Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/c51c1421-fef9-3fde-8ab3-8947fd864acf.roa
File:                     c51c1421-fef9-3fde-8ab3-8947fd864acf.roa (raw, json)
Hash identifier:          7dgd223ehEIe+SDf7yLD4KKHPv4PtcMjWFCTe4CZi6Q=
Subject key identifier:   8F:72:0B:4C:87:A9:7E:10:60:14:81:76:FC:28:1B:8D:1D:BD:38:63
Certificate issuer:       /CN=5584dc45-a1b8-40b0-bd08-266b38dc4e75
Certificate serial:       010D0C9F432858473FF0A4A6E8A12D7B76D8B380
Authority key identifier: 65:3A:2C:69:16:3E:A0:3C:7E:7D:E2:48:69:F2:B2:6D:0F:8F:A6:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/c51c1421-fef9-3fde-8ab3-8947fd864acf.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     33083
IP address blocks:        165.140.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/5584dc45-a1b8-40b0-bd08-266b38dc4e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/5584dc45-a1b8-40b0-bd08-266b38dc4e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a4:a6:e8:a1:2d:7b:76:d8:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5584dc45-a1b8-40b0-bd08-266b38dc4e75
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=11258eec-ba7a-49a5-a81e-64da6adcc8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:2b:23:02:da:f6:90:7b:83:eb:a0:0e:9b:
                    e0:09:0b:06:bc:84:cb:63:6e:07:e7:75:18:ae:d3:
                    51:07:01:58:a3:fb:db:8f:25:a9:53:cf:6b:fd:d2:
                    39:71:44:70:ae:72:5b:1b:ca:a8:de:3e:76:57:41:
                    1d:8e:d6:5b:58:17:53:8e:1b:d5:a1:2d:33:41:2b:
                    8e:55:5e:eb:ad:07:ab:26:c6:5a:e1:60:9e:5b:eb:
                    70:00:7b:b4:a2:8d:5a:f3:45:01:68:19:da:86:5e:
                    24:35:4d:ad:aa:4e:1d:d0:56:78:0d:20:57:ad:65:
                    19:fc:d0:e1:2f:8d:24:20:c7:f4:45:5b:7a:8c:a3:
                    7d:cc:f0:d9:51:d9:1b:16:c8:66:ec:2e:bd:76:6a:
                    6f:f9:f4:2d:fe:a5:c9:89:ce:10:ca:05:5e:a3:01:
                    8d:e5:1d:34:fa:38:c7:9c:ab:21:67:54:c8:2f:e6:
                    71:2a:63:e9:f6:9f:d9:bc:71:fa:27:db:e4:9b:f8:
                    81:99:42:5f:b8:19:ea:24:0e:78:83:dd:58:96:5b:
                    59:9c:57:dd:9a:67:2d:6c:ac:42:cf:ff:bf:d9:c6:
                    3b:b4:f1:a8:73:45:6a:42:88:1d:77:ca:69:97:74:
                    7f:9a:00:c2:0c:59:73:ae:11:79:ba:8a:72:52:3a:
                    e2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:0B:4C:87:A9:7E:10:60:14:81:76:FC:28:1B:8D:1D:BD:38:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/c51c1421-fef9-3fde-8ab3-8947fd864acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75/5584dc45-a1b8-40b0-bd08-266b38dc4e75.crl

            X509v3 Authority Key Identifier:
                keyid:65:3A:2C:69:16:3E:A0:3C:7E:7D:E2:48:69:F2:B2:6D:0F:8F:A6:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5584dc45-a1b8-40b0-bd08-266b38dc4e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:7b:89:21:ee:13:c1:8c:9a:5e:2f:63:41:ce:18:ae:8e:
         f1:81:30:c0:66:14:71:e1:63:62:7f:f3:27:8e:fb:bc:9a:e7:
         bd:a4:20:57:f1:81:db:a8:ad:ac:e2:6e:59:c6:31:5e:f0:dd:
         b7:fc:d1:94:95:ac:bc:a9:56:d5:f8:52:14:23:0d:20:10:eb:
         20:10:9d:a0:e8:11:d5:f6:8e:45:ff:8a:7c:24:9f:aa:57:e2:
         40:29:55:05:c1:3e:5b:a7:a2:05:e1:a7:7c:06:91:3a:3e:cc:
         96:9e:80:98:02:df:17:f5:92:21:79:4e:ae:d7:9f:e2:9c:98:
         c2:70:ba:c0:97:8c:9f:59:78:a5:64:f7:f3:f4:61:f1:09:e0:
         70:b2:8a:79:b3:45:cb:7a:07:f9:62:7d:22:4e:c0:7b:3d:99:
         5e:94:68:b0:90:d8:46:7d:86:75:55:3d:f2:70:5e:0c:6f:0b:
         a7:24:13:9d:d9:d3:44:61:a3:c6:d6:f9:c0:e8:bf:b5:6a:71:
         d5:b4:8b:fa:ce:90:d2:b7:30:c5:d0:87:9e:93:2f:15:74:86:
         68:74:0e:5f:dd:10:0a:f6:7a:6a:b1:d2:63:ea:5a:1f:c8:1e:
         92:2e:b1:47:2c:7b:af:f6:33:e5:79:54:63:af:ac:66:4a:76:
         83:d1:a8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:22 2024 by rpki-client on console-ams.rpki-client.org