Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa
File:                     24193cda-dfba-3da1-a667-f8eeba423d0a.roa (raw, json)
Hash identifier:          e0N2K2Wj3qQ8l2NVz9eVkP2MkoEOMTzWZDhVdJDOhGc=
Subject key identifier:   47:AE:BF:32:BF:7F:E5:61:71:49:47:50:C9:08:C4:6C:70:80:50:12
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F432858457D1334E4BEC57BACAB7E0D00
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa
Signing time:             Tue 09 Apr 2024 13:00:34 +0000
ROA not before:           Tue 09 Apr 2024 13:00:34 +0000
ROA not after:            Mon 08 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        155.63.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:13:34:e4:be:c5:7b:ac:ab:7e:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Apr  9 13:00:34 2024 GMT
            Not After : Jul  8 13:00:34 2024 GMT
        Subject: CN=89e3024e-6ca8-4596-8a48-fbdfd4a9b3ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:85:45:5d:12:8d:34:f6:d8:f0:9f:aa:37:
                    bc:e6:b7:24:ae:62:2e:d2:67:ed:40:89:96:12:aa:
                    51:20:0e:65:0e:d4:68:4a:fd:ef:99:ac:93:29:9e:
                    0d:35:77:70:7f:bc:ac:1c:cc:3d:df:8c:7c:57:b7:
                    52:44:7b:3c:fd:f2:d3:f3:9e:20:fc:a5:8b:89:2d:
                    68:d6:27:14:04:98:74:cc:35:3f:8f:42:27:ef:d1:
                    cd:05:ba:98:8c:f9:a5:40:ce:21:2c:57:11:fc:aa:
                    72:d2:1a:fc:b0:67:5f:17:17:fa:0a:03:5d:c9:65:
                    c5:07:f1:1a:6d:16:a4:1d:12:b5:d2:a9:15:47:13:
                    87:ec:59:68:2d:df:c3:8a:32:59:57:82:56:1c:b4:
                    e5:1c:f1:83:9e:24:15:eb:d0:03:28:4a:74:32:2d:
                    d3:35:75:b8:5f:39:82:e2:cc:ac:26:bc:a2:63:50:
                    d1:18:55:00:fb:d9:20:fe:6e:ec:15:3a:32:53:66:
                    d8:ba:0c:6a:72:56:5b:14:53:dd:b6:8d:7a:7e:d1:
                    70:79:43:5d:b9:b6:b4:f8:f1:9c:ab:f1:9e:8e:05:
                    b5:ca:6c:a8:19:4d:81:0f:16:12:22:11:35:20:7e:
                    90:e9:51:d7:d6:c5:d2:a2:ce:b6:9b:73:03:58:ee:
                    de:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AE:BF:32:BF:7F:E5:61:71:49:47:50:C9:08:C4:6C:70:80:50:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/24193cda-dfba-3da1-a667-f8eeba423d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:65:8d:7a:d5:e9:59:6d:a0:67:63:f7:d5:bc:53:b6:b6:78:
         67:54:b0:e4:65:7f:ea:67:4f:ed:4a:0c:40:58:e5:ee:2c:9f:
         bb:f1:00:92:10:b0:9d:29:63:ef:aa:ad:c9:b2:ab:4f:40:c2:
         5d:11:b7:ea:59:7f:c5:5c:6f:ae:9a:b3:5d:87:ab:bc:3e:e7:
         62:e7:86:59:2a:02:ca:9c:5a:e6:20:af:bc:8e:94:53:a9:42:
         91:4f:22:ad:7a:ba:ac:4b:23:63:2e:b2:77:9d:01:2c:92:75:
         7b:d6:d1:95:0d:92:79:a6:dc:42:a4:4e:8c:ed:be:8c:fe:98:
         45:41:16:e1:53:da:85:fd:05:be:2b:2a:f8:8a:6a:bb:c9:f6:
         c9:5b:ff:5b:71:d4:82:c7:00:41:96:74:ac:34:a6:68:b8:10:
         fd:01:cc:fb:22:b0:75:ae:0f:0a:51:47:71:52:e2:80:44:5d:
         b8:64:74:2a:0b:e2:2a:58:fc:5d:b6:53:68:49:fb:87:15:89:
         d3:cf:16:0c:c0:29:de:1b:15:3a:5f:8b:65:27:fe:f1:20:4f:
         e7:7c:63:7b:5a:72:ec:11:96:e6:29:47:3e:14:75:e1:b2:f7:
         b3:d0:dd:ac:eb:25:ef:2e:e7:0a:1d:c1:7d:7b:68:79:d7:cd:
         fb:96:e8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:15:18 2024 by rpki-client on console-fra.rpki-client.org