Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
File:                     ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa (raw, json)
Hash identifier:          khKdUSzANotSXSMV/xYniN4qLEx/YcW/98Ba5GedxR8=
Subject key identifier:   76:CB:A4:C3:8E:EB:06:E2:29:49:81:4B:DA:2F:89:79:2D:87:67:52
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F43285845E729225F8E0B9B8C45293800
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa
Signing time:             Fri 17 May 2024 13:00:34 +0000
ROA not before:           Fri 17 May 2024 13:00:34 +0000
ROA not after:            Thu 15 Aug 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        207.174.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:e7:29:22:5f:8e:0b:9b:8c:45:29:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: May 17 13:00:34 2024 GMT
            Not After : Aug 15 13:00:34 2024 GMT
        Subject: CN=fb941c5e-d8fd-4f57-8509-1b2acf268bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:36:9d:f1:a9:85:38:95:ad:2d:ab:fe:ab:c7:
                    8c:15:e1:22:20:c1:82:51:36:8b:16:78:c6:98:b1:
                    bc:c9:5a:63:92:e5:00:c9:3d:e4:db:4c:0e:52:5d:
                    5e:98:4d:91:7a:c5:5c:1c:fd:b9:53:90:cc:37:78:
                    45:0d:d6:5e:13:fa:fe:e7:87:39:59:ad:85:28:a1:
                    50:00:3c:fc:ec:1a:6e:b2:9d:d3:cb:d0:f1:23:41:
                    19:e5:f2:21:73:aa:0f:6f:0a:cb:82:5e:4e:6f:d7:
                    13:28:66:48:f2:6c:62:cc:94:d4:dd:64:63:e6:54:
                    2a:ef:65:c1:94:db:64:14:4e:0c:14:11:9d:0d:3e:
                    69:a0:cf:93:d1:36:37:6a:9a:c5:7f:9f:b7:2e:fd:
                    9a:be:00:ff:0d:1c:f3:83:b4:49:77:a0:3d:0c:c7:
                    bc:0d:87:8c:b5:0b:ba:d2:c0:a8:9b:c9:38:3c:f1:
                    7d:cc:0a:1f:60:cf:a5:19:67:39:22:87:bf:27:08:
                    2b:fd:46:eb:ca:9d:46:2e:0a:e3:1d:39:3b:0e:68:
                    41:f1:3a:f0:08:44:d1:57:3f:6f:bc:95:5e:92:79:
                    70:da:07:22:08:5d:dc:95:04:46:92:54:13:2b:9a:
                    0e:ef:25:00:52:23:39:0b:20:81:7e:7a:d1:3a:25:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CB:A4:C3:8E:EB:06:E2:29:49:81:4B:DA:2F:89:79:2D:87:67:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f8:33:ba:12:ed:71:23:51:b1:73:57:a7:5b:de:fa:0d:d4:
         50:ff:c3:93:62:9c:f3:88:fc:22:a7:aa:ca:90:c6:15:a6:2a:
         bb:9f:ce:c0:ab:8b:bf:5a:fb:22:37:ca:5f:32:2c:5a:f7:a4:
         2f:1b:8f:11:d6:45:ab:88:9e:4d:7c:19:90:db:42:c1:5c:9b:
         ea:c0:8c:a0:9b:b2:da:de:8b:4e:79:5c:a1:a4:8e:e4:9b:21:
         30:1f:00:e8:26:85:bf:94:63:49:11:fe:a3:0d:f9:3f:c5:c2:
         43:47:a8:29:1e:a1:fe:cc:eb:ac:ca:0c:70:d1:62:7a:f4:24:
         91:fe:f0:31:2e:8a:44:f1:bd:2b:f3:9c:4b:5e:03:c4:12:16:
         5e:50:7f:74:36:d8:58:e5:16:c1:85:a6:92:b2:af:2f:45:c9:
         96:4e:05:0d:e1:9d:88:a8:6c:fb:68:cf:f8:06:7a:ce:6e:6e:
         e4:18:df:84:68:b9:db:2f:55:b0:73:2c:b9:03:99:e7:b8:e4:
         20:73:e4:fc:26:33:26:0b:2a:e7:1b:a5:b4:0a:de:19:3f:8d:
         26:c3:4e:bb:13:07:0d:64:a0:2a:62:0f:ac:ac:05:e6:3e:5c:
         0a:d5:06:be:f1:2b:4a:27:d2:5b:f6:3a:7b:ea:63:8a:d4:aa:
         7b:32:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 01:24:15 2024 by rpki-client on console-fra.rpki-client.org