Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
File:                     cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa (raw, json)
Hash identifier:          ZB6TXMNsAMmL4mdB0OmnNDusBbu6L4jcdI58ydq0FOk=
Subject key identifier:   8B:D9:31:E6:F8:F1:2C:21:B4:5F:C8:E8:FD:C3:8B:AB:81:5B:D6:DB
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F432858472405BC72A71586B837D7F680
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     87
IP address blocks:        149.165.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:bc:72:a7:15:86:b8:37:d7:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=07e91dad-4fde-4327-906e-e3f783c4ffca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dd:d7:ac:95:20:44:20:d2:18:ee:3b:eb:8e:
                    97:5f:1c:f5:09:7c:5e:c2:c7:03:6c:0e:9a:14:0c:
                    6c:f3:a1:bb:f6:8a:d7:d0:24:b0:c9:84:c5:ff:c3:
                    c9:fb:dc:d6:67:f4:7b:81:cb:32:9c:3e:7d:f1:ea:
                    7d:3d:65:db:c1:fa:d0:31:9d:8c:03:4c:2d:e7:d8:
                    3e:1d:6e:48:67:7e:5f:b7:38:2d:b6:5e:5e:c9:57:
                    e0:2b:72:bd:88:7c:fd:ca:fa:3d:5d:4b:24:dd:5f:
                    e8:ed:49:d0:68:c9:9d:88:e4:39:ad:1a:c0:fc:02:
                    27:e3:e9:17:f1:ba:b6:74:8c:19:e5:aa:1a:84:15:
                    bf:8e:12:5e:f8:d0:1b:b7:13:31:a0:8c:74:95:6c:
                    2e:cc:9a:48:c8:b0:04:df:b8:66:9e:97:dc:49:3d:
                    b6:5f:bf:f3:6f:91:a9:f3:f2:68:4b:33:49:16:a2:
                    27:af:10:5f:b7:ba:75:07:01:08:e0:c4:1a:ee:37:
                    57:fa:e4:d7:9c:d7:a9:8e:aa:48:d8:9f:15:bf:eb:
                    1f:25:94:5f:69:e8:4d:4d:18:1f:ab:70:e7:a0:66:
                    08:57:b2:70:1f:60:ce:3e:7d:bd:bb:ad:17:fc:bc:
                    34:10:08:fc:6a:e8:d5:4b:cb:88:21:d0:14:ae:99:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:31:E6:F8:F1:2C:21:B4:5F:C8:E8:FD:C3:8B:AB:81:5B:D6:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/cd81e2f1-b1ee-3339-8fe5-ecdc51d10814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.165.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:e9:fe:09:03:22:d4:b4:5d:d1:30:47:cb:7d:e9:26:15:b0:
         0c:54:58:65:a6:89:76:a9:1e:26:b1:24:24:0e:7d:55:a8:82:
         98:92:77:fc:35:66:f3:8e:68:10:5c:4a:1a:d9:13:e4:f2:76:
         bf:cb:30:53:e4:e7:bc:52:cc:73:b9:39:14:7d:40:07:ce:bc:
         fc:ab:d6:ee:ab:f1:a2:01:5e:a5:79:02:42:5f:43:ac:90:d7:
         b6:4d:a5:7d:64:78:2a:1b:f4:2b:d9:60:3e:e4:b6:ab:0a:4d:
         f6:41:7c:f6:28:20:c1:be:f1:7b:e3:97:1e:67:b4:6a:ed:50:
         d1:8c:16:c9:21:01:c9:d2:2c:80:b2:25:c7:dd:e9:18:8f:b4:
         6f:94:89:1f:c2:a3:18:f2:72:89:00:41:fd:40:a8:67:57:59:
         ac:18:cc:a0:d8:ab:ce:97:58:f9:46:15:dc:b5:a1:d8:60:03:
         20:e7:18:4b:f8:00:d2:d2:03:a5:1b:10:72:c0:fc:33:63:af:
         3b:97:42:02:c1:90:28:1b:3c:88:ac:3e:76:07:e1:65:f6:be:
         ab:ef:34:3a:87:11:29:db:6c:17:5e:ad:f4:34:52:5d:5f:76:
         48:fe:78:fc:17:c6:b7:b6:1b:9a:07:73:ee:b4:f3:89:e0:01:
         73:e7:9a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:28:56 2024 by rpki-client on console-fra.rpki-client.org