Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa
File:                     956b6b61-3804-37bd-98c8-3d28df08e0f7.roa (raw, json)
Hash identifier:          XAu8lDL0MNdxSHMlmQX3aF+IwNWYsurQs3YFeQXFg9U=
Subject key identifier:   C6:31:47:D9:3D:B3:44:CD:6E:24:80:6C:C0:A6:E7:E9:6D:1D:6D:AD
Certificate issuer:       /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
Certificate serial:       010D0C9F43285845A15E0DB0424A60047F88CB50
Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     400032
IP address blocks:        165.140.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:0d:b0:42:4a:60:04:7f:88:cb:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=9f71936c-00be-4c03-87fe-677510b792d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:6c:61:59:c6:2f:6a:fa:cd:e5:25:fe:7d:
                    5a:2d:3b:8c:b0:04:5d:59:21:2f:82:c0:ac:f0:3f:
                    8b:65:06:06:d7:b6:c9:83:89:91:7d:a6:4e:5f:16:
                    d1:61:13:dc:c3:44:ac:32:82:e5:05:ca:d2:5f:7e:
                    36:4e:18:c5:fd:8a:8a:47:1f:b5:32:c4:b5:7b:89:
                    06:ec:94:63:9d:d3:f6:9c:38:97:64:a6:6f:74:e4:
                    c3:d3:a4:0a:00:fd:9d:2b:ba:83:36:73:82:48:ac:
                    5f:3a:88:b3:b7:8f:51:b7:5c:b7:3e:64:f4:23:18:
                    87:b6:f0:5c:b3:55:4a:d9:49:de:7a:e1:fd:9c:fa:
                    1c:f5:1d:0b:6a:c6:62:b5:e2:0b:79:6f:8f:77:da:
                    1a:b8:5e:d7:24:cc:de:7f:fb:08:56:ec:b3:96:92:
                    79:72:01:f8:9b:a9:86:89:cc:2d:b4:36:2e:79:87:
                    7b:60:ed:cb:e2:4d:5e:5c:fb:54:f9:27:2a:f5:0d:
                    18:c6:ff:59:a5:93:f7:22:f3:6e:ad:43:2c:16:1c:
                    c6:a7:73:54:74:48:2a:82:88:06:b3:9b:be:53:75:
                    54:ca:83:65:39:59:0d:75:ae:52:9c:92:a9:d1:ec:
                    f0:b9:57:31:99:71:12:02:36:dd:f1:e3:b6:ce:5d:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:31:47:D9:3D:B3:44:CD:6E:24:80:6C:C0:A6:E7:E9:6D:1D:6D:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/956b6b61-3804-37bd-98c8-3d28df08e0f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:c2:de:ef:a1:65:c2:12:cf:a0:0b:dc:25:70:64:bb:37:
         87:cc:59:3c:a6:d3:4d:24:f5:26:6e:24:94:cd:5d:fc:6f:d0:
         5c:1f:93:4e:93:c6:0f:11:79:31:bb:02:8b:bf:03:b6:00:79:
         84:db:23:af:2d:c5:fe:49:d7:9a:19:2e:18:e4:23:31:44:12:
         c5:48:e4:83:89:05:62:74:1d:27:14:24:56:91:2e:4b:e1:1b:
         90:b5:92:6f:de:5e:12:08:98:df:47:cc:df:39:35:31:d7:9c:
         9a:e1:2a:61:40:3b:85:d2:e9:a9:7f:07:bb:53:9b:bc:1d:f7:
         b1:0c:de:8f:b6:13:47:75:d7:c5:77:1b:48:d6:d4:7a:7f:4f:
         1b:7a:d4:1d:09:90:45:ac:d1:26:f7:b1:85:09:d1:93:29:07:
         d0:e0:40:dd:45:96:b5:ca:26:d2:c0:33:78:b7:71:89:42:e5:
         5d:e8:b9:f5:0d:ac:e1:9d:b8:75:f4:99:cd:12:4c:86:b9:d2:
         b1:31:d8:e0:22:bf:09:60:28:ff:98:ee:8b:2d:f6:10:3c:8d:
         04:50:1e:9c:43:24:d1:ae:63:10:7a:8e:84:84:80:1a:a7:6b:
         cd:86:e2:c0:94:b5:e4:64:7d:25:b6:c8:66:ea:67:7c:f6:50:
         4a:c5:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:08:52 2024 by rpki-client on console-fra.rpki-client.org