Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa
File:                     07b0efa4-7afd-395e-bda2-4047770c5bc3.roa (raw, json)
Hash identifier:          1e/E+FFAuETqBYgPdBq/pR3EpEjdItIXSXioRjhYmCw=
Subject key identifier:   7A:F1:6A:5A:51:7D:88:0A:BA:8E:F4:56:3E:0A:AC:21:20:72:8D:92
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285847927853AC0582047F3F5D54E0
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa
Signing time:             Thu 17 Oct 2024 14:30:25 +0000
ROA not before:           Thu 17 Oct 2024 14:30:25 +0000
ROA not after:            Wed 15 Jan 2025 15:30:25 +0000
asID:                     214411
IP address blocks:        65.87.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:78:53:ac:05:82:04:7f:3f:5d:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Oct 17 14:30:25 2024 GMT
            Not After : Jan 15 15:30:25 2025 GMT
        Subject: CN=7bc13d14-baaf-4cfb-b434-b48affe87f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:df:9c:ea:46:d2:6e:a6:91:ee:4b:bd:22:73:
                    28:fb:35:e3:12:23:d7:85:8b:b6:de:cc:c4:f9:4d:
                    88:7e:bb:9b:de:db:31:05:89:06:0b:e0:ff:bd:cd:
                    78:79:96:bf:91:5d:90:27:bf:57:54:fb:5a:27:88:
                    d9:4c:54:08:e0:e9:5b:00:69:64:51:67:22:7c:bd:
                    1b:38:b7:60:1a:9b:18:be:db:70:28:6c:28:29:f2:
                    64:d0:12:f3:b8:b8:e1:fd:4c:6b:86:d1:5e:df:e2:
                    09:cd:84:20:b5:db:b2:84:69:64:7a:c1:8d:68:2a:
                    99:0a:68:53:0e:ea:09:fc:15:76:d4:12:e6:80:a8:
                    06:4f:b9:fd:e9:ed:92:e4:89:0c:c0:04:cd:d1:48:
                    e3:e9:2e:2d:e9:56:e5:7a:aa:2c:ff:57:0c:b3:12:
                    ae:83:e6:0d:e3:57:29:45:d9:af:3a:b7:b1:09:aa:
                    6b:31:c7:a0:c7:bc:ae:2d:db:1a:26:25:c9:0e:6f:
                    65:7f:67:33:68:a7:48:ef:39:56:bc:1f:fa:4f:84:
                    e4:cf:f3:8c:e1:9c:27:af:f7:f8:da:13:59:dd:1f:
                    32:96:a5:64:55:fb:0a:1b:5b:55:dd:c7:79:d0:2e:
                    19:2c:b1:69:b7:9c:a3:5a:8f:00:34:1a:fa:d9:e4:
                    33:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F1:6A:5A:51:7D:88:0A:BA:8E:F4:56:3E:0A:AC:21:20:72:8D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/07b0efa4-7afd-395e-bda2-4047770c5bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2f:ba:61:7e:40:6a:61:bc:d2:5e:fc:7e:c2:6c:34:ed:1d:
         f6:6a:c9:64:5e:e7:8b:74:78:ce:f8:54:98:4e:ee:65:32:38:
         bd:07:49:df:1c:ab:a8:d5:95:f0:35:b1:e0:42:92:c1:18:a8:
         2b:6c:c8:ca:33:db:68:eb:60:96:44:35:36:6f:07:94:97:1d:
         18:ab:b7:c5:7a:8f:02:72:95:db:04:d0:1a:29:dd:01:af:16:
         d3:bc:a5:f4:4b:97:b5:b7:57:bb:b2:34:e4:4f:f0:76:15:c3:
         fd:d1:44:e7:26:e9:52:23:02:a0:09:8d:91:b6:6b:97:b1:a5:
         8a:15:2b:0f:5f:c9:42:f9:a2:f5:5a:84:c8:b8:4c:fa:e6:1b:
         43:e3:56:1f:85:62:f8:1c:f9:cb:9c:6c:aa:65:60:fb:b8:6b:
         9b:06:a2:68:b0:30:95:3a:5d:89:ee:61:ea:05:97:b3:16:50:
         27:bb:ac:7a:31:28:93:43:28:8a:d3:88:1e:3e:ec:f4:13:fd:
         3c:6c:8a:7f:64:21:3b:35:39:56:82:66:f0:37:3e:84:14:59:
         0e:55:93:24:c2:f2:10:6d:1b:c1:de:c0:bd:98:c1:21:35:e9:
         62:50:fc:d5:55:ee:e5:50:41:22:37:53:44:1d:02:ee:32:40:
         96:76:88:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:47:03 2024 by rpki-client on console-fra.rpki-client.org