Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/067df5be-af07-3c04-818e-382357466ab9.roa
File:                     067df5be-af07-3c04-818e-382357466ab9.roa (raw, json)
Hash identifier:          WhSAXDsjE9lwyUjgCTCMU5S47/Z2DxKhWLWv9TM+qxc=
Subject key identifier:   9D:87:76:21:AD:22:0D:0D:15:38:AD:71:84:97:4D:93:84:DF:04:76
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858474F4B63B10634879668B14940
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/067df5be-af07-3c04-818e-382357466ab9.roa
Signing time:             Mon 23 Sep 2024 13:00:40 +0000
ROA not before:           Mon 23 Sep 2024 13:00:40 +0000
ROA not after:            Sun 22 Dec 2024 14:00:40 +0000
asID:                     17676
IP address blocks:        63.223.70.0/24 maxlen: 24
                          63.223.99.0/24 maxlen: 24
                          63.223.117.0/24 maxlen: 24
                          63.223.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:4f:4b:63:b1:06:34:87:96:68:b1:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 23 13:00:40 2024 GMT
            Not After : Dec 22 14:00:40 2024 GMT
        Subject: CN=f619b765-7765-4e3c-99e4-c0376a6ef130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:2e:3b:1b:53:5e:20:b4:f9:64:95:28:7d:
                    8b:82:ac:dc:5a:0f:2f:e9:d1:33:5d:e9:d3:48:94:
                    79:7b:4e:94:bc:f5:6a:52:54:d6:dd:2a:6c:da:fe:
                    e9:56:fd:da:e3:d7:fd:bf:35:64:b7:f6:03:c5:8f:
                    7c:09:95:5b:18:77:c7:a8:af:04:94:c6:97:23:7a:
                    f9:89:57:fa:91:08:74:26:c6:84:03:7a:d9:36:81:
                    3f:d7:25:c0:b6:d8:5a:ee:d6:93:ab:a9:74:6a:67:
                    66:36:fc:a9:ba:96:39:8b:35:0e:4a:f0:3d:80:dd:
                    fb:8a:5b:fd:71:d8:8e:6b:0e:b9:14:89:02:34:dc:
                    9d:ef:b1:29:a3:7a:fb:c0:34:d9:6c:5d:a2:e1:dd:
                    a3:cc:f9:2b:39:d8:96:00:0f:97:d3:de:ba:ea:7b:
                    49:4a:c6:81:28:9e:04:e5:69:e9:77:01:ca:15:d4:
                    86:ac:e6:ed:35:27:7a:ea:9d:66:42:8c:86:6f:e7:
                    9f:07:2a:f3:1e:46:86:9f:39:35:58:56:67:4a:b9:
                    b2:32:53:8b:d7:ae:3f:88:47:56:30:52:ff:72:43:
                    21:fc:33:5d:09:f8:f7:12:be:34:30:10:2b:ab:f7:
                    58:53:b6:47:4b:db:ae:51:35:c8:06:81:e2:2c:2c:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:87:76:21:AD:22:0D:0D:15:38:AD:71:84:97:4D:93:84:DF:04:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/067df5be-af07-3c04-818e-382357466ab9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.70.0/24
                  63.223.99.0/24
                  63.223.117.0/24
                  63.223.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:3b:4a:23:7b:a6:45:5b:ac:7b:8f:c9:89:f7:93:32:64:96:
         b2:55:85:09:56:cd:89:f9:b1:2a:60:1f:f1:92:33:43:be:2b:
         58:1f:e8:83:a5:92:ab:9f:95:7f:e2:54:bc:14:93:07:5b:0d:
         c4:00:8c:9a:87:2c:9f:d7:7a:ef:19:d3:f8:43:f4:82:05:49:
         0c:9f:06:f4:59:c1:d1:a0:ed:bc:d7:08:23:e6:99:20:27:fa:
         ae:2d:cf:09:04:90:de:71:0a:a4:c3:78:32:6a:0c:d0:d1:59:
         49:4b:f4:b1:6f:1f:74:9a:85:35:b9:f9:6e:cc:c6:a4:22:97:
         78:b3:cb:26:b8:01:bf:7b:ea:77:b5:a6:3f:ac:28:91:5a:53:
         9e:c6:39:27:6a:5a:fc:7e:61:ed:ae:4e:bb:e1:6b:ad:f9:da:
         46:26:24:2f:d7:b7:fb:54:6c:50:7b:68:3c:e9:67:fc:8c:50:
         7d:dd:05:2a:b0:23:89:cb:76:2e:28:59:ab:fa:ab:f8:db:d9:
         8e:60:8b:fc:23:69:6c:ea:1b:0e:3b:7a:99:86:9a:58:76:ea:
         d2:cb:74:14:3c:df:f9:92:9b:6d:30:6f:1f:0a:a3:08:52:26:
         a1:bb:50:be:80:04:4f:f8:92:1a:f5:30:01:0d:45:5d:7a:8b:
         cc:01:b5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org