Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa
File:                     85d3965e-91b9-3bd2-b44d-74bf32060798.roa (raw, json)
Hash identifier:          Kmh8QHX+TEaltIZT3j6LRBiTyOn0KH7ONYI0ypKE3Cs=
Subject key identifier:   A7:AA:E1:12:54:69:36:C4:DC:C7:94:26:10:65:C3:23:A8:DE:72:14
Certificate issuer:       /CN=01664fbf-983f-4876-bc33-31a4d5aed031
Certificate serial:       010D0C9F43285845777DC0B48EE1D4AA41A21080
Authority key identifier: 95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa
Signing time:             Sun 07 Apr 2024 13:00:32 +0000
ROA not before:           Sun 07 Apr 2024 13:00:32 +0000
ROA not after:            Sat 06 Jul 2024 13:00:32 +0000
asID:                     14618
IP address blocks:        65.110.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:77:7d:c0:b4:8e:e1:d4:aa:41:a2:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01664fbf-983f-4876-bc33-31a4d5aed031
        Validity
            Not Before: Apr  7 13:00:32 2024 GMT
            Not After : Jul  6 13:00:32 2024 GMT
        Subject: CN=ed64a924-758b-4d0d-ac45-154d4ff188c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3e:0a:c5:6c:2d:b6:60:f8:26:43:5a:76:d1:
                    58:72:26:2f:50:fe:96:3c:63:eb:b9:98:a4:90:3e:
                    f0:6f:c9:39:d0:55:42:71:b7:b0:e7:05:9f:34:f9:
                    82:44:d2:c2:d3:d5:d8:7d:fe:51:d3:24:e4:13:e8:
                    2c:4a:5f:49:df:26:89:a8:76:58:2b:e0:c0:1a:b5:
                    6c:51:a6:93:c8:92:1b:62:50:58:9d:29:79:6c:d6:
                    d2:8c:c0:e9:d0:61:1d:da:34:50:b4:d9:8a:18:f8:
                    53:d6:42:45:1f:47:ca:ca:f8:7c:8b:ee:03:fc:dd:
                    62:07:2d:bc:fe:2f:f0:58:c5:b1:8c:d8:f7:ad:82:
                    5e:da:46:97:2a:a4:74:f8:a7:3b:b4:f7:d0:11:8b:
                    b8:36:a1:b5:54:aa:c5:94:5e:2c:3c:ce:a8:b4:ff:
                    b6:87:d7:d0:7d:ae:d9:a3:e5:b6:94:75:2c:3e:47:
                    91:1c:95:f7:15:b7:fd:8a:33:68:3f:4c:d3:25:35:
                    dd:b4:17:46:b4:83:a7:ed:77:26:9e:bb:31:cf:0c:
                    3f:26:c2:b4:91:26:a9:0c:ce:5a:bc:1e:0c:d8:67:
                    64:8c:ae:17:a0:2f:81:38:4e:9a:9b:58:18:8c:37:
                    6e:db:95:ca:af:86:9f:a6:97:b1:df:9f:ae:8e:56:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AA:E1:12:54:69:36:C4:DC:C7:94:26:10:65:C3:23:A8:DE:72:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl

            X509v3 Authority Key Identifier:
                keyid:95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:99:d9:2b:44:76:3c:c1:b7:7d:7a:4c:76:0b:93:2a:55:e6:
         25:c4:f0:ae:22:5f:80:e1:f3:bc:aa:a0:00:72:63:26:c8:41:
         a8:69:b0:34:9b:f4:c0:0b:ee:90:93:89:d9:90:14:a3:58:15:
         60:b0:e8:0f:a3:bb:29:65:5f:55:2f:67:af:d8:aa:96:63:f0:
         6b:41:c5:11:a4:ef:84:bb:cf:c7:3c:d9:1c:ce:04:0e:46:51:
         d9:42:8b:90:ce:f8:fe:e1:76:61:d1:23:a6:3f:3f:28:b3:21:
         4b:4f:24:4e:1d:2f:cb:3d:fa:58:0e:55:02:66:8a:c2:94:de:
         d5:1d:4a:34:d3:b6:b2:e1:3b:09:89:97:08:73:c2:61:89:4f:
         89:ba:bd:2d:98:83:a4:66:87:8e:d9:8e:8d:fc:78:1d:71:e0:
         0a:70:93:9e:c9:e3:1b:7c:68:5f:b0:8d:fc:4f:9a:2b:d5:04:
         59:74:c4:38:07:b5:61:2d:02:51:5d:af:cc:cc:19:9e:56:a5:
         b6:63:29:2d:3a:af:f3:92:67:3a:5a:11:26:3d:42:74:f5:bb:
         e6:30:a2:b2:a9:31:f6:d7:b0:c0:4b:ac:f5:e6:16:05:b2:78:
         b9:4d:28:e2:be:b7:a6:0e:28:0b:2e:ae:2f:e3:c1:14:8b:0b:
         fc:6d:88:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 15:52:00 2024 by rpki-client on console-ams.rpki-client.org