Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa
File:                     b441ed8b-6937-348e-bc75-12a5785f2020.roa (raw, json)
Hash identifier:          Qv2m11/L5X3Dg5eHXgNUzKAVDLUfPs0IQK3IFdbnYmw=
Subject key identifier:   0E:37:B8:EC:71:4E:6E:E8:57:C2:C5:01:5B:8D:00:9B:0E:4C:CF:7D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285845DD63A392CD41683CC02E9FC0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa
Signing time:             Tue 14 May 2024 01:00:24 +0000
ROA not before:           Tue 14 May 2024 01:00:24 +0000
ROA not after:            Mon 12 Aug 2024 01:00:24 +0000
asID:                     55044
IP address blocks:        65.125.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:dd:63:a3:92:cd:41:68:3c:c0:2e:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: May 14 01:00:24 2024 GMT
            Not After : Aug 12 01:00:24 2024 GMT
        Subject: CN=1b433c0f-f244-4c8d-838b-7d60ce27a354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a9:b7:4c:9a:e7:ec:85:18:58:0f:6f:9c:d0:
                    f9:71:40:17:af:b2:00:66:c2:20:b6:ec:8d:a8:1d:
                    e8:8f:75:4a:df:e6:32:f1:10:c7:58:f0:b9:ca:67:
                    50:82:26:25:aa:3a:3f:11:ca:30:98:a1:66:ba:01:
                    05:54:de:4a:3d:e2:b5:48:0d:1a:02:5e:b2:f6:39:
                    f5:4a:40:e0:09:ea:44:da:a5:ff:86:de:ce:03:4f:
                    e3:18:67:b4:90:fa:91:8a:d5:67:3b:72:84:10:8d:
                    de:ce:96:3b:b6:96:17:0b:cc:53:56:af:7b:66:df:
                    0f:fa:16:48:5a:9e:cd:3f:ae:c4:36:e2:a4:24:ae:
                    d3:9d:24:e5:d8:55:01:1c:41:bc:79:d5:f3:12:a5:
                    2c:40:c8:ca:11:2d:eb:9e:a5:83:26:78:e2:6c:1c:
                    fb:af:b0:55:33:b9:7a:35:ba:14:e3:3b:ee:0e:fe:
                    39:ce:72:16:43:37:c3:aa:4b:a1:6e:fc:86:d7:21:
                    80:df:b0:12:9d:21:79:47:6c:45:5d:c5:d0:1a:bd:
                    dc:d1:e7:9c:7e:d7:e8:2d:05:30:d4:82:c9:41:e8:
                    6f:8a:d9:d0:2b:f4:c4:7d:88:8c:bd:79:f3:be:51:
                    1c:c6:20:8c:84:7b:03:e6:c3:5b:0a:61:e4:93:85:
                    57:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:37:B8:EC:71:4E:6E:E8:57:C2:C5:01:5B:8D:00:9B:0E:4C:CF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b441ed8b-6937-348e-bc75-12a5785f2020.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.125.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:37:d7:ec:48:b0:af:cd:45:1e:2a:2c:1a:61:18:4f:1f:dc:
         aa:60:c4:f3:05:08:aa:03:21:05:60:6b:01:0e:c1:20:f4:db:
         67:8f:7a:be:59:a2:ef:72:d0:fe:c8:56:38:83:5f:c3:81:87:
         14:93:f2:3b:d1:ee:cd:40:3d:92:2e:8b:45:2d:2c:70:05:81:
         00:47:91:fb:9d:63:1f:70:9e:4c:72:8b:d2:23:7a:92:67:36:
         23:89:14:d8:af:2b:54:28:45:f4:54:96:da:7d:0e:c4:c3:7f:
         34:e0:0c:21:d6:bf:64:67:b0:d4:7f:4f:d0:88:63:66:9c:05:
         d4:59:59:e0:33:61:62:ae:c4:d9:ff:7b:ca:79:fa:fa:03:59:
         ec:89:b7:e2:63:14:33:51:80:98:04:34:0c:f7:84:55:0a:c8:
         f5:0c:f2:2b:95:14:94:8b:b0:bf:eb:55:42:36:b9:03:29:2f:
         be:09:86:ab:17:6a:4f:4c:c9:06:03:78:09:07:82:e4:db:43:
         6a:c7:b0:db:d7:fe:f8:52:24:66:4a:35:cd:7d:39:2e:2e:ab:
         60:34:2f:46:a1:bc:2d:e7:d7:c7:db:20:ae:c4:bc:68:7f:18:
         d8:e4:60:f7:2c:1a:ce:d4:93:91:5b:00:2b:ba:d6:19:65:70:
         6e:a0:fd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 01:32:45 2024 by rpki-client on console-fra.rpki-client.org