Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9dd4334e-c87f-3221-b0a5-fb90be0d7f78.roa
File:                     9dd4334e-c87f-3221-b0a5-fb90be0d7f78.roa (raw, json)
Hash identifier:          C8nOoJ7ka42bis2+F0X5QLpwbROhb0F91Y7enkn01BA=
Subject key identifier:   C4:BB:14:6D:E3:56:ED:99:A2:E4:4B:95:4C:32:FB:B5:E8:17:B1:D4
Certificate issuer:       /CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
Certificate serial:       010D0C9F43285845CF6E4310BC000157281979E0
Authority key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9dd4334e-c87f-3221-b0a5-fb90be0d7f78.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     20016
IP address blocks:        63.141.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:43:10:bc:00:01:57:28:19:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=d65e228b-ba27-4d3d-8e46-dcd8c3d0fc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:51:a2:57:66:f2:cd:0f:63:a5:a6:01:5c:93:
                    ca:e4:90:9e:3d:41:30:d4:20:16:f3:81:32:67:4b:
                    d2:0a:21:52:99:d8:9a:7d:c5:b9:64:d0:35:de:a9:
                    5d:88:03:47:28:16:1b:09:a2:a0:68:e0:42:ac:34:
                    ad:1a:fc:c5:d3:e3:6e:f0:d2:89:7c:0a:1b:f2:e7:
                    68:92:99:14:01:f7:d2:34:16:82:95:28:d0:29:0d:
                    c2:b1:20:44:9c:fe:7b:1d:01:21:3b:37:ed:ae:1c:
                    e0:96:f7:5f:de:14:4a:94:d0:64:62:eb:0c:50:41:
                    c0:77:1e:ff:64:8a:cf:5a:29:d0:85:12:ce:89:92:
                    42:96:5a:28:bf:00:ad:0f:ed:d6:20:0f:49:55:45:
                    fd:93:48:08:6a:46:2c:a8:09:d9:df:0f:5a:51:ee:
                    c3:c1:bb:1e:3f:f6:2f:75:37:26:86:02:1b:60:32:
                    6c:fb:98:e5:b2:b6:8d:62:c2:3f:a8:ba:ff:fb:35:
                    6a:98:8c:21:7d:11:98:00:0a:12:6e:7d:a3:a2:7e:
                    f1:ee:a7:8e:88:3a:3e:d1:05:02:ae:df:c8:ec:47:
                    46:6d:b2:d8:23:5d:32:a4:e1:da:32:e4:af:99:78:
                    46:f4:cb:d0:74:de:7b:e8:0f:1a:b7:04:28:b6:9a:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BB:14:6D:E3:56:ED:99:A2:E4:4B:95:4C:32:FB:B5:E8:17:B1:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/9dd4334e-c87f-3221-b0a5-fb90be0d7f78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.crl

            X509v3 Authority Key Identifier:
                keyid:1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.141.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:43:da:49:0f:9c:13:50:f5:b7:8c:8c:4a:f0:63:bb:2f:54:
         b1:70:41:13:26:d1:c3:5a:32:34:b7:3c:09:71:fd:80:db:5e:
         ca:6b:1a:52:49:aa:ef:cd:2d:23:a7:27:da:e7:1a:03:57:bd:
         11:5d:67:77:70:c8:23:3c:42:ec:2a:de:03:bc:9e:7c:c7:11:
         30:f3:97:1c:0a:22:04:2b:41:d2:d6:84:fc:48:07:7b:d0:43:
         0a:8a:e1:06:87:41:68:2f:c6:e9:c5:2f:19:64:7c:4b:7e:c2:
         a6:d5:e8:75:01:d3:a0:fa:6a:e1:03:93:d4:cd:a2:9a:87:5b:
         f3:28:4a:dd:12:da:6c:30:d7:95:e0:d6:88:05:af:95:30:c5:
         aa:01:80:82:ad:eb:14:78:8b:e1:7a:35:08:e0:7a:d9:c6:4e:
         11:ba:a0:a1:55:ff:9a:12:2d:44:88:9a:44:8a:e9:63:8c:dc:
         e2:b7:7c:0b:a8:23:7f:f2:15:97:a9:a0:97:d7:13:12:7a:2f:
         c8:38:41:d7:d9:c0:98:38:18:e3:6d:63:01:9f:95:db:fe:ae:
         c2:f3:4c:18:43:d6:3a:ed:f9:69:df:94:dc:1e:ec:ec:54:90:
         6a:10:0b:98:d8:e6:f6:ea:21:47:34:14:1d:29:34:86:f6:46:
         65:59:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:58:36 2024 by rpki-client on console-ams.rpki-client.org