Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b028f241-a6c2-3794-b900-b1660479bfca.roa
File:                     b028f241-a6c2-3794-b900-b1660479bfca.roa (raw, json)
Hash identifier:          wVj73lq4R8NujPXUuaYtuowsdlTOwXzsEy9QlPOdW7M=
Subject key identifier:   20:1F:60:38:AA:BB:88:80:AA:FC:F2:4A:BC:B3:7C:C9:0A:B7:1B:15
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285847C3448EDC6213905B05AF3040
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b028f241-a6c2-3794-b900-b1660479bfca.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     13768
IP address blocks:        65.39.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8e:dc:62:13:90:5b:05:af:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=05a07480-ac47-455f-9479-c17d29f34911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:a0:fc:64:4a:3b:5f:01:ea:9a:39:9f:4d:
                    10:86:94:8f:9e:dc:e8:ea:67:7f:24:b7:4a:1a:0e:
                    ac:33:c9:19:ef:58:39:f5:82:85:56:ed:71:e8:7d:
                    3f:5f:b8:65:66:19:75:14:22:b1:25:4a:c7:56:e9:
                    da:14:ef:9a:c7:d9:d2:56:a3:6f:99:5a:cc:6a:a7:
                    7e:dd:80:9c:a8:14:0d:2a:92:b1:33:3d:b2:28:71:
                    d2:07:c3:d8:71:ac:52:0a:61:b4:a1:88:7a:9d:5a:
                    c7:46:71:60:ba:54:20:d9:01:8b:ac:ce:a4:b6:4a:
                    e8:d5:cc:26:c6:7b:9f:91:24:1d:f3:72:77:12:30:
                    05:ee:65:03:c1:a7:80:55:c8:4a:a7:e0:73:fd:b5:
                    3f:b5:73:fb:e8:2c:bd:bd:a1:ad:d3:37:28:a0:37:
                    fd:9d:cb:7f:3f:21:e9:10:f0:cc:61:e4:9e:1b:d7:
                    40:59:b4:41:45:0d:ed:66:46:1d:43:f6:c2:40:d4:
                    6d:6e:aa:f4:8d:36:c6:38:e7:73:3a:0e:75:59:cb:
                    26:33:29:26:48:8f:d0:5e:ac:dd:53:71:39:2d:02:
                    b1:6d:ac:8c:ab:45:55:39:2f:12:03:9a:88:15:86:
                    1e:33:fb:90:93:a4:fa:04:0e:85:c0:a9:bb:0d:76:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:60:38:AA:BB:88:80:AA:FC:F2:4A:BC:B3:7C:C9:0A:B7:1B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/b028f241-a6c2-3794-b900-b1660479bfca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:78:f8:2e:2b:fe:c6:62:97:c1:ca:b8:95:f7:f8:85:05:0e:
         91:19:b6:22:b8:da:37:73:e7:e4:0d:8b:37:cf:b9:c8:45:b6:
         c6:d5:ae:00:b3:0f:06:c8:cb:32:8c:3e:fd:cf:0a:5f:20:43:
         45:94:7f:02:52:f1:45:e9:ac:79:43:5d:1d:4c:13:e2:af:1a:
         4b:b7:0a:93:7f:55:94:de:1e:0e:e3:eb:02:9c:4b:5b:63:54:
         0a:40:1d:08:79:16:37:fe:35:da:5c:12:0d:bd:6a:61:44:59:
         55:3c:3c:79:b0:4d:80:bd:f0:53:c9:48:22:9b:73:ba:85:21:
         16:c3:99:60:72:56:7b:30:65:8a:e7:db:08:b8:16:62:b4:8a:
         4e:dd:3e:e1:9f:e6:5e:da:b7:f4:1c:5c:1a:17:90:03:07:55:
         b4:d4:9b:5b:85:43:61:86:07:43:5b:72:bd:da:89:76:85:36:
         a1:9a:d2:be:04:2a:d2:6a:2d:de:fd:78:d1:b0:23:76:8b:c6:
         51:33:af:a8:d1:e8:65:60:52:ec:af:2d:4b:6e:57:04:e4:d1:
         b6:80:82:ef:94:91:69:0d:62:d3:66:28:45:e0:4a:b1:de:60:
         b4:75:5f:de:ab:eb:e3:dc:da:34:80:c7:52:e6:a5:86:af:02:
         0c:01:84:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:35:52 2024 by rpki-client on console-fra.rpki-client.org