Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3d5c8cba-9a22-395a-b15c-a656e2779a66.roa
File:                     3d5c8cba-9a22-395a-b15c-a656e2779a66.roa (raw, json)
Hash identifier:          D3cowJV+y+fQZJrOG/NI2EbyyovH8qTm71kK1ciDUD8=
Subject key identifier:   FD:03:D0:85:C1:5A:C7:E0:DE:0F:43:EC:06:12:1E:90:03:4C:39:86
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845A9BE0D4C22EBB57A086BE640
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3d5c8cba-9a22-395a-b15c-a656e2779a66.roa
Signing time:             Thu 25 Apr 2024 13:00:33 +0000
ROA not before:           Thu 25 Apr 2024 13:00:33 +0000
ROA not after:            Wed 24 Jul 2024 13:00:33 +0000
asID:                     31713
IP address blocks:        63.216.0.0/13 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a9:be:0d:4c:22:eb:b5:7a:08:6b:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr 25 13:00:33 2024 GMT
            Not After : Jul 24 13:00:33 2024 GMT
        Subject: CN=fc9f4d75-1deb-4df3-9ec3-718a75dae30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cd:f5:bf:bb:9c:4f:63:b9:6b:48:4a:72:a4:
                    12:20:0a:cb:fa:cb:3d:5d:cb:26:f5:3f:82:39:e7:
                    fa:0a:8f:bf:85:07:e6:d0:06:a3:bb:f6:69:94:eb:
                    c0:51:83:08:b2:46:10:00:30:3c:80:3d:1b:23:74:
                    79:f3:aa:29:ea:00:74:fc:51:9c:61:00:75:c0:5d:
                    d5:37:d6:ff:39:a8:f2:e4:98:53:2d:77:b7:67:14:
                    a6:9f:29:ec:ff:76:a0:7f:0f:6f:5c:93:ef:b1:a0:
                    29:fe:80:93:cd:8b:95:de:95:37:87:c6:77:6f:ab:
                    36:70:ea:78:47:4d:b6:e9:a1:6f:e0:26:72:ab:35:
                    cd:73:42:4b:87:d2:86:61:ec:79:93:63:d0:6d:1e:
                    71:03:d0:0a:28:21:55:ca:22:4d:67:11:1a:87:93:
                    6e:42:56:17:21:92:87:54:90:b9:ba:4b:9d:cf:22:
                    87:83:a0:8c:33:b1:bd:19:5b:25:4f:1e:a4:78:04:
                    52:47:12:b7:3c:99:63:b6:1d:48:ba:05:c0:04:c1:
                    1f:f8:94:95:bb:a9:cd:82:94:d3:36:e3:70:a1:fc:
                    85:78:fb:2e:a7:96:27:d0:46:9b:d5:b4:84:48:5b:
                    fd:a8:8a:d2:c2:b9:45:49:d6:ae:ce:8e:4f:d4:d5:
                    bc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:03:D0:85:C1:5A:C7:E0:DE:0F:43:EC:06:12:1E:90:03:4C:39:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3d5c8cba-9a22-395a-b15c-a656e2779a66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.0.0/13

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:0f:7a:14:14:ff:cc:af:22:46:c0:a8:03:b9:25:d3:83:40:
         57:64:33:a8:68:95:b7:2d:de:1e:16:e3:60:38:0e:f1:89:67:
         c2:2b:81:ff:92:f6:86:2b:6e:c5:df:6b:3e:09:1f:ec:12:3e:
         1b:ea:3b:56:fb:a5:8b:c2:3d:8f:92:43:dd:e3:05:ff:a6:e9:
         c4:9a:43:b3:88:78:19:80:2f:45:95:e6:08:d9:fc:5a:6b:fd:
         b1:a8:74:2f:1d:f6:db:b9:1b:b1:f8:8d:1c:c2:b1:39:54:61:
         17:4e:ce:43:6a:d8:06:4c:0b:53:2c:e3:f7:28:2b:77:ce:5c:
         39:52:75:01:dd:56:f6:69:4f:21:78:28:20:9b:83:86:ce:5f:
         4e:4f:1b:fb:7d:69:40:10:1f:95:00:a6:a9:ab:98:88:12:28:
         50:2a:3f:e6:4b:46:cc:2d:a7:b2:33:9c:c4:1e:51:a7:45:bc:
         cc:3c:4f:af:4f:b0:31:f7:1e:e8:f4:e0:62:e8:0a:4e:d0:34:
         2c:67:14:1d:90:e0:6a:f1:ed:be:e1:e4:15:71:81:dc:73:f7:
         78:3c:e5:37:b0:5e:1a:e4:39:a6:33:fa:ec:c7:f5:5f:7e:c9:
         58:e4:d3:9d:28:3f:84:ba:b5:80:3b:5e:74:04:62:c0:3f:31:
         cb:7d:14:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:58:28 2024 by rpki-client on console-ams.rpki-client.org