Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7597831-f947-398e-80d2-2b512db5c664.roa
File:                     f7597831-f947-398e-80d2-2b512db5c664.roa (raw, json)
Hash identifier:          Vtiu17diO1WUEtf79uzxLtXLJOpJG+R6q/CZet2yS8o=
Subject key identifier:   BF:AF:14:21:22:9E:04:D1:7E:40:B8:F5:37:BF:7A:48:64:0F:DD:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584789EBCC4F81290281B00BB600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7597831-f947-398e-80d2-2b512db5c664.roa
Signing time:             Mon 14 Oct 2024 13:00:47 +0000
ROA not before:           Mon 14 Oct 2024 13:00:47 +0000
ROA not after:            Sun 12 Jan 2025 14:00:47 +0000
asID:                     6167
IP address blocks:        63.40.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:89:eb:cc:4f:81:29:02:81:b0:0b:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 14 13:00:47 2024 GMT
            Not After : Jan 12 14:00:47 2025 GMT
        Subject: CN=ffeb5172-a203-4d2b-b88d-effe6a20c652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f3:9d:a1:fc:50:a7:16:71:99:bf:eb:93:18:
                    7e:5e:cf:ce:a3:5e:cc:c2:02:0d:d3:ce:42:09:90:
                    5d:77:5d:33:9a:4c:46:8a:c2:2a:61:34:d0:e3:66:
                    d2:fb:b2:bf:c9:12:c2:22:7e:90:a3:69:96:cc:49:
                    f3:65:32:9b:ae:f8:45:88:28:0e:22:78:39:82:f4:
                    70:e7:1c:7b:2c:4f:c1:85:de:c3:23:3a:f0:10:92:
                    24:9e:62:01:f7:e5:62:a7:75:cd:33:60:8a:df:59:
                    c3:c3:b7:3d:82:e8:04:e8:42:de:02:1b:43:14:51:
                    44:5c:20:b3:29:23:fe:47:91:57:fc:90:ab:a9:d0:
                    36:96:63:a3:6d:fd:e3:5e:43:b3:ea:d2:47:7e:67:
                    ed:2c:da:66:9b:65:fc:de:42:47:43:06:d9:1e:35:
                    a8:d9:f2:9e:13:ef:18:36:ef:e4:2b:94:5f:d7:36:
                    51:d8:6c:68:21:3f:19:c3:71:b5:c2:f8:66:56:e5:
                    48:10:e2:2c:a8:e1:61:ae:02:6a:6b:cf:cf:b9:e2:
                    02:3c:2c:23:73:c1:d6:ac:11:45:21:cc:40:02:c8:
                    2f:73:31:74:42:b3:e3:b2:c3:81:8b:47:41:7e:41:
                    6e:b9:9b:1c:80:76:14:83:da:18:8a:e4:8e:55:c1:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:14:21:22:9E:04:D1:7E:40:B8:F5:37:BF:7A:48:64:0F:DD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7597831-f947-398e-80d2-2b512db5c664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.40.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:6b:49:1c:ff:03:14:c7:57:72:d7:bb:04:38:14:a2:89:ac:
         15:de:06:8d:f4:00:99:28:22:8a:8f:4b:9a:db:34:f2:47:ed:
         08:e1:9b:c2:81:5f:e3:99:fd:4a:ae:e6:72:c0:a8:64:a9:bc:
         fc:13:04:6b:d9:87:95:68:d4:ce:f7:46:76:91:b5:82:0b:c4:
         85:61:c0:12:07:c2:ee:b2:28:a6:16:77:70:ca:17:05:df:4f:
         e0:a2:8f:f9:21:e6:20:7c:55:3e:0c:48:e1:0b:18:04:ef:71:
         91:c1:4c:d7:95:5a:3a:60:c7:f4:3e:08:07:f5:f6:4c:a1:bc:
         77:8b:27:cd:d6:c4:e3:f6:69:14:50:1f:fd:91:20:80:15:e8:
         b3:d0:9f:02:cf:cb:52:a5:e2:fc:f5:50:86:6d:c2:16:06:7a:
         40:04:ee:2d:1d:78:f6:ae:8d:7b:a3:44:90:c0:54:04:4a:57:
         e7:5f:86:a5:64:65:c2:d7:44:c6:98:98:87:4b:e4:41:30:8b:
         ce:d9:59:ef:83:50:e7:4b:18:b8:ba:d1:a5:48:6b:b6:80:e6:
         d5:d7:10:7b:90:bf:e4:cc:f7:f5:87:95:6a:93:a9:5e:5f:db:
         f6:53:be:6b:13:5d:36:38:7b:3b:cf:67:87:fd:83:57:2f:3b:
         0e:17:6b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:02 2024 by rpki-client on console-fra.rpki-client.org