Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa
File:                     99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa (raw, json)
Hash identifier:          DdLTnDf0zvuKwunSPxrc9OPT7eGd/t1B5YHGICr6Dxg=
Subject key identifier:   FF:9F:C5:F6:56:CF:DB:82:E9:85:41:A8:3C:E7:53:A4:BD:CD:30:9A
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285847AE36B283A099A2C872F7CE00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        162.250.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:b2:83:a0:99:a2:c8:72:f7:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=c1b228c0-ff69-469b-811f-6050fe2e3a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4b:c7:25:2b:c5:d2:f4:a1:48:0e:bb:76:69:
                    51:32:cf:72:13:d8:1a:ad:7a:3e:87:44:8d:78:4d:
                    1e:4d:a0:27:b9:d8:91:ad:69:17:31:b9:56:16:dd:
                    01:4b:df:fb:fb:7e:17:f7:9e:33:68:a9:06:69:7a:
                    23:50:ee:ef:93:94:37:2f:1b:a6:34:f9:21:dc:41:
                    1c:38:23:0d:e9:b1:69:56:52:01:14:b0:d6:cb:1b:
                    2f:33:34:46:11:e3:ab:35:92:66:07:7b:26:9d:b0:
                    94:74:18:cb:ec:1a:9b:ff:1d:c3:6a:8e:56:5f:c0:
                    55:9d:d9:38:1f:ab:91:c3:20:46:c0:5c:db:c9:d1:
                    41:84:c5:8e:5f:04:43:c9:10:af:3f:92:1f:f2:60:
                    f3:a2:8b:75:3c:7b:9b:c8:4c:d0:44:62:4d:7a:87:
                    f5:b6:5d:ce:6b:49:4b:49:88:88:f6:66:37:49:26:
                    e8:6e:c0:a4:9a:c6:b7:b9:77:11:b4:2b:e2:7e:57:
                    54:0b:21:72:d9:6b:05:51:46:0c:62:93:88:2d:d4:
                    13:5c:3e:fa:75:92:21:08:eb:b0:45:bf:69:dc:ee:
                    e0:f8:39:ed:e8:5b:5f:c4:32:8e:75:30:97:46:ec:
                    82:a4:06:f8:45:8d:a5:c7:33:39:27:3b:97:0a:37:
                    1b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9F:C5:F6:56:CF:DB:82:E9:85:41:A8:3C:E7:53:A4:BD:CD:30:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/99bbd78a-0a1a-39cc-8494-57663d0c2a72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:0a:e8:c2:0a:af:cc:d0:f5:9b:2d:93:32:4e:f7:83:76:fe:
         6d:1f:42:b6:84:18:de:da:ec:7d:20:b5:9b:33:d3:4e:13:e0:
         25:22:4a:93:eb:67:de:dc:19:4e:14:28:a7:59:d3:f4:22:4b:
         42:07:5c:c4:29:31:67:cb:6f:dc:91:2d:60:e1:fd:af:d4:14:
         a7:c7:fc:11:b8:b5:7a:d4:2d:16:99:00:bf:2d:98:e0:97:13:
         ce:81:ea:70:45:11:2a:df:b1:cb:55:a4:90:c2:3a:0d:c2:02:
         f5:6e:88:36:3d:06:13:1c:33:f9:ac:5c:6c:27:35:27:c2:13:
         f1:6d:8a:a8:09:91:04:cc:39:a9:24:95:c4:ee:39:d3:a0:3d:
         8a:67:03:a2:b1:d1:79:8f:f6:f0:56:5f:5d:ed:d8:bc:4f:eb:
         61:b4:c2:61:f9:8e:c8:11:16:20:3f:34:e2:55:08:82:e4:1a:
         05:9e:6c:18:e4:9e:6c:22:cb:b3:03:87:3b:87:c6:46:aa:5a:
         ae:98:7c:f5:84:94:f2:44:87:46:82:ef:d3:16:32:ff:ed:f6:
         5e:ad:c2:b1:4f:a0:57:bd:e9:8b:ae:ea:ff:26:b7:98:28:51:
         e1:eb:38:a5:8a:30:7a:ed:69:d9:5e:5d:7f:29:01:28:e0:19:
         10:bb:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:12:08 2024 by rpki-client on console-ams.rpki-client.org