Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e1603c9-2564-3b93-986c-dfa4f1c4bc23.roa
File:                     4e1603c9-2564-3b93-986c-dfa4f1c4bc23.roa (raw, json)
Hash identifier:          lgb0/RJqZes0lQeZORCyd3I4Emcz61s83S1sa5mQw2U=
Subject key identifier:   19:B5:65:73:C0:48:4C:E0:A0:99:C8:2C:61:B1:66:38:2E:05:38:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285844FE2ACFCDC7151DF4D27D1D20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e1603c9-2564-3b93-986c-dfa4f1c4bc23.roa
Signing time:             Sat 24 Feb 2024 02:00:26 +0000
ROA not before:           Sat 24 Feb 2024 02:00:26 +0000
ROA not after:            Fri 24 May 2024 01:00:26 +0000
asID:                     0
IP address blocks:        63.96.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:fe:2a:cf:cd:c7:15:1d:f4:d2:7d:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Feb 24 02:00:26 2024 GMT
            Not After : May 24 01:00:26 2024 GMT
        Subject: CN=dea18568-b450-457a-8226-479f6c1bb71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:85:c1:b9:41:b5:34:7d:6d:b6:6a:c3:20:
                    16:f2:7c:a7:86:30:51:49:03:ec:04:d7:0c:1b:37:
                    7c:b7:df:aa:01:fc:f8:b6:bf:cc:62:c7:f0:b0:36:
                    3c:73:27:01:d4:58:76:2b:43:d4:42:27:09:0b:8d:
                    df:9d:c8:55:c1:86:86:d2:dc:59:9c:41:d8:39:60:
                    e4:94:11:ee:3d:e6:74:1e:31:6d:1c:d3:25:b5:d8:
                    7b:ce:29:88:0e:e9:f2:0a:31:e6:39:d8:25:cc:b2:
                    ea:2a:c4:c6:5d:0a:05:91:83:7c:c2:3b:ef:3d:0c:
                    e4:66:f4:d5:c5:99:5c:93:70:f3:0f:92:73:ce:10:
                    65:ef:53:3b:20:38:f7:aa:5e:c9:b1:8d:3a:95:3b:
                    18:90:86:d9:11:d9:49:d8:1b:07:c0:dc:8c:46:e1:
                    b3:91:a8:ad:0b:af:ab:a0:49:27:86:49:e0:7f:46:
                    89:1d:19:3b:78:6d:fd:f9:d5:2a:7e:f8:03:5d:c6:
                    51:5d:5a:ec:39:45:53:85:2f:64:aa:1d:d3:8a:a0:
                    da:31:7a:bb:4b:9b:43:d5:ae:28:a0:1f:fb:5e:26:
                    1a:ae:f1:35:e4:1b:00:b2:9f:85:8d:ca:6d:e9:af:
                    24:f0:9d:57:8b:5f:d3:64:e1:2f:c0:e8:4f:f1:e3:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B5:65:73:C0:48:4C:E0:A0:99:C8:2C:61:B1:66:38:2E:05:38:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4e1603c9-2564-3b93-986c-dfa4f1c4bc23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.96.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:d3:2c:6e:c9:62:7e:77:30:b6:a4:23:a4:69:ae:df:d0:8a:
         89:a2:1c:59:41:74:5b:f8:40:49:58:70:3f:69:1c:9c:d3:79:
         4d:c3:07:7c:5d:2a:f3:92:b0:1b:4d:3e:e0:64:5a:97:94:73:
         27:c7:44:f7:a1:13:48:2d:1c:16:21:f5:1f:e3:38:84:83:6d:
         e1:83:3a:a2:93:62:91:e9:5f:64:f5:1e:3a:37:44:a3:7a:2f:
         3a:ba:14:12:5d:dc:06:e1:92:45:74:4d:07:5f:ad:23:b9:0a:
         16:29:e0:ad:0c:ce:3c:3b:b6:26:2f:d4:09:c7:88:32:2c:a5:
         5d:1c:04:dc:67:14:91:0a:98:9b:1a:a8:d4:db:a5:d9:ae:59:
         7b:b2:00:a0:b5:e5:5b:18:49:a0:82:4a:ce:52:66:99:5b:11:
         fe:c6:f2:f0:d3:a4:bb:a9:1a:39:42:f1:ce:71:9d:6c:c3:25:
         1e:b9:f9:1c:20:61:69:e5:7f:25:8c:b5:37:72:a6:68:00:01:
         cf:d4:a2:f6:0b:08:37:c9:cb:88:50:4c:3d:0b:17:59:b3:16:
         79:fd:47:23:d6:e6:c9:95:70:cd:a4:80:7d:0b:c3:e4:57:0a:
         c8:74:55:12:7f:9c:5d:c7:0d:b5:f7:14:c5:43:85:7e:c2:ff:
         e8:13:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:17:14 2024 by rpki-client on console-ams.rpki-client.org