Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f016bca1-53a2-37fd-8f6d-4cca78c34f70.roa
File:                     f016bca1-53a2-37fd-8f6d-4cca78c34f70.roa (raw, json)
Hash identifier:          BxdlLndwZRpUZgdz6pmeG33fMW9InW7AzZT+LymBoTw=
Subject key identifier:   5D:3A:C7:55:A1:24:5A:F0:FC:01:FE:63:85:B4:14:DF:66:3B:2F:D0
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBEE86C4656F3B184F9440
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f016bca1-53a2-37fd-8f6d-4cca78c34f70.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     701
IP address blocks:        63.48.0.0/12 maxlen: 12

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:ee:86:c4:65:6f:3b:18:4f:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=2af70de8-935a-49c1-9e40-4cf25106e6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d5:2b:b8:b8:76:38:16:f0:89:e3:4f:f2:9b:
                    96:a6:e6:54:37:bc:1c:23:0b:6f:ad:27:07:35:52:
                    2a:bf:ad:5a:8e:8b:18:85:00:fb:f7:51:e4:0d:cc:
                    c7:d9:ff:80:cb:16:7e:31:bb:da:7c:64:2b:a0:1f:
                    ed:fd:9f:b7:c3:ed:ef:41:d9:a6:ed:9e:bb:cd:37:
                    3b:9d:40:f9:f7:a9:32:3d:c9:32:19:e4:e0:a3:4c:
                    d0:15:a9:84:1c:f1:e7:03:23:1e:f1:a7:e8:8a:33:
                    6f:2e:99:60:c7:4c:59:0e:31:03:f6:66:71:c2:98:
                    b9:18:f8:b3:27:64:36:59:29:48:e3:3d:b5:b6:9c:
                    f4:98:a3:c2:2a:f8:ca:ed:d4:c9:37:db:b5:36:f6:
                    73:50:72:35:f3:15:40:c7:4c:8c:3a:bc:c4:5b:99:
                    d2:29:ea:11:85:64:1a:38:b7:0a:d7:b6:ca:d2:0e:
                    da:c0:21:1e:72:4f:1c:06:5c:1b:d2:e7:0e:81:25:
                    11:51:bd:5d:cb:d2:88:bc:25:39:37:3d:74:1f:1f:
                    a3:ea:cf:73:95:99:14:fc:e5:8b:66:cd:6e:a7:66:
                    f8:11:b0:4a:2f:8d:e5:b3:ee:2e:da:40:d2:5b:84:
                    a5:3a:ab:53:dc:36:b3:f2:ac:e4:46:a1:f0:0f:a7:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3A:C7:55:A1:24:5A:F0:FC:01:FE:63:85:B4:14:DF:66:3B:2F:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f016bca1-53a2-37fd-8f6d-4cca78c34f70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.48.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:84:bd:c9:23:d6:f0:7c:6e:4c:69:a2:fe:82:d7:6e:8b:a7:
         e9:35:73:9a:db:73:cc:d6:9f:85:2a:01:04:9d:57:f1:41:54:
         e7:ad:3e:5d:2b:02:33:e8:d7:cf:60:e4:92:58:1d:06:87:3e:
         44:16:bd:33:f4:e0:a4:6c:c1:af:fb:6b:9b:36:2e:bb:d7:e5:
         9f:c7:c8:38:3d:65:1a:5c:bd:86:63:9e:25:f7:82:40:a9:2d:
         5a:af:71:e7:b0:39:6d:bd:5c:0f:07:a0:35:76:88:38:1f:78:
         04:96:ea:f8:5d:c0:16:8d:96:22:20:a2:7e:b9:8c:0a:08:17:
         43:b5:ae:7f:3b:e3:71:23:b8:95:d2:d4:4e:df:a3:1f:a1:cb:
         b9:39:17:fd:2c:77:96:ca:c3:df:85:d4:b6:60:5c:a7:8e:fa:
         6e:f9:14:c8:0d:68:17:a7:9c:af:bc:42:11:2a:05:c3:40:57:
         df:34:cd:d2:e8:39:e7:5a:1b:c2:1f:84:82:c0:fa:83:52:11:
         1d:29:44:71:2b:81:26:e7:fd:27:68:4a:8a:89:17:7c:03:61:
         f1:79:d1:e6:07:9d:fb:22:bd:74:d4:f3:d1:71:e2:f4:9a:ec:
         67:25:54:ad:92:ea:ce:ca:00:06:46:3f:d4:ad:d0:bc:ad:83:
         a7:10:e8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:01 2024 by rpki-client on console-fra.rpki-client.org