Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa
File:                     3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa (raw, json)
Hash identifier:          z71GMwOL7Q53VAu53V1w0/XuR6t1zEwU46niRRROgiQ=
Subject key identifier:   C5:B1:EE:8A:B8:B5:F7:15:34:7B:24:0B:5B:0C:1C:6C:A6:48:42:CC
Certificate issuer:       /CN=01664fbf-983f-4876-bc33-31a4d5aed031
Certificate serial:       010D0C9F432858473A5B82086DD3B5F7C3B12A00
Authority key identifier: 95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     14618
IP address blocks:        65.110.52.0/23 maxlen: 23
                          65.110.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:82:08:6d:d3:b5:f7:c3:b1:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01664fbf-983f-4876-bc33-31a4d5aed031
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=429707e3-72aa-4045-96f5-769739b9cfba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:55:b0:1f:f8:40:6f:ff:4d:fb:f8:39:17:
                    a0:6b:e8:4d:9d:db:6e:97:d9:18:75:2e:a7:f8:59:
                    7e:1a:ff:9e:4f:23:87:03:2a:a2:9a:48:d0:e5:29:
                    73:b7:da:bb:d4:75:ad:e9:b2:43:ba:47:c4:a3:68:
                    db:3b:5a:3e:f2:06:cc:8d:d0:59:bb:54:dd:db:25:
                    97:c6:14:0e:08:98:46:6a:c6:09:2f:da:b2:be:81:
                    a4:77:d4:81:7a:d4:00:af:72:17:98:78:42:70:12:
                    b3:ab:13:16:7c:96:1f:89:71:91:25:8c:b4:f3:e3:
                    b9:82:43:fe:6f:2a:cc:f9:f9:c8:19:e2:6b:15:b0:
                    4b:3d:0c:62:88:d4:58:17:bc:74:de:7d:40:96:33:
                    ed:39:05:41:ad:e8:88:b6:e7:e2:62:a2:7e:3d:68:
                    43:f3:d0:15:81:52:b4:fb:9f:ca:b7:d9:4a:be:12:
                    49:ed:77:4b:66:36:38:c9:9e:e7:5d:9c:83:89:f0:
                    68:08:7b:23:28:ea:6b:63:a1:a9:59:39:d4:e0:0d:
                    87:d4:06:fd:bb:04:8d:04:77:2f:0f:db:2a:bf:51:
                    87:f5:30:7e:42:c2:d1:8b:25:4c:1f:ab:8c:ff:87:
                    ce:13:dd:c1:11:5f:8b:f8:a4:fe:e4:7c:56:58:1c:
                    ea:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B1:EE:8A:B8:B5:F7:15:34:7B:24:0B:5B:0C:1C:6C:A6:48:42:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/3282be55-89d5-3cd3-84c3-39f0e2cbec64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl

            X509v3 Authority Key Identifier:
                keyid:95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.52.0-65.110.54.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a4:77:65:47:77:6e:27:eb:b9:fa:57:68:61:9f:99:8c:f4:
         25:50:68:db:a0:d3:80:da:b0:16:8a:44:2c:e7:e7:79:89:4a:
         37:24:4c:f8:ef:22:5e:ab:5d:21:ee:89:5b:ca:95:c8:25:3d:
         44:78:dc:5b:a6:6b:84:21:ae:87:4f:fc:80:5e:8a:dd:85:4b:
         44:4d:7d:8b:e1:e7:21:19:30:c7:e9:d3:c1:50:5e:45:cc:6f:
         40:7a:be:bf:ae:6d:02:a1:d4:f5:d8:25:49:25:a3:fe:35:3a:
         f3:f0:1d:d7:cc:80:69:79:c6:d9:e2:14:f6:b6:0e:17:30:be:
         97:c3:15:c4:89:2c:6c:90:db:61:6c:df:b4:09:30:97:e8:6e:
         fa:8b:12:f9:a5:da:03:28:b0:37:fd:ae:bb:d5:d5:62:d1:70:
         e2:5e:3b:03:d7:cc:82:b5:40:5d:1c:b9:9a:6d:e7:32:3b:27:
         b3:ac:d4:bf:2f:8b:a7:07:ab:7c:a6:4e:68:fa:db:39:e5:a9:
         ad:cb:47:71:8e:08:1e:4a:27:a8:88:15:67:bf:bf:1b:6f:02:
         8b:88:0d:41:a1:c2:79:83:6b:73:3c:8f:34:34:67:6e:94:67:
         bb:57:a3:cf:27:7c:62:94:ac:3f:2c:da:66:26:cc:97:91:07:
         c7:c0:f3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:48 2024 by rpki-client on console-fra.rpki-client.org