Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
File:                     6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa (raw, json)
Hash identifier:          SXKoqBu3WiyzPz2BuaBCRY7A0CMSf9zp0j2rRCoaVWY=
Subject key identifier:   2C:EC:8F:ED:3D:F4:39:BD:F2:6D:B0:5C:EC:3E:23:01:51:5A:BC:60
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F43285847C4AA11D3466920E703DDFFC0
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
Signing time:             Mon 04 Nov 2024 14:00:48 +0000
ROA not before:           Mon 04 Nov 2024 14:00:48 +0000
ROA not after:            Sun 02 Feb 2025 14:00:48 +0000
asID:                     14048
IP address blocks:        141.225.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c4:aa:11:d3:46:69:20:e7:03:dd:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Nov  4 14:00:48 2024 GMT
            Not After : Feb  2 14:00:48 2025 GMT
        Subject: CN=909881c5-8673-43f3-88eb-627398eb2a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:85:2f:f6:d5:5e:7f:2d:b6:22:4f:60:d7:3e:
                    f6:de:a5:71:c3:70:89:6e:54:3a:70:de:73:cc:29:
                    78:40:97:88:cc:45:26:af:ca:70:cb:57:86:88:95:
                    a7:d7:15:0b:7f:d4:9a:23:d2:eb:f9:f2:94:ee:7f:
                    58:33:fb:f6:f2:fd:b2:4a:ac:0c:5f:0f:b3:a2:5a:
                    a8:e0:80:f3:4a:2e:f5:24:bb:7a:5c:20:26:05:49:
                    ca:8d:14:9a:af:fd:56:be:56:a6:87:2c:1d:ab:90:
                    33:da:28:7f:74:64:ef:0b:92:d2:f6:19:3b:24:7b:
                    ae:97:2f:3f:4c:80:15:a1:b5:e3:73:87:48:bf:02:
                    60:2e:ea:55:2f:bb:19:37:fa:31:7d:d7:da:0e:ff:
                    da:74:d9:3d:ca:6f:6b:18:1d:11:ec:25:5e:dc:59:
                    aa:08:33:e4:8b:c1:7a:3c:7b:87:91:bf:e7:75:79:
                    50:62:85:dd:bb:1f:61:c3:19:13:0e:0d:c2:cf:c4:
                    54:58:0a:4b:51:5f:cc:b8:6c:8a:c7:6b:a8:a1:79:
                    45:40:f9:e0:60:ef:98:a2:bb:75:87:e2:07:ce:97:
                    4d:60:5e:ff:b5:6d:be:23:4e:d4:07:b0:0b:61:7a:
                    c2:c3:69:62:76:63:f1:29:e1:8a:d3:8f:93:84:d4:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:EC:8F:ED:3D:F4:39:BD:F2:6D:B0:5C:EC:3E:23:01:51:5A:BC:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7d:ff:d7:e6:a3:78:f4:21:52:90:19:b6:45:ee:69:f9:00:
         27:bd:2c:8c:7e:9e:8e:ed:a2:d0:80:41:3d:09:08:74:ac:21:
         ce:1e:c4:1b:60:79:39:cc:72:bd:fb:c3:5b:4b:67:2b:26:ed:
         c1:89:a2:d9:16:22:58:7a:b0:9e:56:f1:8c:c2:14:77:a1:70:
         98:78:e8:f4:2c:95:f3:01:c2:12:b9:88:e1:7a:eb:a8:94:2a:
         47:fb:7c:8a:ae:ac:7d:e0:9d:9b:18:e5:d1:84:56:c6:34:cf:
         4c:47:26:74:98:16:22:f7:47:75:fd:f0:62:3b:04:b6:04:86:
         bc:a5:09:49:f8:b5:87:fc:d8:07:17:09:f0:90:65:f9:97:da:
         77:29:df:f5:99:4e:ed:e4:78:c5:3f:94:53:e9:ff:7b:6e:7c:
         e6:50:8b:cc:1d:31:a1:08:55:4c:16:54:d8:9c:9a:2c:4e:88:
         a9:72:5a:c1:49:22:1d:8f:6b:d1:8a:53:2f:9e:0e:56:ea:06:
         f5:e1:f7:d8:98:ac:f0:4a:50:44:22:fc:9f:b9:93:af:0d:44:
         d0:56:fc:0a:bf:7d:54:69:51:8a:79:6f:13:0b:3d:f0:3a:33:
         10:d4:f1:bd:c9:4a:b1:55:eb:40:f3:73:ed:06:53:7f:a6:02:
         ea:6b:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:19:11 2024 by rpki-client on console-ams.rpki-client.org