Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed81804e-c162-3d32-9433-8c60be2d89ab.roa
File:                     ed81804e-c162-3d32-9433-8c60be2d89ab.roa (raw, json)
Hash identifier:          /0jVx0Qq+rXQwAN9+fYTQHeAmhgE6kESOLPGylz5ecY=
Subject key identifier:   2F:65:3C:25:48:95:82:6E:05:5D:84:04:80:98:82:09:B3:7F:59:8E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBCDE2D478A10D957F9800
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed81804e-c162-3d32-9433-8c60be2d89ab.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        63.47.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:cd:e2:d4:78:a1:0d:95:7f:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=2bfea271-6c06-4dcf-b408-df072be8806b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ea:a5:7f:58:08:90:ae:79:27:c0:24:8e:89:
                    c0:36:a5:1a:b6:11:ca:f8:9e:34:08:2f:47:5c:37:
                    4c:bc:73:39:9e:7b:17:62:a6:73:64:51:79:ab:61:
                    ec:7c:0a:50:77:e8:9f:f2:7a:a0:96:c6:b3:de:13:
                    41:64:1e:8e:69:b0:29:cc:36:80:c0:5c:95:27:5d:
                    52:8b:c7:72:61:97:9e:ba:31:17:05:47:8a:f5:e6:
                    93:f8:1e:0c:df:5e:08:69:80:6d:61:1f:b0:b8:dd:
                    0e:bb:df:cc:3c:0b:f1:ce:9b:0b:86:f3:25:00:09:
                    36:9b:ff:b0:b9:f5:ed:8c:d5:ee:02:a7:93:5e:6d:
                    7f:32:ae:78:21:52:72:34:8b:71:ab:40:36:68:36:
                    31:f4:86:9f:54:4e:fc:c1:cf:b9:a4:7b:67:6d:16:
                    f2:1b:8e:3f:77:97:38:c5:8f:93:98:34:d7:20:8c:
                    29:d0:6d:a8:0e:fe:8f:d5:6f:3a:c3:d4:5b:3d:dc:
                    2a:33:73:b5:a8:55:8f:fc:2e:3c:7f:73:4e:2b:09:
                    6e:04:57:21:9d:14:4f:c2:94:e3:af:71:75:e9:e7:
                    bf:aa:5b:d5:f7:aa:ff:81:fb:71:a0:47:51:8b:a3:
                    ff:2a:39:37:ea:64:d1:0c:69:e7:fe:71:69:64:05:
                    52:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:65:3C:25:48:95:82:6E:05:5D:84:04:80:98:82:09:B3:7F:59:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ed81804e-c162-3d32-9433-8c60be2d89ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.47.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:2f:a3:98:c3:61:77:2b:4c:5f:9a:48:aa:df:42:5d:e6:7e:
         6a:56:a9:05:68:b3:f6:47:fb:d7:7e:ea:e7:50:3d:00:44:74:
         4a:94:ef:11:e3:d5:63:1f:f0:96:90:cd:1a:fd:ea:8b:25:ad:
         ee:8b:92:5a:17:f3:5b:72:ff:70:ff:07:f7:1f:b5:69:74:89:
         43:27:1a:0a:96:5e:56:bd:97:e4:bb:eb:81:20:5e:20:6d:43:
         14:0a:d9:15:91:37:e8:ba:03:8c:69:09:39:7c:8e:57:af:3b:
         6b:f4:da:82:ea:7e:cf:cc:dc:8e:99:a8:82:c5:a1:cf:0e:ab:
         4d:ea:68:4f:c5:cb:45:d0:0f:84:5e:05:ba:1c:d4:06:2f:0f:
         2e:e0:87:f2:5a:c0:2e:c2:f5:20:f9:eb:49:ed:1e:ae:03:23:
         ce:7c:a9:b1:18:52:fa:db:b9:72:d0:89:1a:c5:5f:fd:e8:ca:
         0e:ee:5c:2c:3e:c4:e7:f9:f2:d3:04:0a:13:61:2d:24:3f:e3:
         df:77:f7:b6:cf:e3:ee:bd:ce:49:5b:ea:c2:93:bb:53:6d:f6:
         b1:e0:2c:47:87:db:9d:e2:8d:b5:83:5b:54:58:d5:42:14:2c:
         e6:54:50:2c:7d:cf:a1:15:9c:0a:ab:6f:90:29:dd:fd:dd:e3:
         79:f7:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:41:57 2024 by rpki-client on console-ams.rpki-client.org