Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50b8fbb1-f795-37b5-829d-fe9be5d8c759.roa
File:                     50b8fbb1-f795-37b5-829d-fe9be5d8c759.roa (raw, json)
Hash identifier:          +nkhzgHnMB3xxdNX3ocY8ESPNyv0ha4qQOZ6617Ofqo=
Subject key identifier:   E2:5C:91:DF:C8:38:2A:21:91:92:0F:C9:CB:7B:B6:62:1C:3F:47:D1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F432858474420B305ABFCD8183D759940
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50b8fbb1-f795-37b5-829d-fe9be5d8c759.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     19194
IP address blocks:        63.223.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b3:05:ab:fc:d8:18:3d:75:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=51e6c2da-7abe-4731-a206-ca321352c3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:de:15:90:6c:29:62:68:db:7b:d6:00:be:96:
                    58:86:11:94:92:46:be:09:ce:2f:9f:82:46:0b:ae:
                    d8:66:7a:2d:47:e2:69:cf:54:d8:2e:41:ae:36:67:
                    21:62:4d:2f:f6:f4:aa:a1:0a:8a:fe:c0:24:f6:47:
                    bf:86:34:82:0a:67:f8:ba:da:e2:01:7b:f4:9e:7a:
                    0b:52:32:58:17:35:11:0c:d2:e9:84:d2:d0:2f:80:
                    27:b3:40:bf:8f:d9:9b:be:0c:d0:4c:ee:34:46:c1:
                    91:f3:59:6c:eb:b5:7a:9c:84:d3:6b:0a:79:18:f3:
                    4d:4c:a8:3d:28:db:07:b3:2a:32:e5:83:54:a0:38:
                    9b:fc:69:85:00:67:04:85:1f:55:fb:39:42:47:72:
                    ac:16:fa:e9:d4:8a:35:b5:d7:53:7a:e7:2a:a0:a7:
                    88:f8:87:21:cd:10:26:55:f9:7d:eb:98:19:b1:71:
                    ec:71:70:d4:cb:e4:59:57:e7:d4:f3:b7:0e:f7:37:
                    ea:d0:be:2a:fc:5f:b5:2d:e0:c5:0c:ea:fe:79:f9:
                    cc:aa:6d:e7:ab:bd:f0:7c:1f:92:ec:ba:34:d3:32:
                    c6:72:4a:c9:62:9e:4a:81:b6:21:ea:e4:9e:33:24:
                    76:bf:f1:df:f0:49:67:83:b1:0c:4a:92:b6:a5:41:
                    65:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5C:91:DF:C8:38:2A:21:91:92:0F:C9:CB:7B:B6:62:1C:3F:47:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/50b8fbb1-f795-37b5-829d-fe9be5d8c759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:15:c4:97:c6:de:78:5d:f7:6e:d0:fa:4e:b2:c7:50:98:31:
         db:f4:8e:7a:37:de:f6:9f:4c:ef:31:65:d2:8c:d6:18:a3:73:
         39:ab:7c:bd:4d:5d:e8:3e:c2:84:f1:ae:27:96:66:50:e1:51:
         45:85:b7:30:33:74:37:d6:53:45:11:d3:45:c5:08:81:8a:ef:
         c5:3a:7a:0f:ce:a5:38:1c:b7:72:ab:82:c6:71:71:0d:3d:5c:
         88:40:98:7a:fb:d3:03:f4:81:c4:7f:c3:62:9c:9c:ca:91:a0:
         cb:d3:f2:38:24:20:1b:c6:54:d5:62:85:4b:03:89:41:08:d0:
         29:54:44:e6:14:60:2f:73:f0:56:7c:53:d6:db:6b:f7:1f:5b:
         87:69:bb:46:0e:d9:76:ed:34:4a:1d:5a:8e:26:b5:d2:0a:8f:
         4e:0b:8e:4b:70:2a:36:f7:36:06:cc:70:8f:09:6a:f2:47:fc:
         e1:cd:f4:e3:0b:67:e8:46:90:4f:65:a7:ce:cb:4c:09:a8:63:
         76:0b:71:89:8c:43:69:10:14:41:5f:e8:45:87:1c:7d:81:c7:
         32:5f:e4:e7:a9:74:92:57:36:e8:4d:af:03:ae:33:44:5a:b4:
         dd:89:c1:cb:77:b5:9f:d9:02:e4:32:dd:fe:7f:d4:89:17:6f:
         e0:30:5a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:05 2024 by rpki-client on console-fra.rpki-client.org