Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4323b790-68f3-3125-9e68-6a03df8430c0.roa
File:                     4323b790-68f3-3125-9e68-6a03df8430c0.roa (raw, json)
Hash identifier:          lsOE0ko9MtmIEbL9X0FjG46gmyozrHKQFPSyotsvrFY=
Subject key identifier:   0A:D9:A6:E2:A6:DC:59:40:A3:F0:32:EE:35:55:D6:08:88:96:14:9A
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845777DCA2876E7AE8E839C5900
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4323b790-68f3-3125-9e68-6a03df8430c0.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     16552
IP address blocks:        63.219.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:ca:28:76:e7:ae:8e:83:9c:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=8b0f17af-ce6e-4a01-989c-2b855b385d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:0c:fc:c2:d4:ce:0e:c8:05:13:fe:1b:ff:
                    df:2a:9f:43:1a:94:3e:44:d1:7e:74:ab:5b:cf:8a:
                    51:50:7f:a1:e4:5f:34:d1:45:0e:c2:18:00:a8:d3:
                    d0:83:34:0d:a2:f6:9e:a8:2a:f4:9f:00:b8:b5:40:
                    df:c6:75:4b:2f:ad:c8:cc:c2:f9:e6:a3:09:cf:5e:
                    26:65:f7:c8:7d:be:51:6b:09:72:ab:12:e5:9a:09:
                    02:35:b6:84:11:9c:d4:47:f2:dc:31:08:f6:38:65:
                    1f:ab:25:78:23:07:d8:44:ef:bc:33:00:55:bf:92:
                    e4:c3:46:82:dc:bb:f2:69:18:28:35:70:51:0d:94:
                    0a:0c:ab:f4:fd:e9:42:d6:6c:54:7c:e1:2f:6d:5c:
                    73:8e:83:f9:b8:e3:cc:b4:9d:5b:f6:d2:07:d1:65:
                    31:cf:ed:93:f5:2d:86:6a:18:f0:95:47:98:d7:3d:
                    00:bf:a1:12:2b:7c:90:51:08:76:0e:90:9d:61:10:
                    77:1c:38:ce:71:5e:b9:59:22:e3:2f:14:21:2a:c9:
                    dd:36:7b:6b:f1:19:92:03:db:93:1e:d1:a1:22:7b:
                    1e:fa:f4:7a:f9:4b:bf:1a:9a:b5:6b:33:63:20:db:
                    ff:4d:75:1e:49:83:66:63:2d:41:c1:50:63:f4:b9:
                    76:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:A6:E2:A6:DC:59:40:A3:F0:32:EE:35:55:D6:08:88:96:14:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4323b790-68f3-3125-9e68-6a03df8430c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.219.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:c5:f1:2d:a8:74:64:ea:0b:f4:2d:99:4b:b5:94:79:94:6a:
         c0:32:61:1f:27:90:69:86:89:c4:c2:7f:23:a2:40:58:2e:8f:
         53:75:e0:9a:6f:ab:b7:1d:29:b6:20:06:ba:16:4b:82:ca:27:
         78:4c:a5:82:2d:e9:00:80:32:37:38:35:3c:fc:e4:b6:93:01:
         e6:2d:2c:56:ca:9b:31:6f:a6:c1:30:f6:8b:09:00:9a:d1:97:
         b6:e5:37:e8:ca:ad:34:ee:29:61:f4:7c:17:ac:09:4a:17:1b:
         66:79:ae:99:b0:ae:a5:2e:ac:28:9f:27:33:5f:70:3d:f2:d7:
         db:90:8c:e0:3d:d8:7f:80:b3:a1:2a:5f:2d:e1:5c:03:2e:a2:
         ac:28:4a:58:25:b3:be:99:1e:94:ef:62:19:3c:41:55:56:9b:
         e7:0b:e1:d7:0c:b7:f4:02:0b:06:5f:90:f8:83:19:95:5e:a7:
         ac:e2:d1:5c:06:61:b5:94:24:e5:3f:ee:9a:37:e3:ac:01:a5:
         73:00:3d:26:98:59:5a:cf:38:75:15:25:f6:6c:7c:7e:fe:05:
         d3:ad:6a:2e:5b:6c:f3:2e:99:4c:ab:29:d4:e4:94:80:66:aa:
         cf:3e:2d:d7:c4:f8:db:d9:7a:92:c0:24:9f:0a:d6:d9:5c:ce:
         c6:f1:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:58:28 2024 by rpki-client on console-ams.rpki-client.org