Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
File:                     2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa (raw, json)
Hash identifier:          i23kQjUxe6SVih2sTu3c7SdioUfm1YsSOAYr5R8RQqg=
Subject key identifier:   99:51:05:E2:CF:0A:D8:9C:8A:8E:8F:F3:2C:71:A4:D1:88:49:6D:CC
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584563F31345EA71A7037A672400
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa
Signing time:             Sun 31 Mar 2024 13:00:36 +0000
ROA not before:           Sun 31 Mar 2024 13:00:36 +0000
ROA not after:            Sat 29 Jun 2024 13:00:36 +0000
asID:                     23520
IP address blocks:        63.245.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:63:f3:13:45:ea:71:a7:03:7a:67:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar 31 13:00:36 2024 GMT
            Not After : Jun 29 13:00:36 2024 GMT
        Subject: CN=b0e39ca5-9b25-4405-a99f-e6e5fa2098a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:2e:0c:7f:d0:80:87:82:e9:03:62:bf:e7:
                    15:65:f3:99:00:6d:dd:f0:0c:26:3e:e7:2e:13:95:
                    b5:33:8c:e6:f8:59:be:18:e8:96:6b:c9:e2:ea:9f:
                    6b:f5:43:ab:22:3b:b4:f6:66:66:05:1b:08:bb:ed:
                    fb:31:bb:1e:0f:a8:60:08:1f:95:cf:8f:6c:b5:e0:
                    6d:a1:37:3a:56:cd:40:69:8c:7e:87:47:30:fa:e2:
                    ad:09:50:7c:01:fe:d1:3d:82:e1:5a:f5:4b:4c:c8:
                    07:41:b1:50:ef:1f:84:86:86:51:8b:27:d6:0a:59:
                    09:d2:6c:b1:96:61:db:61:a8:bd:c8:57:7a:fe:a8:
                    d0:f5:b7:07:28:ac:0f:de:5e:34:71:3b:d1:0c:1c:
                    6c:91:1b:68:2c:c9:f1:e9:8a:96:9c:6f:07:fa:a6:
                    4c:9e:6d:08:82:01:38:bf:9a:3a:f2:b0:83:4b:f8:
                    d5:b9:cb:9e:ef:3e:ba:7e:bc:43:73:c6:39:78:ec:
                    5e:b7:0e:36:aa:57:47:25:31:3c:6c:8d:1c:b8:8a:
                    a6:c7:ac:51:30:af:9a:6f:7a:a4:ea:5b:7f:98:e4:
                    33:7c:ce:af:31:48:ba:52:0f:7d:e8:54:07:30:0e:
                    8f:22:de:f3:aa:df:71:17:01:68:10:17:11:9b:a3:
                    3d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:05:E2:CF:0A:D8:9C:8A:8E:8F:F3:2C:71:A4:D1:88:49:6D:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/2e013c7e-5ebb-3743-ad2b-6bd26f865895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:b7:27:d5:11:29:80:da:59:49:ba:68:c0:70:44:cd:ea:69:
         b0:a7:f4:37:b4:d0:ad:c4:be:5c:22:21:70:1a:bc:09:db:55:
         05:70:f4:e8:d4:c4:61:0b:75:a1:45:fa:31:6e:68:00:5b:c4:
         35:f3:bf:aa:9c:e7:d6:bc:46:46:1d:50:23:d3:1a:ab:c9:bc:
         bc:52:6c:aa:91:59:24:bc:42:b9:ab:b8:02:99:be:10:7b:60:
         d2:81:03:3f:f3:42:5c:70:c1:25:02:59:18:de:b0:99:20:21:
         73:49:dd:a5:3e:06:8f:df:73:56:a1:9d:5b:80:15:bc:e9:c7:
         eb:6f:24:c2:54:95:95:e1:b4:97:64:cc:7b:1b:0b:47:08:2f:
         72:8e:8a:53:60:87:d5:4f:b1:14:1a:3d:60:b3:40:df:84:fe:
         3d:1b:96:2f:52:51:3f:12:ee:ce:c6:ae:dd:42:aa:b8:78:24:
         4c:8e:8f:73:ae:58:dc:49:e5:d0:53:97:4e:de:9e:6c:30:d7:
         21:c2:07:71:49:61:21:66:ac:8d:d5:21:4a:fa:98:a6:93:34:
         39:b1:68:a9:cd:46:20:f2:76:08:41:e8:30:f7:42:8f:c8:5a:
         32:be:3d:a0:6a:d3:4f:e3:ea:7d:82:2b:4c:18:0c:37:55:ee:
         42:cc:e6:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 19:31:25 2024 by rpki-client on console-ams.rpki-client.org