Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
File:                     78e20c46-e0de-3b67-a054-84ea3ba8c128.roa (raw, json)
Hash identifier:          4fcJ0khewcD6Aoeh0ETBnbIfEDMUvis+dlwiver4W9Y=
Subject key identifier:   0D:E6:67:E3:92:AD:83:E1:E9:8C:40:00:9C:1D:36:B9:DB:F3:26:03
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847362B58202913EBAC5C808CC0
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     29802
IP address blocks:        63.223.89.0/24 maxlen: 24
                          63.223.90.0/24 maxlen: 24
                          63.223.106.0/24 maxlen: 24
                          63.223.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:58:20:29:13:eb:ac:5c:80:8c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=6898b48e-0492-4685-abed-745d87130991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:c9:a4:3d:93:ea:d5:a9:15:b3:e4:de:af:
                    37:bd:c2:99:9e:16:a7:b7:86:87:23:14:fa:98:bf:
                    a6:1f:bb:b8:6c:a5:70:1c:d5:d2:ab:d5:17:f9:df:
                    8a:ae:ba:13:94:c3:46:0a:af:c0:84:85:3c:70:84:
                    cb:a8:02:be:f4:ef:29:3f:e5:96:14:3c:7b:ed:2c:
                    da:65:09:3f:e7:dc:53:bc:59:c0:14:b4:79:e3:66:
                    88:20:ee:a7:66:a0:83:05:80:3c:8d:3a:d4:83:37:
                    75:e5:45:dc:83:6e:27:19:cf:d6:65:12:79:b6:04:
                    47:e9:e1:95:71:83:06:2d:e5:c7:1a:ba:35:aa:f4:
                    87:48:93:51:f0:ac:64:ea:dc:e4:da:05:78:9e:2d:
                    d4:b9:ec:90:55:33:f5:c9:5a:ec:37:08:8d:6e:8b:
                    39:e0:9c:a8:fa:1a:5a:d0:2c:be:a1:73:a8:62:8f:
                    f8:70:e9:ff:be:bd:2e:07:e5:dc:47:05:b4:a3:4a:
                    24:38:63:d0:ee:5b:d6:35:81:3b:b6:ff:1a:0c:3f:
                    1f:f2:61:7a:72:d6:4f:23:21:45:6a:48:3a:95:de:
                    ae:18:9b:a0:9b:22:01:26:51:45:de:b9:39:3f:c3:
                    12:70:48:73:78:c6:3e:47:97:0c:4c:da:e2:1a:87:
                    d5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E6:67:E3:92:AD:83:E1:E9:8C:40:00:9C:1D:36:B9:DB:F3:26:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/78e20c46-e0de-3b67-a054-84ea3ba8c128.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.223.89.0-63.223.90.255
                  63.223.106.0/24
                  63.223.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:51:4e:3a:b2:b4:e2:20:18:b5:d5:a9:0f:8a:69:cd:14:80:
         06:6a:b0:04:ee:70:5d:91:0f:b3:37:51:ff:43:12:05:1d:9f:
         63:29:de:22:ea:71:45:83:7d:a7:cd:a8:d2:2a:0e:8b:e8:d8:
         32:72:be:39:7e:bf:85:3c:0b:c0:99:04:bb:f0:e7:00:89:bd:
         7b:8f:ef:e7:11:ca:cf:ce:59:e1:e2:ae:35:be:b3:b9:bf:c6:
         80:4e:d7:06:bf:ee:1b:33:b6:e0:3d:d9:2b:1c:55:d6:63:d8:
         18:c0:91:c2:80:3b:bb:28:fe:a7:5f:f8:e0:85:44:09:68:bc:
         74:2a:c9:38:36:db:7b:e2:1d:e0:1c:8a:55:32:52:10:39:4a:
         b0:44:d9:34:2c:94:b4:e4:9d:6a:dd:71:8f:df:c2:d0:16:58:
         31:e2:09:ec:64:17:d3:e0:78:ec:c4:19:d5:bd:52:4d:ab:93:
         c3:ab:ca:b9:07:b1:a3:2c:51:3e:cf:8d:de:e3:02:04:f9:d3:
         d7:de:10:82:a2:ce:ea:93:2d:af:14:98:3b:16:e2:93:b8:e0:
         1f:63:9b:53:c8:c8:36:81:e1:17:c7:8d:dc:fd:37:47:c1:47:
         03:73:63:63:f2:ea:ce:a9:ab:30:63:b0:3f:a2:82:5b:ee:1e:
         b3:4c:29:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org