Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
File:                     3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa (raw, json)
Hash identifier:          YhBgR/bkszcARs/4V8mrWNeEJLOMAX/N6uJtDar2YBw=
Subject key identifier:   5B:FA:EC:38:09:FD:8A:67:39:3E:5A:B7:B3:F6:F8:3A:B4:A6:83:8D
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858471775BD5DAD4783B35C165360
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
Signing time:             Tue 03 Sep 2024 13:00:42 +0000
ROA not before:           Tue 03 Sep 2024 13:00:42 +0000
ROA not after:            Mon 02 Dec 2024 14:00:42 +0000
asID:                     23520
IP address blocks:        63.245.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:17:75:bd:5d:ad:47:83:b3:5c:16:53:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep  3 13:00:42 2024 GMT
            Not After : Dec  2 14:00:42 2024 GMT
        Subject: CN=6ec4d0a0-0e33-4eac-b1ff-adc2cf7bf6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:bd:cb:09:6a:83:37:d9:87:58:ab:f1:85:
                    6e:bf:6e:65:44:c9:73:13:b4:94:64:d8:60:f4:11:
                    f3:26:ac:6e:07:be:98:e3:d6:52:09:19:bf:80:2e:
                    46:13:fd:a6:f6:48:ff:6d:29:be:76:3f:b7:77:23:
                    22:aa:36:60:7b:16:b6:c9:57:1c:c3:c0:23:2c:d3:
                    c2:99:0b:5a:a6:d7:e8:b5:1c:aa:f1:d2:fa:20:3a:
                    bf:e6:07:f5:ac:eb:0b:be:19:7b:78:c5:22:65:d0:
                    bd:88:6b:45:13:d2:bf:8b:66:43:b8:84:2f:94:ed:
                    29:5d:eb:e8:a6:ed:b9:26:23:58:c7:fb:9c:4e:76:
                    3a:4d:0d:3d:2e:4f:84:2e:ec:76:7c:ae:7f:45:87:
                    9e:d7:84:6d:95:83:86:2d:f1:5e:be:ff:dd:39:9e:
                    ff:a8:ba:36:05:bb:f5:5c:8c:4b:30:37:53:4a:42:
                    a3:62:e2:d1:0d:f8:79:89:74:e6:4d:40:d5:e9:c0:
                    69:e1:df:ad:17:b7:3a:20:78:9c:48:5d:b2:80:be:
                    84:4b:50:37:d2:92:32:e2:97:4d:3e:b3:51:1d:c5:
                    5e:10:eb:a2:90:0a:5c:ba:32:bb:a6:7c:4b:d3:37:
                    79:dd:40:71:39:0e:72:a7:7f:49:6e:8f:58:42:1c:
                    18:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:EC:38:09:FD:8A:67:39:3E:5A:B7:B3:F6:F8:3A:B4:A6:83:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:1d:33:98:24:85:91:ab:65:ca:7c:d2:19:f9:74:ff:17:a6:
         34:b1:a5:3f:0d:e5:09:60:9f:28:af:a4:6b:9e:a2:bf:8d:e9:
         1c:06:d9:b8:84:40:25:ce:ce:86:17:99:f0:63:9d:cb:51:97:
         b2:aa:83:9c:87:65:5f:be:03:a7:a6:90:e5:e6:fa:38:e4:98:
         31:ff:05:55:b8:6b:3c:df:38:1c:3d:37:8b:cf:1d:29:a5:c0:
         8c:a7:33:2f:45:8f:b5:37:95:5d:a1:31:7c:6b:35:7e:bc:40:
         a6:d2:e4:ff:7c:d3:2d:b9:ef:ae:72:45:7a:f6:42:a7:19:a3:
         ec:28:65:83:2f:13:51:d9:60:41:e2:4f:50:f3:4a:c0:c6:bb:
         25:ef:7a:98:2e:ff:4e:c7:04:e6:3d:03:3c:2f:5a:d7:2f:58:
         ec:c8:79:93:8d:65:48:bb:f1:9b:53:cd:b8:29:2e:a5:45:ce:
         a8:5c:68:f5:a1:0f:7a:90:fb:29:e5:f0:4f:b3:75:64:32:da:
         42:0a:b2:50:e1:30:68:ff:d1:01:50:36:c2:48:2d:67:3c:81:
         4a:4a:59:2d:1c:6c:b0:aa:0e:54:69:a8:68:8d:94:09:71:9b:
         a3:6c:8e:fc:40:ac:1d:fa:75:03:00:60:0f:29:26:92:84:bb:
         eb:0c:01:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:26 2024 by rpki-client on console-ams.rpki-client.org