Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
File:                     a7a0a537-a979-37b0-8aec-a06c4fe75751.roa (raw, json)
Hash identifier:          O+6PInl7U7EFbZmoRpHM0m9ivCiOysCdux3R5ULVjYY=
Subject key identifier:   0A:22:BA:8D:B4:35:A2:DF:56:36:B2:E3:F6:79:46:3E:AC:9F:EF:A9
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F432858475EA62745747E1C464101B680
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     23520
IP address blocks:        63.245.72.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:27:45:74:7e:1c:46:41:01:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=a398808f-b378-4d02-b0a1-dfd4ed8b1f6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:da:d5:28:01:56:ae:0c:79:e5:83:3b:c1:4b:
                    f9:c4:e2:8d:ea:f1:0e:52:80:b2:c9:23:0b:90:a9:
                    8e:26:fc:cc:5c:6e:8a:40:0d:cb:3c:93:d0:72:68:
                    40:a1:5f:82:f3:32:71:41:5e:60:b3:2f:99:85:d8:
                    ed:db:d9:21:81:33:aa:a7:15:75:73:1a:69:5e:5e:
                    07:58:df:6f:6e:c4:a8:bd:96:03:82:50:d4:aa:fe:
                    4f:0d:31:e8:30:a8:74:71:00:34:c6:59:d4:3f:a0:
                    de:8d:6e:a3:c4:d4:69:14:c8:30:c2:ce:ed:7a:e0:
                    dd:9d:80:cc:7d:ab:02:05:f4:33:c6:23:9b:0b:33:
                    bd:31:15:2f:42:8e:83:54:59:1d:64:7e:21:1d:3c:
                    21:9d:29:24:bc:a2:df:1d:07:d8:b1:33:d1:61:ff:
                    b9:87:eb:18:87:fd:8c:f1:1d:b7:9d:03:e4:52:05:
                    a9:8e:6b:1d:8d:cb:da:34:67:d5:54:81:7a:ff:5a:
                    99:18:ad:82:fb:fa:20:45:51:b5:1f:15:86:08:9e:
                    e1:28:d5:5e:93:c8:43:c0:f5:a8:c9:53:4c:ec:0d:
                    1a:87:17:d9:cb:d9:76:1f:d5:6e:01:27:41:8c:24:
                    d2:f4:f8:87:8e:15:47:f2:eb:bb:95:59:6a:c4:1f:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:BA:8D:B4:35:A2:DF:56:36:B2:E3:F6:79:46:3E:AC:9F:EF:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/a7a0a537-a979-37b0-8aec-a06c4fe75751.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:d8:f5:04:9e:67:e9:5a:20:cf:38:57:20:4e:75:b0:c0:
         81:98:4b:8c:d0:42:0e:2e:85:a6:93:b8:23:17:44:9c:9a:4b:
         05:6c:e6:e5:16:8d:6a:6d:62:18:8e:3f:f3:54:fa:46:d2:8c:
         39:2d:3f:c9:06:65:db:0b:69:62:a3:42:ce:bf:93:12:f0:1e:
         50:9d:c3:1a:77:db:f0:bb:f2:7a:61:34:41:38:c2:7c:03:71:
         9e:52:3c:51:77:3f:c2:85:45:c9:01:6b:ea:5e:ec:90:24:a3:
         01:e4:c6:84:1a:53:ed:b2:aa:78:fc:c9:32:5b:a3:cd:d0:22:
         f0:4c:ad:83:a6:6c:92:fe:e9:19:3a:c3:fc:bf:e9:a7:f4:5a:
         5a:40:69:8e:6b:37:9a:de:7a:fd:08:95:4e:6a:b5:8e:92:9a:
         fc:e4:c7:3f:31:a8:76:07:59:29:c2:c9:95:e9:57:2a:56:9b:
         f5:a6:53:d5:36:5f:af:3d:6c:cf:18:97:e4:96:c3:e1:d3:5e:
         7a:12:42:01:60:73:64:f3:b3:18:85:00:88:c0:73:56:f4:52:
         a7:62:40:6d:e0:f6:27:c7:cb:25:8f:47:45:43:0b:66:2a:e8:
         12:33:41:96:9b:33:31:e7:68:b0:fe:56:96:02:f0:7a:b1:fd:
         83:7b:5d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:26 2024 by rpki-client on console-ams.rpki-client.org