Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa
File:                     28347c3e-bfce-3db1-967c-22fbb4496455.roa (raw, json)
Hash identifier:          r8xJRvQ7tt4HU2Bv6HHyVsnb4famBjuwko9QNf946I8=
Subject key identifier:   F2:77:26:C5:60:BF:F6:95:46:C5:0A:CD:D1:31:41:B1:BA:20:E9:5C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858479D76C01629F83905058CD500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     14717
IP address blocks:        63.89.226.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:c0:16:29:f8:39:05:05:8c:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=1f0a6b32-6f72-47cc-8175-b61f2e7739a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:bb:27:bd:8a:ca:75:0f:ef:70:4c:cd:a9:
                    e7:28:4f:e8:69:8e:c8:cc:59:ea:f6:53:7e:e7:7b:
                    9f:97:bc:ac:28:29:6c:dd:3f:42:e9:59:91:d7:b8:
                    27:18:b3:d5:b9:d6:f7:b9:48:04:2e:c7:92:ed:48:
                    83:24:5e:92:a5:a2:66:62:40:de:2d:ab:62:42:44:
                    7c:b3:2b:87:20:6e:b4:10:7d:33:f3:bd:23:59:70:
                    b6:6c:e3:00:ec:16:67:b9:10:6c:be:55:52:60:2f:
                    12:66:24:f9:83:f9:2b:91:2d:01:23:f2:6f:9a:bd:
                    e5:c5:14:25:9e:2e:16:ce:92:a7:a4:c5:10:22:43:
                    e5:8f:8b:4c:48:bb:ce:bd:ae:59:99:06:f1:ec:50:
                    aa:6d:01:e3:11:e7:06:e2:07:52:24:58:56:dc:4a:
                    4a:31:6d:41:dc:57:c7:a0:b0:69:df:c1:8e:fa:4f:
                    73:42:4c:5d:71:1e:d4:88:38:64:7f:f4:39:e6:17:
                    aa:cd:b9:d4:2c:a6:12:74:c1:96:33:ad:c5:f4:c0:
                    1e:33:a9:da:fc:b2:f9:29:4c:34:24:f3:74:18:b8:
                    28:a5:cc:5b:a0:88:ab:f5:39:a1:cb:f4:dc:8a:fb:
                    62:6b:32:29:2a:7e:f6:06:36:79:a7:1a:4d:93:16:
                    68:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:26:C5:60:BF:F6:95:46:C5:0A:CD:D1:31:41:B1:BA:20:E9:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/28347c3e-bfce-3db1-967c-22fbb4496455.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.89.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fb:d9:cd:0c:c3:3c:e4:5a:0f:01:53:99:6f:86:02:8d:bd:
         22:c3:58:f6:c0:1a:4d:0b:04:41:ca:82:49:cb:dc:c2:ee:80:
         e0:ee:93:ef:fa:ae:3e:f7:15:6c:30:1d:02:70:87:2b:b7:17:
         9b:90:72:29:db:ff:04:34:c0:aa:60:ee:56:0d:92:33:85:36:
         3f:26:21:1e:12:8e:37:b5:8d:91:3a:5e:0c:43:57:a8:58:0a:
         13:fd:96:44:2b:22:bc:f8:d4:65:ec:2e:68:8b:f5:7a:03:eb:
         c1:7a:90:67:09:64:b9:5f:50:c7:4b:51:ec:04:d5:6a:9e:6f:
         b6:fa:8b:17:21:50:55:ad:fe:3e:5d:a0:cf:9b:9e:e2:e2:c2:
         64:77:31:5a:a4:8d:cd:a6:1d:55:1a:7d:84:eb:72:10:29:e6:
         9e:61:67:57:da:e2:f7:24:ba:95:0d:90:58:a7:97:10:d6:c4:
         78:6a:3e:ef:be:89:e4:6f:66:1c:92:8f:94:2f:f9:8d:9c:c8:
         b5:d9:98:c6:17:cf:3b:6d:3d:de:82:a7:d4:d5:c3:78:33:ff:
         a8:59:cb:8d:20:ee:7c:a6:a9:7b:45:6b:e8:97:b4:5d:6f:00:
         25:f7:64:e4:62:b9:eb:be:2a:cd:77:36:52:2a:d7:b5:97:2c:
         03:32:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:39:21 2024 by rpki-client on console-fra.rpki-client.org