Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa
File:                     1013b58b-c978-32db-a484-4f958d5cd161.roa (raw, json)
Hash identifier:          NBZ7Dxl9R/LFnQYAM+b0cQVn5MNFDlmCeZ8qQGoxy9Q=
Subject key identifier:   CD:C8:AA:73:DC:B2:43:7D:B5:A8:2F:25:3F:2B:DB:82:93:0A:B0:EA
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F4328584756460625313116503DB03880
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa
Signing time:             Thu 26 Sep 2024 01:00:31 +0000
ROA not before:           Thu 26 Sep 2024 01:00:31 +0000
ROA not after:            Wed 25 Dec 2024 02:00:31 +0000
asID:                     5650
IP address blocks:        65.87.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:56:46:06:25:31:31:16:50:3d:b0:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Sep 26 01:00:31 2024 GMT
            Not After : Dec 25 02:00:31 2024 GMT
        Subject: CN=c2da1907-e23f-4b9c-8e8b-773a1e9c2f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:26:8a:23:24:66:7e:ab:6d:bc:4f:07:f4:
                    3d:8a:ee:ad:a0:11:3f:ee:ac:89:97:a0:7a:b9:3d:
                    db:85:43:d7:b0:cd:59:82:4d:ca:68:84:54:46:15:
                    bb:8d:e2:88:24:6a:a7:79:31:d5:9f:ab:9a:b1:f2:
                    7f:ac:94:0a:cc:39:ba:f1:9e:12:fe:d2:b8:0f:fd:
                    c1:cc:19:90:ab:d1:67:fc:a9:d3:11:b9:d0:14:d2:
                    23:e3:14:1e:80:5d:97:f0:59:a3:9d:2f:23:aa:4d:
                    f5:1a:c2:7c:9e:d5:8f:37:92:0c:90:c6:d3:05:fe:
                    d9:80:c1:12:b9:a0:f5:56:87:30:4c:16:e7:97:56:
                    74:42:e4:55:f1:f0:cc:6a:7e:83:5f:8b:14:46:44:
                    4c:28:df:31:ac:bf:e8:4c:19:ae:a9:dc:aa:35:86:
                    84:49:d6:2c:a2:8d:95:ea:1e:04:ba:c1:06:07:fc:
                    82:3c:a5:59:bd:30:2b:fc:bf:ba:20:f3:f4:36:51:
                    84:df:32:00:ef:bc:b6:ed:4a:04:c6:1b:c3:d1:b3:
                    12:e2:83:bf:21:a4:d4:5f:cb:1a:c5:88:e3:bd:91:
                    1d:3f:6c:ba:4b:24:9b:86:a2:84:20:28:a1:0c:b7:
                    a9:b1:76:bc:6d:42:d8:bf:11:e3:f7:82:40:29:ca:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C8:AA:73:DC:B2:43:7D:B5:A8:2F:25:3F:2B:DB:82:93:0A:B0:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/1013b58b-c978-32db-a484-4f958d5cd161.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:76:b9:0f:b8:88:1c:7e:80:d3:43:b3:d2:49:a3:79:25:62:
         31:a3:85:b9:59:d6:50:ab:01:cd:ec:45:1d:4c:15:89:7c:39:
         11:85:82:ff:ad:08:49:db:2f:7b:d2:88:a3:63:5f:c3:2d:7e:
         76:0c:0b:af:d5:71:0d:6f:c4:a5:df:f1:7d:4b:1c:e3:1a:f2:
         2a:be:d3:2c:06:c3:4a:89:82:7c:1c:ba:65:83:b1:85:b5:71:
         d4:5a:92:73:4c:20:58:35:03:94:2b:4f:d1:53:32:b7:6a:b2:
         07:1a:ee:bb:14:d3:e0:ab:79:a1:18:96:d5:67:21:16:72:e7:
         1f:08:b2:eb:0f:56:b3:a2:82:37:16:d4:08:99:1b:d1:29:ac:
         39:07:e9:fe:6c:eb:db:6b:be:2d:67:ff:06:e0:6d:5c:d4:68:
         a7:ca:eb:f8:91:a7:76:18:32:78:50:e0:c0:89:ae:46:79:63:
         e2:cc:4d:29:8e:1e:5c:13:0c:bc:48:c2:3f:07:df:8a:c3:37:
         c2:27:af:19:70:9b:38:ac:91:13:8d:4a:d9:b4:6f:25:9f:d7:
         6a:62:71:a7:04:2c:4a:a4:9e:ae:03:62:0c:a1:a2:8e:00:e9:
         24:87:85:24:ab:cc:3f:ee:57:da:e2:c1:6a:de:74:80:34:cd:
         c7:2e:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org