Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa
File:                     1db45472-9134-3bf8-aa89-4db40eab619e.roa (raw, json)
Hash identifier:          BJiqGL0FYYXdbbaHGNkDakm0qcHc3cCqHw1B6w/3Ki0=
Subject key identifier:   68:A7:85:C6:03:99:8A:82:72:D0:EF:79:08:AB:30:4B:7D:18:A6:4F
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285847A8A153C888B209797F83C700
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa
Signing time:             Fri 25 Oct 2024 13:00:42 +0000
ROA not before:           Fri 25 Oct 2024 13:00:42 +0000
ROA not after:            Thu 23 Jan 2025 14:00:42 +0000
asID:                     9009
IP address blocks:        63.141.50.0/24 maxlen: 24
                          63.141.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a8:a1:53:c8:88:b2:09:79:7f:83:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Oct 25 13:00:42 2024 GMT
            Not After : Jan 23 14:00:42 2025 GMT
        Subject: CN=8a72b900-f703-495a-9f9d-99a00745cf6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:d9:48:ca:c2:5b:2c:ec:19:fd:db:ee:3b:
                    b9:7b:17:6c:2e:97:cf:07:d6:8f:35:76:58:88:d4:
                    bd:cb:40:48:c4:c8:80:fc:d5:2b:fa:aa:47:24:ac:
                    40:bb:ef:20:70:b7:75:c2:66:d3:4c:a7:cd:6e:a8:
                    96:ee:52:2a:14:67:34:8d:a3:ac:6e:c2:fb:7b:bc:
                    be:0d:d5:23:7f:1e:aa:25:b7:b4:8e:f3:d1:a6:b0:
                    f8:20:36:1f:8d:e5:4a:65:cf:68:9a:60:e5:32:fe:
                    a8:c7:27:2f:63:25:f2:fa:1d:74:96:34:3c:2d:b4:
                    51:69:4f:46:9d:f4:44:88:2e:92:f8:3e:6a:f4:9d:
                    34:c9:74:da:b1:49:27:76:2b:05:b1:b4:3e:4d:79:
                    b3:1a:95:b1:1b:64:13:7f:4f:16:5b:df:7f:9d:48:
                    5d:fe:bd:34:f1:05:36:db:2c:6b:56:92:c2:c4:1d:
                    28:f1:2f:d8:fb:51:39:98:42:f5:68:66:ad:b5:e0:
                    e4:4c:d2:b3:13:ba:28:58:e2:39:fa:0e:3f:3c:e0:
                    a4:0e:a6:1a:06:f3:6b:13:20:0c:42:6d:ee:2e:ee:
                    74:82:b6:cc:0e:31:20:95:5c:bb:bf:d7:bc:8c:1c:
                    00:c7:78:31:52:bb:ae:ab:5f:aa:f7:fb:3e:3c:3a:
                    1e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A7:85:C6:03:99:8A:82:72:D0:EF:79:08:AB:30:4B:7D:18:A6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/1db45472-9134-3bf8-aa89-4db40eab619e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d9:4b:94:ed:da:bb:68:79:1f:7e:99:16:ff:4c:f8:99:18:
         02:c4:79:be:e6:e8:86:92:e3:78:71:07:36:b1:ae:87:7a:93:
         ab:a5:70:5a:8c:07:51:54:78:fe:73:8b:d7:eb:03:55:18:9f:
         84:b6:09:75:fb:8a:b2:5a:7d:3e:b5:c4:b3:fd:ae:f9:b3:f7:
         49:fb:7b:82:57:b6:50:c7:ce:00:62:c3:54:5a:05:90:c8:d1:
         aa:db:8c:4d:e0:de:25:cd:ad:48:38:72:6e:c8:56:a4:fb:b8:
         74:c3:d9:01:da:6d:24:dd:49:21:6a:63:d7:b7:2a:6b:0a:01:
         2f:b6:43:3f:71:2a:b2:78:9b:3e:b6:b8:c2:30:c9:86:57:71:
         0c:29:61:7d:80:ab:0d:51:c6:8f:a4:44:95:9a:1b:9b:2e:71:
         87:f3:df:09:16:92:6a:37:9e:5e:35:1d:8f:3b:9e:4a:85:a0:
         49:2b:a6:a2:82:70:1a:e0:97:df:d5:b9:f7:da:00:c3:7d:81:
         aa:a8:bc:b5:5e:6b:2e:f9:4c:5e:2f:1e:90:c1:0b:1b:ed:2b:
         2f:9f:82:84:ab:bc:6c:5d:31:2b:bd:19:92:eb:cf:f2:7a:a2:
         ac:6d:82:97:f4:c7:a2:60:70:29:5a:64:73:22:46:e4:1e:70:
         a4:cb:bf:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeooVPIiLIJeX+DxwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3
ZTFhMB4XDTI0MTAyNTEzMDA0MloXDTI1MDEyMzE0MDA0MlowLzEtMCsGA1UEAxMk
OGE3MmI5MDAtZjcwMy00OTVhLTlmOWQtOTlhMDA3NDVjZjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl//ZSMrCWyzsGf3b7ju5exdsLpfPB9aPNXZY
iNS9y0BIxMiA/NUr+qpHJKxAu+8gcLd1wmbTTKfNbqiW7lIqFGc0jaOsbsL7e7y+
DdUjfx6qJbe0jvPRprD4IDYfjeVKZc9ommDlMv6oxycvYyXy+h10ljQ8LbRRaU9G
nfREiC6S+D5q9J00yXTasUkndisFsbQ+TXmzGpWxG2QTf08WW99/nUhd/r008QU2
2yxrVpLCxB0o8S/Y+1E5mEL1aGatteDkTNKzE7ooWOI5+g4/POCkDqYaBvNrEyAM
Qm3uLu50grbMDjEglVy7v9e8jBwAx3gxUruuq1+q9/s+PDoeLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGinhcYDmYqCctDveQirMEt9GKZPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NWRh
ZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMWRiNDU0NzItOTEzNC0z
YmY4LWFhODktNGRiNDBlYWI2MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjVkYWUyYTAtMGNiNy00NmU4LWFl
MTctYWJlYjA2MDA3ZTFhLzY1ZGFlMmEwLTBjYjctNDZlOC1hZTE3LWFiZWIwNjAw
N2UxYS5jcmwwHwYDVR0jBBgwFoAUGkmdi3ejOt8fzU66Ucwao/qj9iUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmVi
MDYwMDdlMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBP40yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADTZS5Tt2rtoeR9+mRb/TPiZGALEeb7m6IaS43hxBzaxrod6k6ulcFqM
B1FUeP5zi9frA1UYn4S2CXX7irJafT61xLP9rvmz90n7e4JXtlDHzgBiw1RaBZDI
0arbjE3g3iXNrUg4cm7IVqT7uHTD2QHabSTdSSFqY9e3KmsKAS+2Qz9xKrJ4mz62
uMIwyYZXcQwpYX2Aqw1Rxo+kRJWaG5sucYfz3wkWkmo3nl41HY87nkqFoEkrpqKC
cBrgl9/VuffaAMN9gaqovLVeay75TF4vHpDBCxvtKy+fgoSrvGxdMSu9GZLrz/J6
oqxtgpf0x6JgcClaZHMiRuQecKTLvx0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:03 2024 by rpki-client on console-ams.rpki-client.org