Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
File:                     4cddd1e8-4a48-3dbd-885a-05195287e404.roa (raw, json)
Hash identifier:          4Q+ut7UiAgEe/iWhIJAw0A2tRgJiqG1JIYQb5hv77vA=
Subject key identifier:   02:64:CE:92:29:7C:E2:10:C4:60:3E:C8:74:63:47:79:DC:DF:6E:F1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858457D13348F1267B9483CAE9E60
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     23875
IP address blocks:        63.216.59.0/24 maxlen: 24
                          63.216.61.0/24 maxlen: 24
                          63.216.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:34:8f:12:67:b9:48:3c:ae:9e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=365facea-737e-4aa1-86e0-09de75b935e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:89:13:91:8e:5f:eb:f8:70:68:9d:5d:a4:3e:
                    f8:26:6f:0f:8e:70:ff:f5:e6:a0:10:42:f2:44:3a:
                    fd:f4:1a:74:3f:0e:58:0f:e6:17:03:7f:63:74:82:
                    1d:5d:be:76:0e:b2:ab:89:29:4f:37:92:bb:8f:eb:
                    d7:58:f7:2f:76:33:5a:31:54:a4:c9:fd:04:ed:ba:
                    d2:92:ef:1c:6d:20:f0:6b:22:13:35:ce:5c:6e:2f:
                    52:73:dd:34:65:2a:8c:3d:e8:a9:0f:1f:07:bf:bd:
                    98:ab:a0:36:84:71:c6:22:1d:45:31:78:fa:9b:fb:
                    72:df:55:98:87:66:21:9a:d5:5b:54:49:33:e3:65:
                    5d:00:c5:18:c0:16:63:d6:76:45:ee:d8:e3:ca:1e:
                    f6:74:ac:8e:5e:ab:4c:ea:aa:69:2c:6e:fc:5a:bf:
                    48:76:c9:c8:78:32:ce:f0:d4:97:43:1a:37:12:e8:
                    f3:88:3b:fe:15:b5:1d:5e:09:97:19:0f:c7:0c:44:
                    50:c3:65:1a:bb:00:b6:c2:30:51:92:19:58:e4:66:
                    ed:16:dd:6e:0f:c7:ba:63:d3:94:31:1a:b1:f4:e5:
                    21:71:f3:53:b3:eb:8f:96:c8:50:1e:c0:25:1f:a0:
                    52:a7:1e:97:21:03:b0:8d:c4:ba:ad:9f:02:7d:9f:
                    d7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:64:CE:92:29:7C:E2:10:C4:60:3E:C8:74:63:47:79:DC:DF:6E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/4cddd1e8-4a48-3dbd-885a-05195287e404.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.216.59.0/24
                  63.216.61.0-63.216.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c9:1a:04:28:43:cc:07:51:a1:05:69:90:f3:5e:c3:bc:15:
         3a:51:0a:8b:36:98:db:54:ae:89:a3:8c:a6:96:de:5b:2f:34:
         18:41:bd:d7:ea:0f:6b:5c:3d:be:af:cc:db:42:7b:6f:0e:0e:
         83:3d:90:21:5b:cb:b0:d9:0c:d0:9a:59:f4:b4:bd:84:b6:c9:
         ac:e1:1d:86:b1:df:b1:53:f6:4b:22:98:58:40:4b:42:02:9f:
         9c:4c:ce:cd:22:2e:dc:47:09:df:4d:f7:93:b5:57:f6:2a:a1:
         8e:36:15:09:f6:b3:23:b0:f4:d4:38:f4:05:a7:b9:29:30:5b:
         96:d7:57:e7:58:4e:ca:f6:5c:a4:ee:c6:e4:4d:01:00:b2:06:
         12:8c:32:40:1e:7d:ad:7b:56:c3:79:95:3e:ed:fb:34:c9:0f:
         8b:1b:ad:ee:d9:ff:63:35:c7:38:aa:a4:1c:fb:06:91:94:dd:
         16:ab:7d:1b:f5:cf:2b:5d:58:86:df:3d:18:53:2c:50:5e:b9:
         91:49:3d:5c:3e:a9:a2:e1:bf:f2:cc:1e:24:7a:62:75:82:a5:
         dd:93:0e:df:ed:a4:46:79:c0:e2:ec:ee:9b:b4:cc:ad:be:17:
         52:7f:ff:15:6d:f6:ae:c9:94:4b:23:ab:aa:a5:a7:af:72:63:
         2e:23:26:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:45:29 2024 by rpki-client on console-fra.rpki-client.org