Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/456285ec-a02d-337f-beae-64a75f98d287.roa
File:                     456285ec-a02d-337f-beae-64a75f98d287.roa (raw, json)
Hash identifier:          SaaA4S6Lly16rHEx3ad25InSBUG/HI9Jw062RiNsHgs=
Subject key identifier:   DF:68:9B:84:49:66:78:A2:46:57:53:5C:4A:E2:A0:F7:A5:51:10:FB
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858467F4F69341E12B7C2922C0D00
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/456285ec-a02d-337f-beae-64a75f98d287.roa
Signing time:             Thu 11 Jul 2024 01:00:26 +0000
ROA not before:           Thu 11 Jul 2024 01:00:26 +0000
ROA not after:            Wed 09 Oct 2024 01:00:26 +0000
asID:                     52286
IP address blocks:        63.245.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Jul 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:7f:4f:69:34:1e:12:b7:c2:92:2c:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Jul 11 01:00:26 2024 GMT
            Not After : Oct  9 01:00:26 2024 GMT
        Subject: CN=42a0e62b-e49b-43e0-9b20-c97b05a580ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c6:19:e8:e1:b8:83:24:42:e2:98:b1:e0:88:
                    04:fb:73:1b:4a:e9:7f:eb:6d:3b:c1:0b:99:f3:d3:
                    55:f7:4c:63:94:bd:09:23:d0:2b:da:63:bc:8b:ba:
                    b2:e5:11:b0:9a:5a:97:82:ec:c2:65:eb:41:6b:cf:
                    b4:69:b8:fe:74:10:ee:e4:d9:56:5d:f7:c7:89:b7:
                    7c:64:f1:ac:6e:5d:74:55:38:5f:f1:34:65:58:90:
                    97:fb:dd:83:b6:b9:f3:2f:61:50:ae:51:8a:01:4a:
                    d7:be:96:65:56:f5:2f:80:0c:07:99:06:86:60:cd:
                    99:92:96:24:02:1e:06:d6:6d:66:7e:f4:ae:84:e9:
                    ac:f5:c3:d2:77:cd:b4:a6:24:36:87:5b:7e:fb:ee:
                    4c:2a:26:b9:a1:12:7e:b9:a1:a5:b8:2d:52:04:78:
                    55:62:1b:53:1a:e3:5c:9f:61:94:e3:bc:2b:ab:3b:
                    71:b0:a6:ce:25:9e:d9:7f:8b:4b:aa:d8:86:7b:24:
                    6d:52:3d:df:cd:70:13:f1:18:35:e3:09:b7:60:8d:
                    a1:3a:3a:69:73:f1:22:66:8f:4e:71:f3:41:dc:a6:
                    18:a6:54:62:88:be:d9:fd:f6:4d:c3:99:69:94:84:
                    c7:0d:86:b8:a8:c3:8c:95:8f:89:c2:47:80:6e:a7:
                    98:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:68:9B:84:49:66:78:A2:46:57:53:5C:4A:E2:A0:F7:A5:51:10:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/456285ec-a02d-337f-beae-64a75f98d287.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:01:19:92:60:e2:3b:36:5a:c6:e9:5e:e4:39:f5:e6:2a:4f:
         58:6d:89:0f:4b:bf:dc:aa:a2:4c:d4:c3:7f:f1:b5:74:0f:08:
         81:fd:40:8f:7e:8c:2f:15:9d:6f:0c:f5:ec:95:8a:93:7a:7d:
         92:d2:c6:d9:c3:f3:95:a0:94:4a:8c:0b:fc:93:58:46:e4:37:
         ef:40:b8:e1:b2:86:fd:3c:54:13:0c:ef:8c:54:10:48:b8:ad:
         24:77:c7:60:f8:6a:89:e4:3e:0c:c2:a9:0c:33:51:3d:5c:2a:
         a1:3d:ff:9c:74:3a:7d:21:58:d9:fe:88:bb:85:c7:94:36:30:
         3d:8e:85:0b:c9:1d:f1:a4:9c:1b:56:73:ed:a3:f8:a7:fc:33:
         83:75:6c:46:99:f1:2e:aa:8d:ec:29:ab:ff:47:d4:1b:b3:c0:
         42:75:b2:fa:84:6b:6e:a2:93:12:70:c1:76:e2:f9:57:d1:5e:
         ca:40:df:7e:27:be:54:96:2d:d2:f3:33:f2:3d:90:42:76:ed:
         4a:6d:eb:3a:8e:89:2b:28:d5:2b:0d:68:d3:b8:e4:a1:9e:66:
         26:dd:e3:27:4a:82:07:f3:4f:4f:42:a7:09:0e:17:5e:e6:f5:
         53:70:86:37:ad:a9:53:82:ac:15:af:f7:29:25:7d:e0:82:d2:
         24:a0:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 17:50:44 2024 by rpki-client on console-fra.rpki-client.org