Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa
File:                     947df0f8-80fa-3538-878b-55885ca0b9b8.roa (raw, json)
Hash identifier:          CMcTsgkw9ZlLY0TxY1AumJ24d6+SnJt04POUQqjHDHg=
Subject key identifier:   13:5E:05:34:74:9A:CE:35:AA:68:FB:92:27:7A:54:28:5B:5F:1B:88
Certificate issuer:       /CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
Certificate serial:       010D0C9F43285847C1DF51B93CBB96BD9825DBC0
Authority key identifier: BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     398216
IP address blocks:        63.250.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:51:b9:3c:bb:96:bd:98:25:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c43b75-106f-49e7-bf3a-4aeb94566e90
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=16cae2c0-d928-41c5-8ee5-2c5defc02dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:56:cb:92:90:c8:b1:cd:68:bc:0e:94:a1:
                    82:17:dd:de:70:66:52:04:1b:31:88:b3:02:f1:15:
                    b9:67:06:53:dc:d8:f7:98:78:c7:ce:18:bb:f5:e0:
                    08:fd:bf:75:4b:c1:8c:18:13:e9:53:4c:da:98:6f:
                    df:06:19:ae:47:b8:b6:a5:f3:f3:6a:4a:f1:30:59:
                    5f:5d:d0:18:18:13:fb:af:93:48:44:4b:be:0f:6e:
                    91:44:e5:37:f9:1a:0b:6a:28:c8:1a:9e:8c:b3:aa:
                    b6:0e:00:f2:ec:45:24:df:06:1b:2a:c2:67:5d:c8:
                    05:62:46:53:4e:bb:27:00:73:3a:aa:7a:30:3c:45:
                    89:dd:a6:c5:1c:46:6d:f6:4c:f2:b8:c9:7e:d7:f5:
                    55:8b:49:b9:34:6e:cc:52:03:8c:5a:a7:07:2f:77:
                    40:87:cf:c8:b6:f1:72:78:4a:45:f8:31:33:2a:a5:
                    3e:a5:28:de:88:7b:71:a0:e4:7e:99:99:ca:c3:29:
                    6a:aa:08:a1:aa:14:51:ac:77:2b:5d:fd:c3:75:2a:
                    d5:42:8a:a1:b7:66:8e:7a:20:5c:42:d0:a5:a3:f1:
                    9e:1a:aa:d8:0e:dd:ca:33:0e:69:df:9d:0a:4c:3c:
                    a2:f2:23:70:a7:0c:71:b1:dd:be:1f:1e:a0:76:11:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5E:05:34:74:9A:CE:35:AA:68:FB:92:27:7A:54:28:5B:5F:1B:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/947df0f8-80fa-3538-878b-55885ca0b9b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90/b0c43b75-106f-49e7-bf3a-4aeb94566e90.crl

            X509v3 Authority Key Identifier:
                keyid:BB:44:94:5F:01:72:4D:EE:B9:22:B8:EA:D0:2E:A2:07:6E:4E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0c43b75-106f-49e7-bf3a-4aeb94566e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.250.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:47:2c:f1:3d:cc:9b:dd:be:ca:af:88:23:4c:2c:32:97:7f:
         a1:af:2a:15:ae:e7:ed:63:9f:51:99:75:ee:65:77:96:46:56:
         df:2b:f7:2f:3c:77:36:a9:fb:c7:16:03:41:a6:7f:98:df:d1:
         91:16:c6:54:78:20:e7:14:79:4a:d1:ce:82:a1:bb:9b:30:17:
         1a:c6:33:db:49:7f:d9:7c:e6:cc:fc:06:c1:8a:d5:68:12:9c:
         f9:9f:94:56:5c:b9:64:93:da:bb:cd:69:de:65:51:ff:21:1d:
         80:a1:8b:d9:95:39:1c:a5:c1:d0:0d:4c:ee:a0:8a:f9:4f:8b:
         8c:e9:12:f0:bb:67:d0:5f:4f:ed:78:d1:18:d5:0c:03:4c:b2:
         7e:5c:de:4d:ae:a1:db:37:41:e0:4c:28:2f:53:ec:da:29:15:
         10:79:d7:eb:84:25:b1:c6:6b:5e:b5:75:52:09:e9:4f:3c:e3:
         93:e3:fb:2d:a3:11:c0:0d:a0:d6:0e:fe:93:ed:88:02:02:1c:
         c2:89:83:4d:00:9e:30:bc:c6:35:a5:3f:01:50:6a:44:d5:fb:
         31:96:6c:e2:9f:e8:e3:14:f4:7c:17:41:f5:d3:c9:07:f2:f6:
         2c:cb:b9:5b:42:e0:ea:19:3b:fd:b1:b4:a9:e4:2c:1a:e6:3e:
         f9:79:fb:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:09:54 2024 by rpki-client on console-ams.rpki-client.org