Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa
File:                     99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa (raw, json)
Hash identifier:          YO46EPolwq6jSsZnuOQw3xDBhAWrTS88xsipqR1/SZE=
Subject key identifier:   12:71:C6:5E:21:6E:3A:7A:4C:63:A9:E3:8F:E8:22:72:62:1E:83:B5
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858450EEACE94C82E70706AAEF480
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     16509
IP address blocks:        162.250.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:ce:94:c8:2e:70:70:6a:ae:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=f18eb04d-8536-4695-9387-1c7656e3aa99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:84:31:c8:83:d3:17:35:73:69:5c:3d:5f:7b:
                    6b:ec:4c:95:eb:d5:12:57:2e:1b:5d:a0:d1:cb:7e:
                    ba:93:6e:aa:c2:9c:8d:8e:55:10:eb:33:d5:7c:bb:
                    e0:10:36:59:37:e9:30:f6:1c:15:fd:92:28:f4:ab:
                    38:8d:95:b5:77:00:cd:41:77:e1:f5:47:e2:fe:b1:
                    0b:c2:81:9c:9a:af:9e:4d:42:13:1c:48:62:01:d3:
                    f7:63:1d:f6:4f:66:65:ea:3d:e3:92:e7:7a:8a:0e:
                    dc:9f:5b:70:96:93:0e:39:4f:87:c0:62:9d:4b:d9:
                    b9:99:35:c5:fa:b4:e8:96:ca:be:8e:33:25:1b:ef:
                    29:6d:62:69:38:16:40:d3:a3:be:c1:64:a9:68:b9:
                    c3:29:a8:52:c1:2b:ea:9c:d3:6c:cd:86:8f:2f:3e:
                    5d:ef:88:6d:5a:fa:58:7e:b0:81:81:56:ea:53:25:
                    af:7f:e1:59:1d:80:4d:ee:61:e6:d0:26:d6:cc:37:
                    3d:31:04:f6:ae:95:8a:f4:9b:be:ff:76:7a:58:61:
                    8c:7d:23:d6:db:ea:09:59:25:d3:1e:c9:b4:8b:db:
                    53:36:64:d1:83:63:a8:0d:d9:89:0b:f0:31:28:e2:
                    2d:e0:21:9e:bd:dc:cd:0e:a3:ea:22:83:90:e2:8d:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:71:C6:5E:21:6E:3A:7A:4C:63:A9:E3:8F:E8:22:72:62:1E:83:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ce:81:79:e2:c6:db:37:cc:e9:14:8d:41:8c:1a:bd:40:39:
         fa:50:96:b5:39:c8:e0:e5:c9:cd:01:27:3b:b7:3f:f7:d7:07:
         a6:76:4c:dd:67:cb:c9:7a:f1:14:24:d4:53:5f:a4:88:09:5c:
         45:0c:e7:aa:a3:93:23:7c:ed:95:88:83:9c:24:93:0b:67:c9:
         76:2a:6f:8e:d1:33:b2:44:b6:da:7b:60:15:38:27:46:d2:6e:
         bc:d8:37:f2:45:83:9d:c3:81:de:93:47:3b:59:cc:e8:19:68:
         2a:c8:32:6b:6a:a2:4a:11:b8:99:bf:57:de:19:6d:13:39:0c:
         3f:02:95:ed:40:61:23:e8:c9:1f:35:9a:f1:25:ea:72:09:fe:
         d8:8f:5e:9d:23:93:60:75:27:3d:27:82:95:59:46:ba:ef:a4:
         25:4e:f1:a7:96:88:b2:7b:20:73:f9:b0:cd:f2:8e:67:8e:d8:
         07:60:0b:7a:b6:31:e1:64:3e:9a:0a:b4:14:31:ae:2b:a2:97:
         cc:c0:3a:84:e5:38:4c:cd:ff:51:85:d8:cf:69:1c:48:e5:f7:
         06:05:e3:ed:d8:3c:e7:42:42:46:7d:c4:43:2f:43:dd:57:26:
         18:d7:d4:5a:3e:be:89:67:b9:8d:d7:f4:de:57:2e:c2:c4:69:
         63:fd:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:32:01 2024 by rpki-client on console-ams.rpki-client.org