Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5e97adf0-58bb-39ad-ac72-005c693dd635.roa
File:                     5e97adf0-58bb-39ad-ac72-005c693dd635.roa (raw, json)
Hash identifier:          r0OZZ0URisyuIG/OGnRmnN6+TGj+MIdR48Lc+1ne0Ds=
Subject key identifier:   E2:86:17:62:82:90:CC:5D:BB:51:6D:12:B5:AE:FD:F5:FE:1F:E8:B1
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285845777DC9A99F8027A86F167F80
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5e97adf0-58bb-39ad-ac72-005c693dd635.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     53345
IP address blocks:        63.217.123.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c9:a9:9f:80:27:a8:6f:16:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=763f9611-0824-4d37-a54b-f3a70b6ac2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:64:11:f4:ff:04:34:a5:1b:e0:95:25:85:c6:
                    b9:7b:04:58:c0:48:6b:4a:48:f2:98:04:73:7d:5d:
                    72:b9:c2:10:03:c9:63:57:1c:b4:d2:67:33:ff:62:
                    d3:e7:5e:25:ed:0b:27:00:1b:e1:ae:83:24:cb:23:
                    dd:dc:bf:2b:4b:7b:fd:e9:50:94:12:93:bd:3e:ef:
                    3b:da:49:e8:72:af:d1:4a:f1:e0:92:f3:ed:94:d0:
                    d7:68:75:5c:04:40:85:43:83:30:79:16:3b:6a:de:
                    05:f2:91:de:d4:0b:18:75:05:51:14:91:72:1b:60:
                    93:de:71:bb:9c:9d:da:2d:c3:88:05:11:34:f3:e3:
                    32:6f:c0:a0:eb:95:63:2f:1a:af:58:1c:37:c8:58:
                    11:e7:35:f3:06:4d:af:78:da:3b:4e:b9:58:76:fb:
                    7f:56:e7:2c:32:3f:6f:23:a7:41:e7:29:09:79:f9:
                    c0:9b:20:55:69:0c:d8:a6:ae:dc:a4:90:e4:7c:b7:
                    8c:32:9c:6d:c5:d6:5a:bc:91:e4:c7:47:48:8b:fa:
                    e9:05:b9:53:ad:42:86:db:c9:4c:a8:c7:b1:a0:82:
                    39:f8:ef:6a:5c:e1:d8:b8:17:84:94:db:db:8e:26:
                    41:65:4d:2c:0e:2d:37:44:f4:3c:69:c2:a1:ab:66:
                    22:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:17:62:82:90:CC:5D:BB:51:6D:12:B5:AE:FD:F5:FE:1F:E8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/5e97adf0-58bb-39ad-ac72-005c693dd635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:a7:05:e3:c4:bb:eb:8c:d7:5e:4a:71:72:be:47:5a:03:e2:
         88:76:0f:2b:e0:d9:82:a6:a4:42:3a:ff:58:67:f7:02:5f:40:
         18:c7:ba:d9:7a:a8:fa:5f:e7:0b:df:43:69:60:86:aa:c1:1c:
         0c:ca:8a:72:da:75:4e:31:fe:03:3f:70:15:85:2a:98:ab:3b:
         55:ca:f0:4a:0a:ae:30:ad:ab:cb:30:06:a2:34:7d:df:93:ff:
         98:d6:46:39:a8:ea:5b:6d:91:f7:34:73:1e:fd:ec:74:ac:ce:
         1e:05:ff:13:d5:f5:c4:60:8e:cc:8f:c9:c1:83:ca:ce:2e:17:
         9c:fd:d4:b9:d3:c7:9d:87:41:a7:c1:80:5a:52:45:76:fb:b0:
         de:5c:41:f8:db:f1:44:c9:66:27:24:4d:33:29:a8:da:31:28:
         51:17:21:79:24:3c:8e:78:76:46:96:79:54:41:03:60:39:3a:
         72:59:c4:01:93:2f:dd:bc:7b:f0:12:cd:4b:2b:9d:69:17:b0:
         cc:00:2c:46:b5:cb:60:f6:d6:7b:83:03:b6:b2:7b:56:6b:90:
         22:d0:a0:28:44:15:13:97:e3:9f:3e:83:e6:a7:d0:c1:b3:81:
         f8:c3:8c:d7:9e:25:bb:71:7c:20:d5:3d:17:04:28:1b:70:62:
         ce:b4:dd:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV3fcmpn4AnqG8Wf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDQwNzEzMDAzMloXDTI0MDcwNjEzMDAzMlowLzEtMCsGA1UEAxMk
NzYzZjk2MTEtMDgyNC00ZDM3LWE1NGItZjNhNzBiNmFjMmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGQR9P8ENKUb4JUlhca5ewRYwEhrSkjymARz
fV1yucIQA8ljVxy00mcz/2LT514l7QsnABvhroMkyyPd3L8rS3v96VCUEpO9Pu87
2knocq/RSvHgkvPtlNDXaHVcBECFQ4MweRY7at4F8pHe1AsYdQVRFJFyG2CT3nG7
nJ3aLcOIBRE08+Myb8Cg65VjLxqvWBw3yFgR5zXzBk2veNo7TrlYdvt/VucsMj9v
I6dB5ykJefnAmyBVaQzYpq7cpJDkfLeMMpxtxdZavJHkx0dIi/rpBblTrUKG28lM
qMexoII5+O9qXOHYuBeElNvbjiZBZU0sDi03RPQ8acKhq2YiRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKGF2KCkMxdu1FtErWu/fX+H+ixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvNWU5N2FkZjAtNThiYi0z
OWFkLWFjNzItMDA1YzY5M2RkNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9l7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKenBePEu+uM115KcXK+R1oD4oh2Dyvg2YKmpEI6/1hn9wJfQBjHutl6
qPpf5wvfQ2lghqrBHAzKinLadU4x/gM/cBWFKpirO1XK8EoKrjCtq8swBqI0fd+T
/5jWRjmo6lttkfc0cx797HSszh4F/xPV9cRgjsyPycGDys4uF5z91LnTx52HQafB
gFpSRXb7sN5cQfjb8UTJZickTTMpqNoxKFEXIXkkPI54dkaWeVRBA2A5OnJZxAGT
L928e/ASzUsrnWkXsMwALEa1y2D21nuDA7aye1ZrkCLQoChEFROX458+g+an0MGz
gfjDjNeeJbtxfCDVPRcEKBtwYs603W0=
-----END CERTIFICATE-----
Generated at Tue May 7 21:45:30 2024 by rpki-client on console-fra.rpki-client.org