Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa
File:                     214835ae-18bb-3319-b20f-9ee257da4f6e.roa (raw, json)
Hash identifier:          SyrA+w1LVWdO6dGFuu8yk1zojMXbFaPO5ufXG7mLXuY=
Subject key identifier:   CE:B4:39:F6:A8:29:AF:6B:B7:70:D9:FE:5B:21:94:E4:8A:81:FA:AB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C63D87CD99ABD4290C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     701
IP address blocks:        63.80.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c6:3d:87:cd:99:ab:d4:29:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=89cf2e15-227d-46ae-a769-ae67121faadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:19:1d:d6:10:d7:5a:b3:9d:27:7c:e3:47:9d:
                    a9:cb:ed:ab:69:d4:b7:1f:33:da:59:8b:f6:40:df:
                    9f:42:03:b4:b5:ef:ee:94:e9:28:65:c4:ef:74:9f:
                    06:3a:86:36:d3:bd:62:52:e7:63:f7:16:cc:63:aa:
                    73:75:d1:5d:9e:a3:48:30:80:be:38:97:0d:7b:94:
                    92:3e:09:70:c8:c6:4e:ae:3a:c0:29:88:a2:29:2d:
                    85:7c:02:58:d0:3c:8c:34:17:e2:29:67:7e:ca:2b:
                    e6:3d:6d:60:e8:3d:37:41:61:65:a9:96:bd:3a:54:
                    36:69:d2:12:fd:8e:14:2d:65:ea:1f:87:12:3b:2d:
                    35:13:59:9c:92:ad:df:cd:1d:07:3f:ad:66:81:da:
                    08:89:ed:1c:75:8e:72:8a:ad:4a:08:4b:d1:a7:39:
                    ea:0c:d1:ed:37:cb:51:29:39:80:db:8e:a1:b9:6e:
                    47:92:2e:1d:79:25:3d:3f:f1:a6:33:b3:bb:d1:be:
                    f2:7f:1d:6e:14:22:86:86:0a:f9:5b:13:aa:a8:dc:
                    cb:20:b2:98:fa:56:83:59:a8:fd:bb:09:4e:fc:20:
                    fa:bd:46:f5:cc:d0:d0:ad:ea:da:8f:68:46:41:12:
                    a8:d5:62:d1:f7:2b:48:8a:b5:7e:35:79:48:15:a4:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B4:39:F6:A8:29:AF:6B:B7:70:D9:FE:5B:21:94:E4:8A:81:FA:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/214835ae-18bb-3319-b20f-9ee257da4f6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.80.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:9a:69:eb:53:38:21:36:a5:39:06:cc:1a:bb:91:f9:96:c1:
         47:e0:77:77:38:91:b3:e0:3a:cd:16:6e:d6:3b:1e:14:fd:b1:
         c5:a0:42:d4:f4:38:63:62:30:c4:00:de:4d:bd:7d:ba:d1:88:
         c6:27:ac:51:9a:a1:a0:3c:f2:18:97:07:39:cd:59:60:4c:fc:
         4a:79:8e:17:2f:55:ec:fa:8c:db:74:f5:9a:49:7c:62:d9:de:
         25:56:17:82:6c:b6:7a:f7:27:39:6c:ae:cd:aa:08:fb:bd:b1:
         5b:98:12:53:72:33:c1:d5:e3:9a:97:1e:26:ce:24:52:67:f7:
         3c:00:08:bc:51:19:49:2d:90:d2:a0:0c:3d:e8:01:3b:ad:6e:
         4e:bd:71:19:ad:58:8d:47:91:b8:0b:df:d0:6a:51:46:d7:5f:
         b2:2a:ff:a6:c1:0e:ea:ee:e5:09:3d:eb:10:c3:e4:b7:4f:cc:
         ad:2c:ff:3e:a6:14:08:76:02:14:03:42:5b:bc:69:3f:ae:62:
         bb:ea:45:eb:db:21:f1:61:42:61:2c:1e:cb:c9:7e:b0:44:29:
         70:93:5d:5f:25:fe:d3:ad:c5:95:08:eb:5e:a2:cf:b9:7c:9c:
         6a:88:57:39:05:dd:0f:04:30:0d:c6:29:52:94:bb:5c:bb:89:
         c7:d6:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:15 2024 by rpki-client on console-ams.rpki-client.org