Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
File:                     afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json)
Hash identifier:          BsKZx9U/l+Qg21FqejLglfos2RvVvI6QfZqs8FEE+0Q=
Subject key identifier:   81:FF:C8:58:47:F0:4E:9A:F8:85:05:F6:6E:14:C3:FB:EE:43:00:46
Certificate issuer:       /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
Certificate serial:       010D0C9F4328584701205CA28B6EAE89CBA77A80
Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa
Signing time:             Mon 26 Aug 2024 13:00:41 +0000
ROA not before:           Mon 26 Aug 2024 13:00:41 +0000
ROA not after:            Sun 24 Nov 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        168.100.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:01:20:5c:a2:8b:6e:ae:89:cb:a7:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de
        Validity
            Not Before: Aug 26 13:00:41 2024 GMT
            Not After : Nov 24 14:00:41 2024 GMT
        Subject: CN=b37f5199-378a-4da6-8f36-ff691e9970c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6b:4f:76:f0:6d:8a:5a:ee:ec:dd:c8:1e:8b:
                    b6:4d:62:6b:24:01:b6:50:91:c0:53:65:99:1b:83:
                    e3:99:d9:a6:d2:ff:a1:16:f1:5d:cd:bd:c9:46:ab:
                    09:9a:30:20:70:57:6a:f1:49:27:ed:53:b6:15:2f:
                    3d:81:0c:8d:05:e7:99:cc:f9:25:1e:7a:1f:3a:eb:
                    42:56:31:d1:7e:ff:15:1b:85:80:47:ad:be:ea:b6:
                    66:fe:25:6b:d8:85:3b:87:ff:e5:c1:e3:13:9a:98:
                    cf:88:d7:b7:ba:51:18:f1:3f:44:33:80:e2:44:6c:
                    f1:e1:8c:53:68:97:a0:42:31:13:65:62:93:aa:0c:
                    a9:3a:87:59:3f:23:83:4e:f4:59:71:42:b5:eb:0e:
                    d7:70:8d:49:4a:1f:09:4f:f4:a5:27:2b:96:5f:db:
                    86:ea:d8:f4:ee:d1:1c:f6:f6:ee:71:d0:58:74:9f:
                    9f:0a:8e:9b:08:ea:ee:be:6f:ac:64:77:ea:2a:14:
                    b7:d5:73:bd:5d:05:74:c3:ce:4b:f2:17:54:7d:bf:
                    37:70:dd:d8:ce:3a:54:3b:e0:5e:75:bb:a2:62:5e:
                    41:da:d4:6e:94:04:77:fa:95:3f:ae:1d:9e:e4:bc:
                    54:26:3b:63:52:6f:e7:78:38:53:3b:0f:4d:3e:86:
                    88:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FF:C8:58:47:F0:4E:9A:F8:85:05:F6:6E:14:C3:FB:EE:43:00:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl

            X509v3 Authority Key Identifier:
                keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.100.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:03:70:a2:fd:64:13:ae:f7:33:93:6d:a8:12:02:dd:4d:ee:
         e7:b8:61:6e:56:e5:76:8f:f8:02:03:a1:7b:e0:27:ff:1d:67:
         dc:37:22:2b:b3:c1:17:44:b5:d7:4a:65:7b:44:d6:f0:1e:62:
         1b:35:80:57:7f:54:17:c3:28:a1:22:01:a2:2b:3c:b3:06:9d:
         b8:4f:52:bb:c0:9a:56:2b:68:ba:9b:97:e0:9b:51:47:4d:19:
         79:26:e3:b0:f3:5d:0b:19:8b:16:e8:8f:8e:84:de:c0:40:09:
         38:17:04:e2:ad:72:3f:1b:b1:0c:33:36:3f:a3:03:29:e4:50:
         07:1a:c8:8c:c3:2e:4d:66:d3:ad:86:c3:63:1c:2c:1a:fe:d5:
         a8:b1:7c:c5:b3:d2:fa:98:2a:a2:3c:1e:73:e4:fa:26:49:31:
         f2:e5:8b:b4:b1:5d:ab:91:f8:cc:54:ad:9b:30:63:3e:e8:32:
         3b:04:9f:57:df:37:e2:89:d4:33:ec:6e:10:74:fc:34:08:59:
         5b:c7:a4:52:9b:ad:37:4d:bc:d9:33:f3:49:ca:5f:79:b1:5a:
         66:13:5e:b0:ad:3e:89:a2:dc:1f:17:d0:b1:c2:f1:2a:4c:8e:
         82:f0:32:7e:87:b9:c0:ee:f4:1d:9f:3a:e1:71:e5:6c:41:3a:
         fd:76:ae:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:16:56 2024 by rpki-client on console-ams.rpki-client.org