Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
File:                     c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa (raw, json)
Hash identifier:          RfC7znx9qrwxb08rOXMUmqIrmsGugKqun7eH8/olL0w=
Subject key identifier:   86:CD:DA:53:5B:3E:DA:BC:45:D5:7D:D8:3F:EB:A0:54:5D:FD:32:58
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584921840243105CA4D358E75680
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     399208
IP address blocks:        65.51.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:02:43:10:5c:a4:d3:58:e7:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=5f84a50b-4436-4408-bb44-12e39ed2eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:da:94:e9:b3:4a:33:3a:b7:47:01:18:fb:7e:
                    54:11:94:b0:f1:d0:0d:8f:e4:24:8e:d8:0f:c9:57:
                    89:10:5a:6b:16:c9:17:52:c4:18:73:b1:59:4c:c0:
                    80:54:6a:d6:d4:36:c0:f2:a1:f1:6b:c4:4b:d1:8a:
                    79:d8:fb:aa:72:89:e7:df:59:61:2d:6d:49:c6:95:
                    f3:90:f9:55:40:2c:f0:c1:b7:d5:0e:8b:f3:a9:25:
                    1b:9f:5b:cf:ef:b4:d5:5a:56:92:7a:30:15:bb:1b:
                    0c:d3:50:78:4e:a2:ef:70:65:9f:dc:bb:76:62:cc:
                    fe:b2:db:9b:ce:c9:80:60:37:ab:db:16:1c:66:aa:
                    d1:70:65:2c:1b:c6:10:c7:3c:ba:f0:da:1a:06:03:
                    72:1e:33:74:15:6c:bc:2c:5d:fd:4a:64:d9:f3:ee:
                    eb:03:12:69:90:86:fc:fa:b9:06:73:29:0e:2e:79:
                    86:51:21:f7:2d:c5:56:6d:fd:8f:3f:50:4e:3d:67:
                    b7:96:b1:a5:6c:61:8a:61:8d:4d:b9:68:bc:e8:54:
                    58:88:51:1a:b4:b2:dd:34:d2:7b:99:3d:a9:66:6e:
                    d7:b1:57:71:9b:cd:db:85:52:25:e1:19:1b:f7:68:
                    05:4e:83:f0:22:36:2d:f5:36:5f:34:3c:91:a9:d2:
                    a1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:DA:53:5B:3E:DA:BC:45:D5:7D:D8:3F:EB:A0:54:5D:FD:32:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:0b:e8:73:a3:95:cd:53:44:49:7e:a0:7e:55:3e:f9:8c:0d:
         cc:cd:07:3e:9f:f6:43:b7:50:67:d1:12:fd:0e:5e:d6:65:5b:
         14:ca:ff:24:4d:02:f7:2b:fe:37:73:22:9b:f0:cd:60:8e:a8:
         1f:b8:52:3e:df:91:85:91:73:22:1b:50:60:a5:c2:bb:52:d8:
         e9:bb:db:0a:69:bb:69:f7:f4:d4:b8:aa:c2:6c:a4:59:99:6d:
         e9:ca:d7:17:a6:a9:0b:9a:72:9b:16:f4:44:0a:64:7a:95:6b:
         25:43:71:14:b3:4f:a1:6d:6e:cc:f6:59:10:66:5f:40:88:60:
         d1:58:c7:89:3a:a4:9b:23:98:d4:28:ac:fa:bf:b1:f8:85:23:
         0d:f0:4e:e9:59:b6:b6:99:d7:e6:5b:d0:2b:b2:39:e2:82:65:
         9a:c6:20:cd:0e:73:9b:70:7d:05:1d:1a:68:19:05:4f:15:06:
         7e:1f:19:f7:f8:1c:62:21:2a:93:32:b6:01:de:3e:15:ad:3e:
         61:7b:bc:10:3b:fe:57:b6:ca:c4:7b:57:4f:ba:bc:a1:1b:07:
         8a:ad:33:52:a1:08:78:d0:c8:16:23:d2:e2:b9:c8:4c:8a:3b:
         f4:be:ec:35:fc:fa:ed:3b:94:93:42:2c:05:b3:d9:d4:08:9a:
         3e:ee:6a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:00 2025 by rpki-client