Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78e4349e-5b20-3354-ba7c-b210aa197f2e.roa
File:                     78e4349e-5b20-3354-ba7c-b210aa197f2e.roa (raw, json)
Hash identifier:          8d2qmhjByZRJQZznwhV++hHWb8uI47nZ9Cx8KJLETW4=
Subject key identifier:   B7:18:12:E7:FF:5C:3A:39:24:01:08:12:E7:0A:B3:95:4F:8A:23:0C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285845D933BCBFC95A4D2784CF6E00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78e4349e-5b20-3354-ba7c-b210aa197f2e.roa
Signing time:             Sun 12 May 2024 13:00:34 +0000
ROA not before:           Sun 12 May 2024 13:00:34 +0000
ROA not after:            Sat 10 Aug 2024 13:00:34 +0000
asID:                     18779
IP address blocks:        65.49.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d9:33:bc:bf:c9:5a:4d:27:84:cf:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 12 13:00:34 2024 GMT
            Not After : Aug 10 13:00:34 2024 GMT
        Subject: CN=7fbaf6ae-d643-483c-bbde-f09bfe0f339a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:8b:ee:5b:b0:3f:ed:71:e7:cb:99:66:e9:
                    6d:49:f5:c1:9e:32:de:11:63:d8:18:79:4b:16:54:
                    6e:b8:55:24:f0:2f:22:9f:68:8d:68:46:a5:8b:99:
                    81:b2:92:2d:75:45:1f:f2:41:2d:23:a5:b2:5d:45:
                    fe:49:63:8c:4e:18:ec:03:2e:8a:2d:ae:2f:5d:79:
                    ea:b7:53:0b:03:b0:65:58:3d:b5:42:f3:d2:47:1a:
                    1a:30:e0:1b:25:76:b1:bc:00:c0:41:72:25:e3:89:
                    a8:a7:e7:ff:87:1b:41:db:1a:05:1d:dd:1f:28:70:
                    8d:a2:a7:48:0b:fe:bd:e9:fe:8c:43:82:a9:70:ce:
                    31:da:d4:07:30:b1:50:f2:24:ee:35:6d:e2:5b:7e:
                    8a:c8:02:50:fc:37:8e:fd:01:d7:a0:8a:24:ce:64:
                    6a:f5:ae:8e:21:48:bc:53:72:6b:1b:f5:f3:1c:82:
                    bd:df:7c:3d:0f:b6:2b:65:97:2b:e9:f8:9a:ad:5c:
                    0e:b3:e1:09:db:91:a4:b6:60:ba:94:3b:59:e0:e8:
                    94:ad:6f:17:85:1b:b9:cd:62:33:4f:10:39:c5:8c:
                    19:53:12:64:cf:2f:fe:68:a7:f4:aa:0a:59:b0:8f:
                    ba:12:8a:d4:20:6e:90:b2:49:86:1f:a9:61:a1:6e:
                    6c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:12:E7:FF:5C:3A:39:24:01:08:12:E7:0A:B3:95:4F:8A:23:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/78e4349e-5b20-3354-ba7c-b210aa197f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:ff:44:ed:ea:d5:0c:85:54:22:84:50:4b:b3:9d:bf:67:51:
         40:d5:75:9c:8e:c0:46:0a:90:c4:f8:df:b7:7d:a7:97:7e:04:
         22:e9:7e:d5:0c:29:fb:fb:bd:aa:45:83:62:cd:73:cb:09:f0:
         b6:ee:3f:64:a6:25:92:7c:27:79:40:5c:6b:ff:21:5f:a3:64:
         fe:1b:a3:14:08:58:a7:db:05:d5:18:3e:50:53:a3:3c:7b:77:
         8b:17:f8:21:4a:20:cd:1b:1a:fd:7c:e9:91:5c:62:02:15:ab:
         b0:75:8c:9d:cd:c8:3d:56:c2:ee:72:c9:f6:bd:cc:a2:63:63:
         3b:26:e1:ab:a3:b3:98:6e:a8:8c:5f:01:74:3b:78:4f:1b:1e:
         55:a4:76:f9:e0:de:b3:23:5a:7b:dc:8f:ab:8a:fc:04:c6:49:
         45:96:9f:f0:3c:fa:7a:32:4a:21:34:e6:d1:ed:9f:5c:eb:f1:
         20:ff:30:ce:8c:83:cf:3c:c3:38:cf:69:f1:a4:26:33:dc:5b:
         16:cf:49:9a:3e:02:bd:08:33:e0:af:53:c2:fd:eb:a2:28:ea:
         9c:fa:33:ef:c9:7b:e4:66:d2:66:af:de:8d:c8:21:ba:a9:ea:
         61:d2:9f:d6:49:f0:85:70:6b:8b:16:7a:49:41:3c:9f:e7:99:
         f8:f5:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 01:52:45 2024 by rpki-client on console-fra.rpki-client.org