAxMk
MGZlYmVkNjAtNDA0OC00YzJhLTlkNDUtZTY0MzFlNjIzN2FmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kKmyuPTlnEAw5GUXHa3VWtZdwWIxS0VcgqM
SETU2SLZOH8E5Z+lwYfsfyTKuF+pI0VuAbmyGDVn8cY8r95jS9bXr8w1CJNhyFHm
19pDTx+BasdN6HcFIycdICf0EMy3f2RmPS9ak9XXUkHJCuNvzkRxKfv6da05c82c
0ULxuuoZGU3EogfHCbosWSfe19tX4VWTP33EZ2f4IITzuO/+58JJ+KvD6IhQPLKa
xq9oITgmxPQNWXP4+mkm6Hq9tHidPXGQtGIMW0SoIZqX5Cz6LBZHEKtlN1+HSM/8
NEjcF9hH+xeBsN4g0mEgvnFskgbU+UdZLskYtLxOa1ZxjNvJNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG9PHoE9E7ilL1mm0z+qb1G99qohMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvMmUwMTNjN2UtNWViYi0z
NzQzLWFkMmItNmJkMjZmODY1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/UCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbFq4NWmKjOEQ5lz9n6OkDIcrjYChQax7IFDxH6Jc4HGTuEGiBxk3xf
GZzboOdA6rT+HofYa65MWTJ/1e9pYqm36RWeneVaxyz+pu1zMKaZfbIuCdwGLIXZ
KKU9q+0n3/h38mW2au/n7DkZ5RjvWUX1R6sVlP7hpjQT8RLacVL50LZ84Y+z8uAk
EetWgHE1u7k1pHe3KisATgaZ22fi3efP6DXUuTmgS8Pmpnj7Od8XQHEzrByUAilR
Lj0BjIbiEFFbKPCdxW9f5WTP8xf/hvMYQBZO7fdI1UpTC4+BrrpgQHGOuPDnHN26
2UvTQos/Z5WyRDO8sxPfxyAbH9+pLc0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 07:01:53 2024 by rpki-client on console-fra.rpki-client.org