Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa
File:                     5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa (raw, json)
Hash identifier:          EYi63xG2DJPuI2iJXe5Yb2b7QLSLThJIzf1lp/SmSQU=
Subject key identifier:   33:20:80:81:55:87:5E:79:01:FF:D3:E3:15:4B:AA:BD:5E:58:13:E7
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F43285845DBFE68370B1F48DEE2096D20
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     204958
IP address blocks:        208.65.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jul 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:68:37:0b:1f:48:de:e2:09:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=a37d301c-87fc-4e00-b85f-54898c4f9889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:a5:08:07:5b:77:08:ed:b9:05:bf:f3:cb:
                    25:93:be:be:c2:5b:83:a2:55:a6:01:43:1c:5d:38:
                    c6:d3:02:77:56:b9:44:86:b0:2f:a8:f5:bc:f0:d6:
                    34:8a:64:14:00:a8:0c:38:17:42:88:66:41:21:2d:
                    0a:3a:d4:8a:dd:63:97:69:6b:dd:e2:56:13:e0:20:
                    b3:9c:2a:80:cd:f2:25:18:fa:9b:64:4f:da:e5:d7:
                    7f:de:ba:94:a0:dd:22:3e:09:64:c3:b4:50:cc:9e:
                    39:b7:14:63:41:61:39:dc:12:05:29:65:7f:46:f6:
                    69:d6:8f:97:7b:81:2c:4b:4a:c2:dc:d3:18:ab:57:
                    3a:5f:fc:d0:e5:a0:e7:5d:65:ca:54:9b:b1:7a:73:
                    83:03:14:fc:e8:7e:2d:dd:c3:50:cc:1d:75:f8:26:
                    25:a3:09:eb:14:76:74:a8:34:92:57:45:b3:69:da:
                    b1:43:ff:6a:fa:e1:96:88:be:8f:1c:12:d5:48:40:
                    d8:51:e7:96:8c:91:34:d2:eb:2e:22:68:20:39:5b:
                    3c:7c:b2:93:6d:15:00:dd:9a:30:ee:e3:3a:39:4d:
                    09:9c:74:be:27:a2:f5:fb:df:ab:47:bb:ce:2b:d9:
                    0e:ab:4a:c7:d8:0f:42:14:07:5a:bb:fc:58:fa:c8:
                    2d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:80:81:55:87:5E:79:01:FF:D3:E3:15:4B:AA:BD:5E:58:13:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/5a4ebdbe-1c46-3982-a3ee-c24ef4f7c057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:09:7f:5f:a2:c4:07:4f:fe:55:a0:2c:5d:2c:5f:dd:2b:4d:
         a4:8e:a1:a0:3e:23:61:e0:ee:77:17:1c:07:93:3d:69:ad:83:
         5c:86:70:ad:03:86:1f:74:bf:9a:ce:89:53:af:f1:b2:54:28:
         84:6f:ad:e0:88:db:13:8b:25:d6:bf:b4:a6:43:de:be:f9:57:
         81:8d:71:45:e7:08:d5:ee:6f:41:fb:a2:13:cb:6e:bd:45:6e:
         c1:7b:20:8b:36:16:cf:74:59:3b:6a:55:fa:d6:43:e1:e2:8c:
         0f:c9:07:2c:95:c5:95:6e:2e:75:d6:ef:c9:ed:6f:39:6f:5b:
         6a:1f:f5:f8:0e:d0:cb:df:f5:9f:d1:77:2c:00:30:a9:16:6f:
         2b:ce:70:3d:52:9d:fb:bf:44:50:6a:91:cf:25:70:3d:19:45:
         84:92:8a:aa:21:ec:ce:6d:7b:8f:ea:1e:84:41:9d:0a:de:59:
         96:0a:48:08:d2:db:cb:48:21:3f:56:1e:b3:a6:85:15:6c:d3:
         49:53:99:16:ea:90:30:4d:40:c2:86:04:60:44:22:00:c5:b6:
         2e:6d:f4:5a:45:ca:d4:06:69:4f:f6:75:9f:24:1f:bc:85:e5:
         33:a8:74:95:83:c2:e7:ee:87:21:cd:da:83:bf:82:2f:40:e5:
         ef:64:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 23:05:59 2024 by rpki-client on console-ams.rpki-client.org