Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa
File:                     4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa (raw, json)
Hash identifier:          LvCR5ZlqQ+rMV5P75cHVYZIhjXpbGMQEqpAs/tNd5DY=
Subject key identifier:   33:CA:A1:15:3F:6D:B3:CC:33:F1:16:F1:6F:C3:99:36:20:4E:66:E9
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285845DEC9397CFF89A75147DBCD80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa
Signing time:             Tue 14 May 2024 13:00:34 +0000
ROA not before:           Tue 14 May 2024 13:00:34 +0000
ROA not after:            Mon 12 Aug 2024 13:00:34 +0000
asID:                     701
IP address blocks:        65.225.12.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:de:c9:39:7c:ff:89:a7:51:47:db:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 14 13:00:34 2024 GMT
            Not After : Aug 12 13:00:34 2024 GMT
        Subject: CN=ac94d7d4-9819-45c7-b664-b7b71038cbe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:21:3c:fb:89:a7:38:58:e9:b2:d7:be:c3:
                    4b:ae:4e:49:8d:9d:dc:3e:4b:a8:41:e8:96:2a:92:
                    86:ec:60:35:91:cb:ed:29:e5:0b:30:ad:a9:b8:3c:
                    51:3f:c9:d3:14:24:df:f2:1e:e5:e1:ea:7c:1b:8c:
                    f1:0d:92:ea:74:dc:26:63:fa:37:e7:57:34:75:5d:
                    67:82:8a:8d:bc:4e:09:67:2a:da:ab:cf:ef:f1:dd:
                    3f:e9:0c:ba:fb:a8:6c:60:41:71:03:fa:70:bd:a8:
                    9d:2d:d7:8b:f9:0f:6f:15:6d:9b:f4:b9:12:c6:3d:
                    4e:78:7c:45:4c:1c:0d:c6:2f:38:dd:6c:97:a4:55:
                    32:c1:6b:72:07:b5:a7:28:2c:eb:11:15:a8:f6:29:
                    29:7c:e2:c2:5d:17:40:06:48:52:3c:af:53:ea:f1:
                    77:bd:5b:ce:cd:d4:cd:b3:d8:39:7a:03:d3:18:82:
                    2f:44:37:c9:8f:63:1a:86:f6:e3:4b:1b:a5:2f:a1:
                    9a:97:85:11:74:59:c1:4c:9e:68:f2:5b:57:ff:16:
                    bf:1b:be:9b:5f:a6:2c:74:a2:fd:54:bf:d2:cd:03:
                    0b:59:5e:0c:23:fc:0d:8b:b9:08:03:ce:1f:dd:41:
                    57:c5:46:70:43:36:a4:4d:97:37:07:b0:8c:b1:e0:
                    95:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CA:A1:15:3F:6D:B3:CC:33:F1:16:F1:6F:C3:99:36:20:4E:66:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f5dfe71-5abe-33b9-b55d-bff9fe465212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.225.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:d4:17:35:60:34:f9:80:ad:cf:63:62:e1:3d:49:69:7d:
         1a:06:d4:2f:5f:1e:91:95:74:fc:b8:fc:74:df:7f:f2:aa:99:
         7e:9d:4c:03:e2:f9:70:8b:a1:24:1b:50:81:a1:87:ce:e5:bf:
         2e:fe:ba:45:32:b9:3c:a6:4e:de:cf:85:0e:ce:9b:1c:86:8a:
         f8:c0:1c:0d:7d:d8:50:94:65:86:b3:99:53:1d:95:b0:00:03:
         2f:cc:de:61:25:64:69:af:a1:09:95:22:9c:8c:51:72:97:97:
         4b:73:11:a1:74:0f:18:44:39:d0:77:65:de:06:e8:06:92:8a:
         47:39:ec:a8:80:f5:21:cc:f3:57:60:b0:5b:ed:1c:e7:26:57:
         45:28:7c:2f:ce:a3:87:59:14:33:f8:88:ef:3f:b1:fe:63:b9:
         52:be:75:cf:15:39:c4:ff:6a:d7:de:a2:22:49:a1:fe:e0:f4:
         05:bc:3b:4c:13:ab:e8:98:8a:42:60:f0:ed:d4:87:ac:d9:cb:
         50:29:f8:a1:f7:1d:e1:60:e6:54:d5:f4:05:ae:1f:35:1a:87:
         d4:8d:09:73:1c:e5:4c:b8:72:02:37:1b:76:33:75:f1:97:db:
         e1:10:9e:a4:5e:aa:2e:a5:38:ee:c4:60:e7:0e:42:91:60:5b:
         6c:4d:54:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 21:33:55 2024 by rpki-client on console-fra.rpki-client.org