Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6fabd694-39c6-378b-9790-129864149036.roa
File:                     6fabd694-39c6-378b-9790-129864149036.roa (raw, json)
Hash identifier:          AoDabGQ1YXFGHNetU0SHmic5L9+8IoPqywzw+E9UOi8=
Subject key identifier:   5B:40:5F:96:5B:D5:9C:57:72:BB:E7:CB:C6:5F:0E:9A:24:93:E8:1E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584765A0EA04A4EAF70B60BF1580
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6fabd694-39c6-378b-9790-129864149036.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     14061
IP address blocks:        165.232.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ea:04:a4:ea:f7:0b:60:bf:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=e9322c07-177e-49cc-b35e-636242331429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:62:2d:c5:b0:2f:72:03:47:8e:2e:5d:27:
                    09:6d:d7:3c:79:21:65:59:28:63:bd:15:4f:cf:ba:
                    99:e6:a7:c0:9a:1e:92:99:b7:f5:14:c7:15:b1:95:
                    39:1f:91:49:9d:25:69:fa:31:79:7f:3f:ca:35:e1:
                    70:da:80:47:f7:01:25:cc:53:a8:cf:94:5d:94:0f:
                    8e:32:36:c6:28:0d:b9:99:7f:8d:31:74:ec:c0:fa:
                    ec:99:34:bc:c8:cf:bf:56:bf:83:3e:47:b2:98:66:
                    1a:6f:5e:b9:01:d0:1d:d5:0a:e7:45:5e:44:fd:b2:
                    50:fa:4f:41:b8:72:28:4d:ac:1b:e5:b2:69:73:c4:
                    fc:3b:0e:1c:62:e0:39:38:e5:f8:7b:1f:dc:0f:08:
                    2a:2d:9d:1f:db:50:12:8e:a8:2a:d0:26:32:25:b5:
                    20:70:07:7f:6d:a7:f0:a0:fd:01:ca:2f:01:fc:cd:
                    90:32:68:6d:70:ad:59:57:ef:79:2a:22:24:e1:cc:
                    81:98:33:32:86:60:f1:0d:9b:3e:ea:d3:76:e9:31:
                    0c:0a:8d:60:b7:14:78:68:b3:44:5a:a4:08:77:91:
                    0d:e9:a6:3e:93:9e:2e:d5:9d:99:0a:60:0b:5c:88:
                    44:c0:e7:59:26:a0:ed:a3:19:0a:a9:9c:a0:d9:43:
                    5b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:5F:96:5B:D5:9C:57:72:BB:E7:CB:C6:5F:0E:9A:24:93:E8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6fabd694-39c6-378b-9790-129864149036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.232.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:d5:4b:5a:64:72:fb:dc:3f:8e:24:51:d7:75:35:3d:8c:
         78:16:d6:6a:36:3a:46:5d:c0:48:b2:4e:13:4a:b4:2f:6e:26:
         d9:a9:26:01:f2:8f:dd:f7:95:d2:ab:fa:21:04:47:a3:26:a4:
         53:e7:bc:28:de:cb:52:5f:ce:61:01:da:fb:da:c5:d9:20:c6:
         7c:c0:66:92:fc:96:78:00:f6:00:96:f0:3a:df:29:17:5c:f4:
         af:e1:97:36:7b:68:75:f7:58:94:f1:40:36:ef:51:f7:7c:48:
         65:03:ce:19:49:1e:d5:fa:1b:90:27:17:98:ba:74:65:c0:dc:
         a3:d6:dd:97:c6:19:ce:ec:25:54:d3:fe:c5:f6:4c:8e:ee:1e:
         66:a0:b1:82:82:c5:4b:e8:69:61:43:1b:fa:e9:0c:3b:bc:f1:
         0c:a5:80:e9:b2:44:a5:13:7b:15:cc:55:05:5a:8c:5c:be:15:
         2c:74:4a:e0:58:14:cd:30:02:f8:b1:94:8f:48:8d:ff:bc:ba:
         48:10:33:d7:08:f3:5d:96:c1:c9:c5:85:28:16:0e:2d:68:29:
         ad:59:1a:ee:e5:a1:c7:42:47:81:84:d6:51:c9:e2:03:5a:b9:
         d6:2b:09:1d:ef:f9:04:15:af:ce:78:bd:0c:a1:1d:0d:3c:13:
         93:8c:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:52 2024 by rpki-client on console-fra.rpki-client.org