Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1a286782-bd19-301c-93b9-20eba243b65f.roa
File:                     1a286782-bd19-301c-93b9-20eba243b65f.roa (raw, json)
Hash identifier:          a2EIAHa2KqES5yXe7gBkEidANRsHWdjY/HvKEd2R5v4=
Subject key identifier:   74:A1:41:FB:74:90:26:5F:66:DC:61:FE:40:55:E0:29:E9:FA:9B:49
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847362B532CC111A4E6682A2500
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1a286782-bd19-301c-93b9-20eba243b65f.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     10082
IP address blocks:        63.217.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:53:2c:c1:11:a4:e6:68:2a:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=088bc976-a26b-4e47-a27e-597923bede08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:6a:92:f3:ea:08:a2:35:7d:fd:e7:4f:1a:
                    ae:43:ec:7e:ae:74:0f:4b:86:82:b3:b8:97:44:a1:
                    ba:b6:d9:c5:b2:ca:d3:66:38:e5:b8:1a:ae:30:10:
                    67:26:67:a2:2f:a9:70:b8:39:36:a4:6b:6d:a6:40:
                    db:d0:df:b1:97:1d:0a:85:93:d2:ab:2a:da:c2:b3:
                    0d:20:f0:55:8c:99:d7:9b:cf:96:16:12:0d:6c:9c:
                    35:98:62:40:2e:7b:34:f6:e4:5e:3a:bb:d5:6e:3d:
                    ea:08:e3:9d:49:2a:e8:8c:50:4c:14:f6:53:be:3d:
                    cc:9b:a1:f3:23:bb:81:26:f9:40:14:18:cb:56:6a:
                    ee:18:49:32:28:a4:ad:f8:e0:4c:de:7d:df:62:f3:
                    fb:61:dc:b2:f0:a1:a3:5e:3c:cf:6d:0d:b9:0f:aa:
                    e5:61:0f:dd:b5:f3:a6:a2:b8:ce:6e:7e:59:3f:fd:
                    51:48:dd:bc:50:2f:25:24:d3:bf:40:50:0a:f8:a8:
                    66:63:d2:c3:29:3c:db:be:ef:00:fd:7a:6b:9d:79:
                    f0:1e:54:89:ce:c7:52:7a:a8:ae:68:0a:fa:e2:2a:
                    ae:03:d5:05:29:7f:84:47:52:bb:70:c3:d6:79:b5:
                    9b:d2:96:e7:50:87:62:d0:13:d2:b7:9f:b1:1e:e3:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A1:41:FB:74:90:26:5F:66:DC:61:FE:40:55:E0:29:E9:FA:9B:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/1a286782-bd19-301c-93b9-20eba243b65f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:f1:13:5d:62:0f:57:c9:a5:3c:99:90:7a:cf:57:02:c3:7e:
         1b:2c:e7:4f:df:6e:01:86:a4:a0:b4:f8:cd:af:3a:61:72:5b:
         f5:59:78:6b:82:da:95:3b:47:2e:23:24:cc:c9:fb:c9:03:ad:
         05:42:8e:db:ba:bf:60:54:ff:28:c7:28:b3:18:ba:ce:92:dc:
         9d:99:03:b7:c9:83:f5:4f:cd:e0:12:23:a5:3e:d3:04:f3:fb:
         06:79:5f:aa:aa:bd:87:dc:68:72:36:b8:3f:b1:c8:e1:ad:55:
         45:51:9e:2c:25:31:43:42:c9:30:de:f5:fd:26:9e:e0:35:56:
         09:83:34:a0:9c:77:9d:3d:3b:f3:c4:89:a0:6e:e1:9f:70:15:
         57:c5:d1:e9:1e:b8:2c:60:d2:21:41:05:5f:4a:74:dc:b0:d3:
         72:bd:c5:4a:da:01:0b:e4:7a:34:fe:47:88:32:f7:b2:2b:1f:
         70:bd:a1:53:f3:0f:25:9a:44:e3:14:f9:16:bb:b1:3d:78:43:
         d1:d6:cb:0e:aa:e4:2f:4b:b0:3f:1e:99:b5:0c:ba:67:80:14:
         6c:45:1e:c0:2e:97:fd:17:46:83:f2:4c:06:19:57:4f:95:dd:
         7f:f3:4a:25:f4:72:ad:e1:79:cd:b7:d2:c2:d1:d6:4c:e2:07:
         59:e8:cf:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org