Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
File:                     3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa (raw, json)
Hash identifier:          2SCBYjZ9krz3kITIbWiBo8pA/RiTj3GKNdct0n6NrMo=
Subject key identifier:   07:00:10:39:53:08:D8:47:D4:5B:62:51:7E:B7:3A:9F:B4:67:C8:84
Certificate issuer:       /CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
Certificate serial:       010D0C9F43285847CE6F4EDC88FEF6F662A00F70
Authority key identifier: A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     21840
IP address blocks:        65.87.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4e:dc:88:fe:f6:f6:62:a0:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=983e2768-12a4-4ae2-92f7-025d3f3bd5f3
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=e414a675-03dd-496a-a134-0ed410ec1f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:79:97:2a:0b:d7:54:21:ea:55:af:7f:d1:
                    b6:05:ef:91:e7:7d:61:5d:1c:df:e6:c8:5f:49:b7:
                    1e:09:95:f3:f2:23:1e:d7:75:69:dc:87:18:72:ba:
                    ff:8f:e9:28:0a:f1:f6:ab:b3:14:e7:de:77:52:15:
                    41:84:36:e4:0b:fe:ef:74:e1:8c:d7:0e:5b:db:89:
                    1f:88:74:0d:34:47:f0:e7:c6:57:90:90:db:b1:e0:
                    27:4e:a5:f3:5b:26:57:67:e2:e1:8f:ab:23:74:28:
                    8f:e1:8b:b2:ab:0e:35:2e:09:70:9b:2c:73:49:4d:
                    e6:f9:2d:da:f4:72:d6:2d:34:5f:19:f9:33:78:fa:
                    4e:48:f4:16:37:0f:4e:9f:00:a6:07:ca:58:fd:1b:
                    91:59:3d:2e:dd:1f:e0:49:aa:57:34:5e:ef:b1:4e:
                    bc:65:0d:22:dd:8f:33:a9:55:50:22:eb:95:e4:3c:
                    40:92:a3:c2:39:58:09:7a:68:fe:c1:41:0e:3b:84:
                    e1:ac:64:26:8c:df:e6:9b:3e:0b:7b:9a:46:ff:d7:
                    51:a3:ca:4a:38:fe:d0:55:e3:9a:a0:d1:06:d8:13:
                    f4:d8:97:0f:db:2a:0d:92:54:69:76:76:f7:d5:35:
                    f1:83:a8:10:40:d7:34:ac:a2:61:f1:b1:4b:a2:b2:
                    fb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:00:10:39:53:08:D8:47:D4:5B:62:51:7E:B7:3A:9F:B4:67:C8:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/3d48e574-2ad6-3ec9-9fa5-e869a1850174.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.crl

            X509v3 Authority Key Identifier:
                keyid:A2:B6:32:80:80:D9:88:65:63:F2:2F:F9:63:EE:A0:EA:C0:55:93:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/983e2768-12a4-4ae2-92f7-025d3f3bd5f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.87.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:99:18:5d:79:4b:5e:c5:50:bd:72:07:c8:70:db:ea:b7:a8:
         40:5a:1b:70:d3:76:46:c9:9d:f5:48:da:e7:38:3e:fb:6c:e7:
         62:31:86:a6:a2:28:cc:84:f5:ca:d5:b1:2c:61:87:09:6d:6b:
         24:36:a5:83:9a:5c:4e:fc:a4:b1:78:1b:e8:e3:39:7f:6b:04:
         80:5c:8c:12:6b:26:07:80:2a:60:e3:70:56:09:c8:7b:d2:88:
         a5:54:4a:ba:df:d3:db:11:ac:e2:1e:5e:5c:20:e0:c3:ae:d5:
         7a:c5:60:d6:cf:8e:23:01:38:7d:5c:50:f5:ee:c5:de:73:13:
         d2:c9:b6:0d:ca:bb:32:20:8b:61:44:d6:10:38:b7:49:19:27:
         db:22:d9:0c:f9:76:89:a3:93:8a:4d:b7:69:eb:b9:3e:05:8e:
         0f:f5:2f:e2:f2:ae:8a:7e:a9:59:90:eb:ae:e8:51:a5:e0:ef:
         9f:af:7a:b3:29:63:ed:fa:72:f8:fc:6a:6a:54:80:9d:b0:40:
         0f:60:0b:64:4f:b5:b0:bd:69:2b:88:51:c1:63:11:e1:d2:32:
         51:e1:09:ae:6c:65:54:bf:21:0d:f0:f1:81:84:d5:bb:ba:20:
         19:06:0b:50:50:5a:9c:09:7d:15:99:f2:d6:09:31:16:b5:27:
         b2:9e:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:05:46 2024 by rpki-client on console-fra.rpki-client.org