Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
File:                     25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json)
Hash identifier:          EvSCvvq8XVR+6uDwhmLG5PDoyomTvIUot4Q46KlR418=
Subject key identifier:   78:A5:4C:63:B5:C2:5A:D4:29:83:FF:ED:1F:0C:D0:EB:51:DB:E8:82
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F43285847C4AA1212334C1F3604AC3400
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     14048
IP address blocks:        141.225.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:12:12:33:4c:1f:36:04:ac:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=0ad22123-03cf-4843-a4fc-3c44f57aac97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:d8:77:bf:65:2d:c1:d1:82:10:b1:91:7c:
                    12:e4:16:b0:13:83:1b:85:84:dc:97:dc:db:6e:e2:
                    25:29:4e:8e:4e:01:78:84:93:dc:73:d0:58:e4:39:
                    ed:f2:5d:f2:a6:3b:5a:49:07:a3:e0:a5:d5:e1:8e:
                    87:bc:3b:06:fb:a2:c3:d7:91:0d:f8:6a:02:c8:0c:
                    cb:76:1e:2f:4a:3e:51:7c:7d:08:9c:17:d1:ea:3c:
                    e2:88:fa:78:31:7d:21:d5:85:ae:82:e9:4c:b0:db:
                    34:d7:ba:13:20:02:b9:1b:9d:c7:36:1f:39:83:0e:
                    70:0d:5b:13:44:fe:9a:e7:6a:2a:91:b7:de:96:49:
                    ff:52:af:79:64:fe:2f:98:7a:66:d9:8d:b0:7b:58:
                    ca:8b:65:54:b2:2f:8f:11:53:6e:78:6c:ee:79:57:
                    ea:54:aa:0f:ae:17:92:5f:ca:c7:cc:a3:b6:58:49:
                    0c:77:6d:a8:51:c2:62:df:f8:f9:2b:c3:96:b6:78:
                    72:ee:d8:bd:22:be:50:e9:6d:ca:cd:e1:b2:a6:94:
                    ba:ab:d5:6f:60:af:76:36:a0:7f:fd:04:02:aa:38:
                    6c:bd:0d:ac:8d:35:18:bf:b7:ee:03:e7:dc:9b:3c:
                    b9:0c:a6:39:94:36:e6:56:ff:5b:99:46:dd:ab:44:
                    18:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A5:4C:63:B5:C2:5A:D4:29:83:FF:ED:1F:0C:D0:EB:51:DB:E8:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:15:45:cf:1f:bc:22:f1:72:8f:2c:fe:54:eb:42:7d:72:
         cf:53:b9:da:92:1c:7e:c4:99:e8:f7:b5:d7:ea:17:d6:bd:8e:
         f1:2a:a1:28:7b:19:29:39:a9:b6:68:49:57:5f:e1:66:74:db:
         18:c4:07:a6:8c:ad:11:03:b7:6a:b7:30:44:ff:26:f7:b9:02:
         eb:8f:8a:df:d9:3c:42:bc:5a:f7:46:e6:66:0c:d0:fb:4b:5c:
         3a:ee:0d:44:19:4f:58:ee:27:7f:b2:4b:d5:f3:33:07:a5:11:
         ca:d9:78:92:4b:b1:8a:70:d5:63:ea:de:24:28:23:7b:ea:28:
         59:2d:0b:74:1c:2f:d6:c0:25:20:f9:34:a8:4e:a8:ef:6b:8f:
         25:7a:0a:7c:80:83:8e:67:bb:51:3d:6a:3a:24:f8:15:52:8b:
         52:26:7a:b9:2c:59:15:4d:0f:f8:01:4b:96:66:d7:85:7e:d1:
         db:c1:e2:3f:a5:73:92:6a:a1:8b:35:f5:d0:17:97:4e:7e:45:
         2a:d0:c8:1b:fb:d9:30:14:ed:7b:cc:c7:15:9c:7e:8b:3a:ec:
         9e:6c:88:da:11:d7:7b:a5:d4:b4:64:37:3a:9c:6c:e6:cc:35:
         c8:5e:dc:18:61:c7:cd:b1:97:ac:66:99:9c:81:88:ad:d2:f6:
         64:0c:30:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:37:33 2024 by rpki-client on console-ams.rpki-client.org