Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
File:                     3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa (raw, json)
Hash identifier:          sLLZ0VmVg0eCpbnOo45DN8zDHD7/RJeZAJjsYbO5QXQ=
Subject key identifier:   F3:1D:F5:2F:1E:A1:C9:79:F8:83:12:6D:51:F4:F1:60:A9:E2:80:ED
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F43285842B95E923E8FE2CC4FB9EEAA40
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa
Signing time:             Mon 31 Jul 2023 01:00:17 +0000
ROA not before:           Mon 31 Jul 2023 01:00:17 +0000
ROA not after:            Sun 29 Oct 2023 01:00:17 +0000
asID:                     23520
IP address blocks:        63.245.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Aug 2023 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:b9:5e:92:3e:8f:e2:cc:4f:b9:ee:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul 31 01:00:17 2023 GMT
            Not After : Oct 29 01:00:17 2023 GMT
        Subject: CN=2808c017-ce75-473e-8781-f4932ff07f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bd:31:82:3b:78:20:fc:f8:71:f3:cf:13:c4:
                    28:ab:59:4a:7f:46:cd:4e:69:7c:ea:f5:94:c6:cb:
                    02:ea:5f:62:bc:2b:51:aa:4d:b8:8f:1b:38:9b:50:
                    25:67:6c:b9:03:d8:72:78:ef:3e:ca:00:be:9f:c2:
                    95:d5:b0:e0:46:47:5f:9e:f8:b3:06:5b:34:e3:19:
                    cd:3f:17:28:b6:bc:b0:ae:0f:5c:2f:9c:27:bb:dc:
                    ab:ad:6b:fa:4f:03:55:dc:ac:ea:11:d0:2c:d9:f3:
                    90:b1:e9:cf:81:ea:c3:9c:ce:78:b9:95:b8:f9:c2:
                    59:32:9b:09:b9:08:02:da:db:f9:c7:f6:ee:26:a4:
                    26:52:07:ec:64:43:2e:98:5a:ec:5c:33:24:0a:78:
                    18:9a:f3:a1:88:27:32:5f:1f:3e:dc:f9:d2:e9:88:
                    c2:94:46:3a:ac:f4:be:b8:1a:aa:8f:59:12:e6:e3:
                    e7:28:b0:4e:37:23:a2:4f:aa:88:ca:85:4f:51:ca:
                    a2:c6:26:41:68:54:b3:e2:32:c7:4f:6c:21:c1:e0:
                    ef:cf:f4:ef:75:62:09:a5:73:49:47:93:20:c0:94:
                    c9:1f:58:ba:ff:08:cd:59:47:60:a4:a8:88:3a:37:
                    ce:96:e1:78:d3:06:81:07:bc:7a:4e:45:7d:e9:cc:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:F5:2F:1E:A1:C9:79:F8:83:12:6D:51:F4:F1:60:A9:E2:80:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/3e422f39-72e3-38c0-bbbb-7f7cdd5e684d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:a0:95:cc:2f:76:9f:92:bd:16:f3:76:63:65:7e:14:b9:fb:
         70:15:60:cc:c7:bd:85:ab:2a:a5:48:22:80:d5:29:37:11:88:
         85:2e:92:95:a6:e9:e0:b8:ce:22:52:36:cf:92:6c:4f:0c:b2:
         8a:67:5d:9d:2c:2a:e4:8e:2e:0a:08:29:28:4c:bf:87:15:8c:
         bf:d8:22:6f:9b:d1:33:f1:c0:68:7a:d0:e7:90:11:28:cd:51:
         c6:d4:ef:20:f2:0a:c2:fa:db:79:9e:00:f2:76:ad:80:32:20:
         0e:69:1b:4a:7e:01:71:38:dc:28:03:0f:a4:bd:63:62:7c:3d:
         4e:06:79:44:c9:39:cf:84:d7:0e:bf:ff:ae:44:7a:45:3d:b4:
         87:a1:70:1a:c2:60:33:0c:d6:20:3f:68:a7:0f:43:89:a2:74:
         fa:6a:ae:38:2e:bb:71:86:0a:08:96:b6:00:5c:14:80:c5:42:
         12:3c:e7:11:80:bc:c5:66:a1:62:b1:03:6a:ef:3c:6b:f4:37:
         53:47:c3:a1:23:78:b5:d1:9c:6b:fe:1f:11:64:2a:56:31:6e:
         cf:e3:ab:97:93:b4:e4:9d:24:9b:26:9f:f3:2c:64:53:e9:4f:
         f8:c6:e2:de:ec:61:76:aa:02:56:3a:00:44:ce:83:6c:76:7f:
         5c:75:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 01:38:52 2023 by rpki-client on console-fra.rpki-client.org