Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6c5bb5da-e510-3e29-a83b-47f8ff8d0add.roa
File:                     6c5bb5da-e510-3e29-a83b-47f8ff8d0add.roa (raw, json)
Hash identifier:          caf/p1b9hnr7VRlnxtXBGewxUNKJJoj8+ukbGTszmwo=
Subject key identifier:   BA:8C:AD:CC:D8:20:9B:67:DD:E2:FA:65:6C:59:BB:97:B4:97:50:C0
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845174AD9ABEA8F0642EFEB0B00
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6c5bb5da-e510-3e29-a83b-47f8ff8d0add.roa
Signing time:             Mon 04 Mar 2024 02:00:26 +0000
ROA not before:           Mon 04 Mar 2024 02:00:26 +0000
ROA not after:            Sun 02 Jun 2024 01:00:26 +0000
asID:                     262287
IP address blocks:        63.141.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:17:4a:d9:ab:ea:8f:06:42:ef:eb:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: Mar  4 02:00:26 2024 GMT
            Not After : Jun  2 01:00:26 2024 GMT
        Subject: CN=c7ca674d-92c4-47d6-abfc-a3aead15c7b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:15:5f:7a:42:0b:68:98:71:74:f4:f7:d8:0b:
                    7a:8d:40:8f:bb:85:36:aa:a8:1a:80:c2:3c:88:f0:
                    d9:05:80:46:2e:55:f3:0c:04:5b:04:99:b5:02:d8:
                    54:fe:48:df:78:48:ab:89:dc:ac:c4:f0:7c:f9:0d:
                    27:59:ba:dd:6c:fd:13:84:49:21:df:5a:b1:10:f0:
                    21:8d:b0:c8:70:4e:a7:14:d0:73:5a:89:68:eb:8f:
                    79:f4:23:9c:08:17:5f:a7:cc:3d:6e:b0:d2:2b:d1:
                    5c:15:48:7c:c0:ad:2b:bc:fd:fa:49:b8:d6:6e:a9:
                    37:83:5b:bc:04:f0:90:f4:3f:81:2a:fa:e4:cd:9e:
                    b0:a5:9c:c7:85:ef:d1:f8:69:a2:11:d4:e2:d3:a2:
                    4a:cc:18:bd:e9:13:0e:08:5f:b6:15:30:a8:74:5f:
                    ac:04:43:5c:b1:f2:79:d9:62:c2:52:17:ea:c1:d4:
                    7d:8a:e1:eb:61:59:e6:b2:85:cb:98:58:97:5f:45:
                    9c:9e:c4:81:bc:01:f0:44:c3:c3:00:72:e1:8d:89:
                    d2:81:ef:3b:7b:63:6f:de:a6:c5:93:2e:06:db:b0:
                    a4:9f:b7:b4:49:e3:cb:11:9d:fc:bf:9b:35:d0:e8:
                    2a:05:89:41:a0:9e:88:2b:4f:9e:f6:5b:94:69:70:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:AD:CC:D8:20:9B:67:DD:E2:FA:65:6C:59:BB:97:B4:97:50:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/6c5bb5da-e510-3e29-a83b-47f8ff8d0add.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:de:e3:d2:0f:b3:ab:13:11:c2:25:ca:e6:82:2a:1f:c5:97:
         27:99:b1:e5:56:d2:50:2a:4a:c8:70:05:bc:21:e7:a1:e4:de:
         10:95:e6:c0:a7:f2:90:4a:c6:bd:95:af:ff:79:fa:9a:79:c0:
         78:92:55:1a:55:9b:8d:f1:5b:77:4c:db:24:23:91:86:3e:77:
         ac:35:70:2d:a3:a9:da:08:cc:22:19:11:57:c4:78:b0:00:fb:
         70:7f:fa:d4:43:dd:9d:db:f1:71:5f:f0:e7:9a:e2:7f:07:d3:
         c5:fc:db:2d:80:43:63:9b:41:e9:b7:8d:00:5b:e4:44:65:93:
         49:24:6e:96:43:b7:85:30:7c:22:2d:df:e8:c3:73:37:88:bb:
         ca:9e:68:cb:41:78:27:ce:99:5d:a6:bb:9a:e8:15:a2:fd:9b:
         76:49:a2:2c:16:58:12:7e:18:a1:15:c0:36:be:a3:39:67:a8:
         be:0e:b0:71:3c:6f:ff:e0:5d:59:56:ff:68:0e:28:f8:9d:86:
         4a:ea:20:ce:d6:2e:34:c9:4e:f5:ca:ed:cc:44:09:44:bd:d9:
         5b:19:ba:61:48:cb:fc:fe:28:4e:ff:84:06:d3:6b:5c:dc:27:
         60:c0:ad:0b:14:b7:46:34:a4:ed:14:fc:58:44:00:86:d1:47:
         8f:13:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:28:11 2024 by rpki-client on console-fra.rpki-client.org