Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/d41e4339-26b7-3935-adf2-17359740908d.roa
File:                     d41e4339-26b7-3935-adf2-17359740908d.roa (raw, json)
Hash identifier:          IQQhQADLLn9bH24+hfscxkhU42tYF3yM0LiSNv/9x5w=
Subject key identifier:   1D:8C:CE:FA:C4:DF:A9:D0:53:AC:BE:9F:CA:86:B8:59:C2:C6:28:C1
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F432858472C65E19E4A5AB6CF49E39DC0
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/d41e4339-26b7-3935-adf2-17359740908d.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     5065
IP address blocks:        216.105.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e1:9e:4a:5a:b6:cf:49:e3:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=d66158d7-106c-4423-b35b-e4a66eea8ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:54:f7:ee:09:53:cd:ae:cc:62:2d:13:1d:
                    65:d7:f5:bc:d8:8f:49:47:b8:0e:8d:7c:c6:d7:cc:
                    7b:be:0d:dd:eb:97:0f:9a:c3:76:6e:83:5c:1c:0a:
                    53:d3:f7:be:08:6b:94:90:bf:b1:9c:24:a5:2b:9f:
                    9f:3c:ef:9f:fb:e7:4d:67:80:58:4e:27:6e:ae:f0:
                    ef:2a:af:62:e7:fb:43:1a:45:78:e0:ae:6c:c9:d0:
                    83:ea:36:2c:b5:53:38:46:a4:59:d6:32:88:7d:4d:
                    e6:e8:fb:5c:4a:3c:81:3f:cd:08:9d:31:af:ee:b1:
                    37:d9:6e:b6:08:19:3d:b6:18:02:49:c1:05:f6:c5:
                    c0:4e:49:ea:21:c7:cc:b9:03:60:88:e8:f7:fd:5f:
                    66:5a:e2:4f:8b:a2:70:4b:65:f7:36:02:4f:18:36:
                    dd:79:af:73:a8:34:79:91:73:5f:11:7c:26:85:f3:
                    bc:d0:94:e9:7b:db:d1:ab:53:f6:90:1b:d0:cb:e5:
                    05:01:ba:c6:01:ca:fb:fe:99:35:1e:10:7f:fa:10:
                    a7:d3:49:56:1c:bf:ac:3f:90:17:23:ea:cf:fc:55:
                    1c:5d:28:d8:59:e1:2b:63:cb:2b:76:41:2d:d0:fd:
                    53:26:3c:48:2e:9a:df:57:b4:c2:20:35:5a:aa:3d:
                    b2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8C:CE:FA:C4:DF:A9:D0:53:AC:BE:9F:CA:86:B8:59:C2:C6:28:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/d41e4339-26b7-3935-adf2-17359740908d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:41:c3:1c:c7:96:6a:b4:1a:bb:36:ce:4c:0f:e4:ee:4d:4f:
         5b:a6:e4:c9:8f:62:7a:93:45:08:de:ce:d7:4b:09:67:5d:ba:
         4a:e2:51:16:95:42:4f:92:9a:b8:8d:14:68:5a:6e:33:a0:7a:
         2a:e3:cf:f3:f8:8b:a7:ee:0e:ea:5e:be:12:42:31:1e:96:55:
         94:71:3f:90:94:25:48:d8:83:f0:66:c1:e4:38:2e:9d:5e:55:
         10:8b:2e:8e:a6:88:c9:e5:5b:69:bc:c3:73:a9:a3:34:32:4d:
         b8:e6:14:4f:98:dd:1c:c1:d8:73:3e:9e:87:fb:26:22:9d:da:
         cb:09:07:ff:e4:43:31:2d:d3:6a:f9:27:dc:77:0b:34:e6:d0:
         25:6e:54:0d:4c:ce:3e:d6:34:6d:e3:ac:fe:bb:7a:dd:ce:d7:
         da:e2:3e:2e:79:9d:c8:f5:52:d6:32:86:54:61:86:20:f2:69:
         da:0a:1e:85:9e:2f:96:84:d8:2d:5e:c8:ce:10:b5:e7:d7:74:
         08:de:9b:54:94:b3:15:64:fa:6d:43:3c:84:34:3e:dc:7b:7d:
         b1:d3:0e:f2:64:63:4a:82:42:1c:b7:6f:d7:2a:c1:0f:38:60:
         b5:9a:c3:55:a4:21:e7:ee:12:4e:c7:27:14:bc:6c:49:cb:1f:
         d4:72:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:05 2024 by rpki-client on console-ams.rpki-client.org