Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa
File:                     87c41cb4-14de-3903-b463-5762562f6dd6.roa (raw, json)
Hash identifier:          0BMGL9WlOI4CbqAj2xysUmXHMkpbjnGy8VEPQpSbW3k=
Subject key identifier:   04:3C:7F:2B:E7:B6:19:ED:1D:0B:23:1F:3C:CC:08:99:E4:C1:25:D1
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858459E9367C43D003D7684669000
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa
Signing time:             Sun 21 Apr 2024 13:00:35 +0000
ROA not before:           Sun 21 Apr 2024 13:00:35 +0000
ROA not after:            Sat 20 Jul 2024 13:00:35 +0000
asID:                     23520
IP address blocks:        63.245.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:9e:93:67:c4:3d:00:3d:76:84:66:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Apr 21 13:00:35 2024 GMT
            Not After : Jul 20 13:00:35 2024 GMT
        Subject: CN=e08a444d-65df-4975-bfec-2c8545c6a8b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:82:4d:d9:28:1d:8a:ec:09:07:43:f0:96:67:
                    01:cf:93:f2:61:a8:ac:e5:e7:1f:60:8d:19:08:e0:
                    da:42:c0:3d:76:91:b5:51:8e:63:d6:71:0a:ee:7b:
                    41:e1:ac:41:31:26:83:69:e6:90:2d:73:bf:6d:9d:
                    63:d2:1e:39:3a:d3:fa:40:ab:73:1c:c7:6c:54:6d:
                    65:55:1b:5f:e1:04:ed:84:d0:a8:b9:4c:e8:68:34:
                    b7:49:e3:43:09:81:8a:e1:16:3f:80:72:80:12:dd:
                    e4:90:c9:d4:76:37:83:51:34:44:06:69:da:ad:2d:
                    c8:46:f9:7e:36:54:61:d8:b0:e1:b0:8b:50:b7:26:
                    07:fd:57:f3:26:07:88:ae:7f:2a:dd:b2:cb:1a:34:
                    92:fb:0f:e8:0c:25:01:80:d3:3b:3f:8c:4f:1e:ff:
                    ed:3b:06:49:2a:a9:16:ff:03:64:aa:cb:6b:d8:6b:
                    60:c1:8b:35:d2:01:92:ad:9a:07:cf:32:a6:c0:11:
                    10:a3:05:8a:18:97:1a:65:08:1d:db:0d:b8:eb:c3:
                    a0:79:1a:c3:44:90:bc:e5:58:ce:90:96:a1:4e:37:
                    bb:a3:d7:d7:af:d6:58:95:d0:86:a8:93:76:27:48:
                    b6:58:b4:61:83:a5:62:e9:8c:3e:0a:a3:54:ee:db:
                    13:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:7F:2B:E7:B6:19:ED:1D:0B:23:1F:3C:CC:08:99:E4:C1:25:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/87c41cb4-14de-3903-b463-5762562f6dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:85:59:9f:aa:aa:8e:4c:35:73:4a:3c:7b:44:8f:64:a2:ff:
         a3:e6:75:c5:c3:9a:74:10:cf:12:53:d1:68:98:f3:c9:e9:b9:
         7c:2f:cd:03:87:6f:e2:8c:a7:4f:e6:d7:9c:26:3d:ed:ab:de:
         37:a8:09:ff:99:64:15:76:12:f1:46:c0:97:71:9c:21:95:32:
         e6:d3:36:5d:12:cc:15:60:b1:1b:cc:b0:49:52:c5:b0:ce:a6:
         bc:2e:14:76:e6:ff:ed:40:fd:a7:c6:cc:a8:f4:6f:e6:27:50:
         76:b5:3a:ae:df:4a:87:70:9a:6f:02:c0:67:68:ef:df:fb:25:
         cf:82:ff:06:08:dd:c5:44:b9:0d:14:d7:68:23:ac:b7:16:c9:
         78:bc:d8:6d:6b:ae:41:d6:f2:53:8e:43:15:dc:16:f2:ab:e4:
         bc:0f:f5:21:cb:1e:87:e5:1f:6f:38:cc:0f:b2:b1:fa:7a:9a:
         12:25:ab:9b:2a:c9:e1:68:6d:a3:65:10:5e:d3:7b:8f:e5:45:
         9f:25:81:4a:ae:d7:a8:be:de:de:d8:e7:8e:c0:ba:c3:3e:d5:
         62:ce:1f:0d:b6:aa:7c:9c:d7:8b:0f:f9:b5:0c:2b:64:12:67:
         84:7e:cc:45:c6:8a:3c:bd:d6:c8:3e:44:14:48:9b:ce:07:24:
         3b:d7:08:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWek2fEPQA9doRmkAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODBlNDMyNzctNDQ5MC00Y2M5LTk5ZWMtNTcyNmFmMDhj
OGFiMB4XDTI0MDQyMTEzMDAzNVoXDTI0MDcyMDEzMDAzNVowLzEtMCsGA1UEAxMk
ZTA4YTQ0NGQtNjVkZi00OTc1LWJmZWMtMmM4NTQ1YzZhOGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIJN2SgdiuwJB0PwlmcBz5PyYais5ecfYI0Z
CODaQsA9dpG1UY5j1nEK7ntB4axBMSaDaeaQLXO/bZ1j0h45OtP6QKtzHMdsVG1l
VRtf4QTthNCouUzoaDS3SeNDCYGK4RY/gHKAEt3kkMnUdjeDUTREBmnarS3IRvl+
NlRh2LDhsItQtyYH/VfzJgeIrn8q3bLLGjSS+w/oDCUBgNM7P4xPHv/tOwZJKqkW
/wNkqstr2GtgwYs10gGSrZoHzzKmwBEQowWKGJcaZQgd2w2468OgeRrDRJC85VjO
kJahTje7o9fXr9ZYldCGqJN2J0i2WLRhg6Vi6Yw+CqNU7tsT6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQ8fyvnthntHQsjHzzMCJnkwSXRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MGU0
MzI3Ny00NDkwLTRjYzktOTllYy01NzI2YWYwOGM4YWIvODdjNDFjYjQtMTRkZS0z
OTAzLWI0NjMtNTc2MjU2MmY2ZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODBlNDMyNzctNDQ5MC00Y2M5LTk5
ZWMtNTcyNmFmMDhjOGFiLzgwZTQzMjc3LTQ0OTAtNGNjOS05OWVjLTU3MjZhZjA4
YzhhYi5jcmwwHwYDVR0jBBgwFoAU9W5QKXAQrkNBl+H/jCjkkjkd3fAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84MGU0MzI3Ny00NDkwLTRjYzktOTllYy01NzI2
YWYwOGM4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/UUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiFWZ+qqo5MNXNKPHtEj2Si/6PmdcXDmnQQzxJT0WiY88npuXwvzQOH
b+KMp0/m15wmPe2r3jeoCf+ZZBV2EvFGwJdxnCGVMubTNl0SzBVgsRvMsElSxbDO
prwuFHbm/+1A/afGzKj0b+YnUHa1Oq7fSodwmm8CwGdo79/7Jc+C/wYI3cVEuQ0U
12gjrLcWyXi82G1rrkHW8lOOQxXcFvKr5LwP9SHLHoflH284zA+ysfp6mhIlq5sq
yeFobaNlEF7Te4/lRZ8lgUqu16i+3t7Y547AusM+1WLOHw22qnyc14sP+bUMK2QS
Z4R+zEXGijy91sg+RBRIm84HJDvXCCs=
-----END CERTIFICATE-----
Generated at Thu May 2 15:00:17 2024 by rpki-client on console-ams.rpki-client.org