Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
File:                     83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa (raw, json)
Hash identifier:          b21otQW2RDl0guk9fMFhhCR6Wb/AVF0ZHPRntPnw8PE=
Subject key identifier:   18:DF:03:02:B0:76:33:F8:24:1C:5B:A3:91:9D:A0:9A:6C:E7:DB:AC
Certificate issuer:       /CN=81fb7701-7454-4b9b-810d-3d604f504467
Certificate serial:       010D0C9F432858475BDB6E717C49C8F161668CA0
Authority key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     16509
IP address blocks:        199.65.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:6e:71:7c:49:c8:f1:61:66:8c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81fb7701-7454-4b9b-810d-3d604f504467
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=55768a01-b22b-4e19-902c-8967e73bd0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:e4:cc:fe:18:e7:79:8c:81:22:fd:c7:e5:
                    e1:0c:ce:15:f0:7c:4f:f2:f5:89:e2:14:9e:bd:3a:
                    0e:f4:21:1e:9b:5b:70:f7:0f:79:4a:32:1e:d1:92:
                    ab:41:66:f6:56:96:4e:91:4f:d9:39:c1:0c:39:b6:
                    4b:e1:80:ba:28:82:af:78:ce:ea:c0:08:c0:ac:f8:
                    27:4d:4e:10:ec:3a:a7:fd:38:39:fc:af:5c:58:15:
                    59:83:2c:7f:73:da:88:b2:4c:86:d3:26:27:a7:e5:
                    fa:e5:6e:21:c6:39:e7:0b:02:61:70:86:8a:45:b2:
                    42:98:1e:c6:d8:7e:82:46:cb:4c:10:f5:3c:8c:2e:
                    be:ea:00:7b:50:c2:61:74:c2:aa:fa:01:bd:45:f3:
                    e6:ac:68:e5:9c:32:f8:98:bb:01:e0:ce:9a:09:a2:
                    ed:13:f4:e7:ed:37:29:d3:54:d8:a8:8b:06:d3:e6:
                    fb:85:76:97:ca:4b:62:9c:75:2a:05:27:90:34:a5:
                    fb:9f:f7:ce:76:7e:8c:f2:02:94:cf:b5:aa:c3:99:
                    9d:1e:32:6c:a7:c4:0f:c3:38:0c:5e:c4:a0:09:20:
                    56:f9:66:27:e0:3d:28:fc:67:0b:e7:73:7a:bd:bc:
                    a9:bc:ae:73:67:f3:5b:22:82:30:ec:86:5d:a1:c2:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:03:02:B0:76:33:F8:24:1C:5B:A3:91:9D:A0:9A:6C:E7:DB:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/83cac2c6-93a0-3e70-81e7-0153ee9608ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.crl

            X509v3 Authority Key Identifier:
                keyid:46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.65.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:56:38:b4:71:c1:3d:9a:f6:8d:27:a6:4b:1b:c1:e3:ff:a3:
         ed:d2:f0:4c:1c:3a:24:7f:82:4b:5b:a3:50:70:d5:d0:95:bd:
         d6:e5:38:3d:e2:00:85:19:3f:5f:22:20:b3:90:56:bf:08:46:
         67:02:cf:c6:f3:f2:9c:ee:fe:0e:19:77:ab:83:8b:4b:13:33:
         52:b7:f8:68:a2:e7:ee:1b:0c:7a:12:12:82:d6:86:1f:70:9c:
         88:88:d7:73:4e:e6:24:35:17:25:cb:7c:bf:75:32:37:ef:61:
         82:78:9d:bf:f5:a0:23:04:74:77:5b:99:7a:b2:64:56:5f:ca:
         15:a5:49:96:6a:ed:24:f0:93:24:06:e6:0d:f5:7a:6b:e2:e2:
         75:ba:46:18:33:8a:a8:91:19:43:32:aa:3e:54:17:c3:5c:bd:
         e3:c5:49:5e:64:46:ae:89:b7:92:29:42:e8:12:1d:59:b3:49:
         d4:16:fa:70:31:5b:cf:d8:4e:be:b6:8e:aa:93:2d:ea:a0:8b:
         ac:97:46:d2:d8:1a:1c:31:f1:96:ef:05:24:33:90:b4:27:20:
         f8:63:dc:d4:95:98:1e:c6:c6:7e:01:25:9a:01:35:7e:b4:86:
         0f:4d:ca:0c:47:96:f3:09:0c:ad:04:0a:c5:98:19:1e:89:87:
         e1:a6:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:33:46 2024 by rpki-client on console-fra.rpki-client.org