Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
File:                     2253824c-087b-31f9-b1ec-ba694703e8de.roa (raw, json)
Hash identifier:          0zhyUkl7onFXwZcQMs3kA3P3EWCI1DpnH3mvjicu5jA=
Subject key identifier:   F9:67:22:81:D6:3E:70:62:AC:BC:10:D9:9F:3A:6C:0E:67:C7:5A:9D
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584733609B0C3E2D655A73B3EAC0
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     11650
IP address blocks:        65.255.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:9b:0c:3e:2d:65:5a:73:b3:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=67022721-a4fa-4fe0-b930-e0cadb7fbc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:a2:9e:1f:cc:09:71:06:c5:9f:11:7e:5c:
                    38:93:25:bd:f5:8c:f3:67:e5:13:70:23:66:6c:2d:
                    5e:10:32:1d:4f:5e:02:e1:4a:5c:07:0c:8c:5c:dd:
                    30:6d:bd:d2:5d:7b:ce:f4:31:63:cd:fb:00:d5:de:
                    c2:e9:ff:50:8c:f9:99:df:a6:21:00:65:16:15:2a:
                    76:40:10:58:45:0e:d3:1c:4c:19:0f:d7:89:9f:d8:
                    d2:94:1c:75:87:d5:3a:6f:84:79:6b:65:9d:bf:e3:
                    98:b0:d4:d5:a4:58:20:8c:02:03:cd:d0:ad:73:56:
                    ea:43:7e:4c:34:4f:7c:ba:85:b0:5d:a9:30:f5:e1:
                    f4:b5:12:37:9e:b0:2f:e3:28:6c:34:57:97:57:fe:
                    ca:22:ae:b1:23:67:2d:00:5d:b9:93:8d:3c:2f:fb:
                    28:70:60:f3:b5:31:ca:ce:25:f3:a4:9d:13:0d:18:
                    d1:88:08:a5:55:14:10:2f:74:84:e6:82:32:76:b4:
                    fb:bc:75:cf:7a:2e:5b:04:93:ce:2c:73:02:e9:f1:
                    4e:f1:23:ab:c8:1c:c6:5f:78:eb:a1:80:83:64:3e:
                    37:c9:b5:8d:18:9b:6e:80:93:f6:ce:fb:e7:d5:0f:
                    d5:b7:b2:bc:4f:18:66:98:87:f7:c4:18:b6:ff:b8:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:67:22:81:D6:3E:70:62:AC:BC:10:D9:9F:3A:6C:0E:67:C7:5A:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/2253824c-087b-31f9-b1ec-ba694703e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.255.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f6:fe:84:34:d4:32:73:d0:3b:7e:2a:74:a1:98:ca:d5:e0:
         d6:89:e9:05:2b:42:3f:5a:11:55:51:31:72:80:10:2f:c9:62:
         c3:e0:9d:d4:50:31:03:cb:99:04:00:52:d7:9d:bc:a9:f2:8c:
         ab:79:29:0c:a1:41:d3:dc:1a:12:c1:46:ee:ff:97:d8:71:3e:
         00:cb:11:3d:df:91:f8:0f:87:d0:c5:68:bc:b4:0f:a6:31:9b:
         95:90:a2:3e:2c:cc:dd:87:93:b0:7f:76:52:96:b4:d2:48:81:
         90:c7:7e:e8:1c:0d:85:fe:3c:81:fa:b6:2c:20:ad:d0:d5:b9:
         51:49:c9:08:14:8b:bb:5f:8c:ba:ce:b9:6c:7e:fc:c4:2f:01:
         bc:c2:ba:3f:14:3f:d1:cd:ea:48:ff:92:f6:07:00:24:fb:ef:
         49:2a:b6:dd:41:ed:6f:af:bd:d2:4c:53:3b:ce:6c:75:82:d1:
         b9:46:79:f8:59:ba:83:8f:40:ea:10:f3:60:84:76:a8:68:d9:
         89:a8:9f:80:62:ce:7e:57:3f:4a:a0:8e:f0:00:c1:de:fb:4e:
         6f:98:e9:19:09:45:88:92:5f:e6:96:17:96:b7:d1:47:5a:6e:
         99:3c:59:b1:1f:25:21:c4:9f:3a:30:bd:bb:72:2e:c2:85:99:
         ac:3b:50:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:22:24 2024 by rpki-client on console-ams.rpki-client.org