Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa
File:                     a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa (raw, json)
Hash identifier:          +hw57RFm06r5o9QMeRJpqfwPmMRRerQok47MkJ8pozM=
Subject key identifier:   72:8E:20:81:FB:1A:76:18:25:12:5C:A2:FD:14:4D:28:F3:F5:91:7B
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285847362B58577CB6F23B3793CC00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     24413
IP address blocks:        63.217.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:58:57:7c:b6:f2:3b:37:93:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=5a66f992-090e-4d47-8287-187d045f8a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2b:90:d5:7e:eb:fa:65:6c:62:4c:83:e4:13:
                    0a:3f:db:ec:a3:da:91:2c:0c:85:e0:3f:75:c0:ce:
                    d0:02:91:c1:fd:c2:14:d3:32:d9:21:b3:b8:76:cd:
                    56:a6:ca:c9:aa:a5:a3:a3:53:04:5e:f5:19:9e:ed:
                    0a:ca:af:41:1f:56:82:8e:6c:b4:c2:88:08:9b:98:
                    e3:c3:b7:ce:fd:3a:af:6c:2a:4a:3f:cf:72:86:f0:
                    6e:48:45:81:e2:2a:38:27:7e:3e:96:c2:d6:0c:bd:
                    99:00:1c:f4:16:45:25:37:00:7e:ca:d5:c1:36:7c:
                    e9:a7:d2:da:74:23:46:c7:8f:a9:ba:57:e3:00:f4:
                    83:8b:fd:3f:c8:a9:8d:30:72:d3:a5:2c:d9:27:26:
                    89:ac:0e:b9:6c:db:15:20:95:de:a6:03:99:bb:85:
                    1d:df:b5:ed:e5:6a:25:9b:93:b5:d0:e0:26:bc:49:
                    d5:49:82:84:76:0e:f6:fa:71:57:28:33:9c:f0:73:
                    1a:83:45:7c:6e:46:13:6d:71:f2:90:ee:5b:54:c9:
                    f8:80:23:3f:0c:2e:0d:62:60:1d:19:1d:8d:ec:d0:
                    9e:e9:1d:97:1a:54:7c:31:79:81:e8:95:6b:00:c2:
                    37:3f:ea:ae:7c:88:51:66:08:1c:ee:c7:af:82:fa:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8E:20:81:FB:1A:76:18:25:12:5C:A2:FD:14:4D:28:F3:F5:91:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/a469cc42-d6cc-3a2b-8008-ca2a4a46f47b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.217.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:ad:a5:db:4d:f2:6f:73:b2:30:8b:f3:8a:63:67:c3:96:
         f7:f3:90:af:6b:47:c1:77:f8:24:a2:b8:4a:91:4e:24:f2:81:
         f4:df:c2:81:8b:20:a6:b2:01:b0:57:00:88:5a:33:d3:a5:0d:
         8d:93:67:03:7f:d8:30:f7:c2:18:62:42:86:e5:d1:5c:4d:04:
         80:18:57:a2:9f:ce:5f:02:8e:7b:79:e9:31:45:9a:e6:17:59:
         73:40:ea:62:d0:11:87:8c:a8:0a:9e:28:4d:c6:63:d3:03:57:
         ff:94:55:bd:64:da:58:f9:f9:c7:3f:c3:07:48:6e:d9:9c:cc:
         c0:42:3e:23:5d:27:f0:b1:52:4f:62:44:79:61:56:78:20:fc:
         af:4f:64:6a:4e:8d:c9:b9:35:3c:c6:d6:2e:90:09:81:ce:9e:
         b9:c1:38:70:53:61:3f:c9:e9:7a:78:72:db:42:e4:84:6f:e0:
         97:17:af:39:0b:6e:f2:ef:94:5f:06:f3:34:08:07:eb:fc:aa:
         93:85:ce:38:87:f9:c6:ef:55:7d:44:c4:13:7e:00:a4:23:16:
         c0:52:26:ab:0d:a6:f7:52:ca:cd:e6:de:34:00:8a:dc:02:c9:
         79:0d:1a:68:9d:1b:0e:9a:d5:3e:c2:89:56:8f:1e:52:90:65:
         49:e4:30:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc2K1hXfLbyOzeTzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI0MDkxNDEzMDA0MVoXDTI0MTIxMzE0MDA0MVowLzEtMCsGA1UEAxMk
NWE2NmY5OTItMDkwZS00ZDQ3LTgyODctMTg3ZDA0NWY4YTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCuQ1X7r+mVsYkyD5BMKP9vso9qRLAyF4D91
wM7QApHB/cIU0zLZIbO4ds1WpsrJqqWjo1MEXvUZnu0Kyq9BH1aCjmy0wogIm5jj
w7fO/TqvbCpKP89yhvBuSEWB4io4J34+lsLWDL2ZABz0FkUlNwB+ytXBNnzpp9La
dCNGx4+pulfjAPSDi/0/yKmNMHLTpSzZJyaJrA65bNsVIJXepgOZu4Ud37Xt5Wol
m5O10OAmvEnVSYKEdg72+nFXKDOc8HMag0V8bkYTbXHykO5bVMn4gCM/DC4NYmAd
GR2N7NCe6R2XGlR8MXmB6JVrAMI3P+qufIhRZggc7sevgvqfuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHKOIIH7GnYYJRJcov0UTSjz9ZF7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvYTQ2OWNjNDItZDZjYy0z
YTJiLTgwMDgtY2EyYTRhNDZmNDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP9lRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHQraXbTfJvc7Iwi/OKY2fDlvfzkK9rR8F3+CSiuEqRTiTygfTfwoGL
IKayAbBXAIhaM9OlDY2TZwN/2DD3whhiQobl0VxNBIAYV6Kfzl8Cjnt56TFFmuYX
WXNA6mLQEYeMqAqeKE3GY9MDV/+UVb1k2lj5+cc/wwdIbtmczMBCPiNdJ/CxUk9i
RHlhVngg/K9PZGpOjcm5NTzG1i6QCYHOnrnBOHBTYT/J6Xp4cttC5IRv4JcXrzkL
bvLvlF8G8zQIB+v8qpOFzjiH+cbvVX1ExBN+AKQjFsBSJqsNpvdSys3m3jQAitwC
yXkNGmidGw6a1T7CiVaPHlKQZUnkMGU=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:38:45 2024 by rpki-client on console-ams.rpki-client.org