Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e5b155ad-d9a0-3067-bc2d-6acffd6f36a5.roa
File:                     e5b155ad-d9a0-3067-bc2d-6acffd6f36a5.roa (raw, json)
Hash identifier:          yioQOHITy6i7k+5HDs8ljQDfA5txa/40oYmeysUPT4o=
Subject key identifier:   A5:FC:85:E3:BB:CE:16:41:D8:F3:39:4A:A7:4D:B8:70:AF:82:47:E7
Certificate issuer:       /CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
Certificate serial:       010D0C9F4328584596334262F109FF41BF9B2300
Authority key identifier: C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e5b155ad-d9a0-3067-bc2d-6acffd6f36a5.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     23383
IP address blocks:        65.182.0.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:42:62:f1:09:ff:41:bf:9b:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61532adb-ed7d-43ba-a66f-2a333fb9cf62
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=5f228055-27e9-43e1-8c39-cdf9f2d40dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:20:26:3c:60:b5:f7:40:c3:28:91:59:e7:9b:
                    75:9b:fb:cd:5d:20:e7:01:c5:fd:58:86:b7:96:01:
                    f7:58:c3:61:e8:bd:c0:09:ea:70:25:e6:a5:3a:34:
                    e5:29:9f:a4:40:98:17:f7:6e:0f:19:87:2e:56:ed:
                    e7:0f:f1:f0:52:c7:2a:52:a6:b2:37:65:2a:68:80:
                    b5:91:48:28:7f:41:9f:9d:18:70:11:da:ee:b7:c2:
                    a2:07:0e:ac:09:72:8b:0f:fe:32:79:ca:36:44:e6:
                    39:52:bc:bb:c9:57:d1:c6:af:ce:86:df:8d:7a:1a:
                    4f:ee:e0:e8:c4:04:ef:6b:bb:f4:7f:3f:e5:2e:28:
                    b1:c3:34:8e:df:d7:ea:92:20:88:78:49:c7:71:d7:
                    41:2f:3a:9d:fa:89:f3:36:1e:ac:eb:9d:05:5d:49:
                    f8:41:f0:a1:af:d4:9a:b6:db:77:8a:9b:31:0d:63:
                    eb:e8:51:ce:e2:21:94:f0:0d:5e:8e:89:2e:ac:98:
                    8b:90:b3:86:d8:32:45:bd:f8:b5:10:93:9a:47:a0:
                    9b:8f:b0:7f:db:e9:36:8d:92:ae:7f:f9:ea:13:1f:
                    a6:b1:8e:83:48:9a:13:a4:02:52:8a:3a:ec:53:65:
                    4e:39:11:2b:4d:d8:75:52:52:9e:8a:71:34:d1:7c:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:FC:85:E3:BB:CE:16:41:D8:F3:39:4A:A7:4D:B8:70:AF:82:47:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/e5b155ad-d9a0-3067-bc2d-6acffd6f36a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62/61532adb-ed7d-43ba-a66f-2a333fb9cf62.crl

            X509v3 Authority Key Identifier:
                keyid:C9:65:22:CD:0A:BC:3A:D6:00:B2:BD:17:FD:42:C2:66:C6:45:5F:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/61532adb-ed7d-43ba-a66f-2a333fb9cf62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.182.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:70:65:1e:d1:b2:58:39:04:f0:e7:f5:fc:ca:1d:72:c7:08:
         cb:83:e3:dc:8f:ee:da:49:79:df:c0:bf:50:c8:8a:a3:28:22:
         8e:d4:7d:43:8a:f1:89:90:9e:94:b9:43:7a:2d:3f:81:a4:ab:
         36:b9:b8:ed:fd:1d:a7:de:11:f3:51:10:23:64:42:8e:e2:1e:
         c9:72:de:36:34:8e:c1:85:82:07:50:f0:8d:cb:26:53:6b:4b:
         1b:aa:6c:ea:5c:07:80:ec:a5:c1:5d:05:be:3f:62:81:85:50:
         9d:ce:98:3f:4a:b5:34:e6:d3:68:b8:3c:41:c9:e7:b3:54:88:
         40:3e:ac:93:6e:36:5f:20:dd:55:e3:9b:a4:74:97:55:a0:1c:
         92:b5:2d:f2:7f:64:b1:94:46:21:6c:ef:39:8e:38:40:78:c2:
         ef:b7:06:69:f9:f0:25:fb:a7:8d:9e:4f:f9:23:14:66:25:e7:
         6d:60:c1:90:a6:44:58:7a:1d:d8:d6:ef:c7:4a:bd:42:19:0d:
         90:50:14:2f:f8:ad:23:19:1d:d4:09:d2:f2:6c:06:52:1f:c1:
         b0:48:01:31:49:41:f3:7f:6a:14:d6:3a:91:81:d2:e3:3e:6b:
         b4:ef:e4:72:f7:b0:30:1d:a6:c1:55:c5:c6:df:bb:95:51:e5:
         53:83:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:05 2024 by rpki-client on console-fra.rpki-client.org