Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/e7efed05-dff9-3dc9-b60f-fa0f6324001f.roa
File:                     e7efed05-dff9-3dc9-b60f-fa0f6324001f.roa (raw, json)
Hash identifier:          5hB3OaMHiRpSrInKurEj24M5z0uHXrLUfSWFC12/+e4=
Subject key identifier:   C3:ED:5A:AF:D8:4B:95:3B:C3:A4:B7:04:5A:0D:B0:71:21:E3:7A:8C
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F432858472F30723D5D26AD0DCBCE0B00
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/e7efed05-dff9-3dc9-b60f-fa0f6324001f.roa
Signing time:             Thu 12 Sep 2024 01:00:31 +0000
ROA not before:           Thu 12 Sep 2024 01:00:31 +0000
ROA not after:            Wed 11 Dec 2024 02:00:31 +0000
asID:                     7782
IP address blocks:        63.140.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2f:30:72:3d:5d:26:ad:0d:cb:ce:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Sep 12 01:00:31 2024 GMT
            Not After : Dec 11 02:00:31 2024 GMT
        Subject: CN=2e73381a-8d7a-4089-be35-d66730313706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:67:99:84:29:9d:67:21:05:91:b5:16:a1:17:
                    66:b1:c2:58:e9:ce:8f:e3:d8:88:d6:33:4d:5f:54:
                    f7:ae:7f:f7:20:3b:ee:0a:de:d1:e2:32:81:cb:3e:
                    b8:03:54:61:89:81:c5:90:f2:6a:64:1a:1e:76:f5:
                    1a:55:7f:0c:78:6c:bc:59:ee:cc:e6:43:1c:40:8e:
                    9b:24:9c:90:7d:3a:df:af:fc:6b:40:78:e0:59:84:
                    5b:03:1d:f3:47:52:bc:6d:46:b6:2e:93:96:62:82:
                    ec:c8:8a:b2:d4:b2:4a:2d:c9:8d:4e:3e:8f:0c:f9:
                    54:df:d1:04:4a:f8:d7:b0:0a:e6:6d:67:71:aa:84:
                    9e:7f:2e:8e:83:ef:e2:e4:72:fc:37:97:07:ef:dd:
                    27:d0:3f:7c:63:53:2a:5c:5e:97:e2:5e:ae:f1:75:
                    36:85:d0:86:d1:18:14:ec:2d:90:7d:bf:45:41:dd:
                    b5:3d:e9:fe:0a:26:04:10:20:5f:c7:67:c9:e7:dc:
                    7f:c0:3a:b4:f6:86:97:22:74:ba:e7:32:3a:d2:62:
                    9b:92:df:c3:63:36:ac:2f:12:ed:71:17:cd:bb:46:
                    0a:c1:e4:08:5c:ef:46:78:2d:97:f8:df:b2:48:da:
                    ca:74:6b:ff:08:3a:fb:a4:5d:44:dc:f7:74:50:81:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:ED:5A:AF:D8:4B:95:3B:C3:A4:B7:04:5A:0D:B0:71:21:E3:7A:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/e7efed05-dff9-3dc9-b60f-fa0f6324001f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.140.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:73:05:a0:cb:ab:ce:af:0b:24:bc:e2:11:a0:d1:c6:e7:f6:
         f4:4d:d6:85:0b:e9:14:27:6d:ad:08:1d:16:b6:c8:ac:a9:bc:
         77:83:ef:d6:d7:44:bd:5c:8a:53:69:bb:e9:55:13:95:56:35:
         22:16:ca:f3:5d:01:d1:2c:61:c5:78:5a:29:b1:a7:28:59:61:
         6c:23:a7:2a:e3:64:78:cc:03:05:08:33:7a:a5:aa:5d:8a:39:
         8d:72:26:28:b7:2c:2d:c0:1c:c3:f8:f0:4f:c6:c6:3d:91:da:
         4b:18:b0:f3:c8:2c:e8:8e:e8:5b:05:66:20:2e:f4:17:45:a7:
         f0:23:1b:c7:08:7e:f7:30:07:76:57:c1:24:4f:4f:7f:c6:07:
         3a:63:dc:ce:31:60:7e:2a:1e:e1:be:78:3b:29:76:e9:20:4f:
         2e:60:25:4c:85:cb:45:f9:10:a8:3f:63:36:1f:b9:3f:49:06:
         b1:94:80:ef:a6:73:c7:e5:d5:d6:3c:45:5d:dc:88:6f:14:2f:
         d7:38:88:03:6a:a8:66:2c:9d:9b:bc:10:76:19:b1:51:9e:0a:
         84:d6:ca:af:ae:5a:e7:13:7a:8a:d9:d8:08:c3:19:6e:b8:1d:
         bf:cb:1f:48:df:66:a7:27:ce:5b:cb:71:a1:9c:58:4e:fc:5f:
         12:f9:0d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:07 2024 by rpki-client on console-fra.rpki-client.org