Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
File:                     0dfd3e25-c4cc-3813-8714-9c669957c21d.roa (raw, json)
Hash identifier:          MxF4KzoqXo6CK5YqKPlcNH7bsKgG3jMQ3ZPLNuy13OY=
Subject key identifier:   A3:F9:38:31:80:DA:54:A7:8C:DD:AD:7D:95:34:1F:E2:D4:02:DD:0E
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858476E00FB018A4DF456F4866900
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa
Signing time:             Fri 04 Oct 2024 13:00:42 +0000
ROA not before:           Fri 04 Oct 2024 13:00:42 +0000
ROA not after:            Thu 02 Jan 2025 14:00:42 +0000
asID:                     54004
IP address blocks:        65.51.0.0/20 maxlen: 24
                          65.51.16.0/21 maxlen: 24
                          65.51.24.0/22 maxlen: 24
                          65.51.30.0/24 maxlen: 24
                          65.51.32.0/19 maxlen: 24
                          65.51.48.0/20 maxlen: 24
                          65.51.64.0/18 maxlen: 24
                          65.51.80.0/20 maxlen: 24
                          65.51.96.0/20 maxlen: 24
                          65.51.112.0/20 maxlen: 24
                          65.51.128.0/17 maxlen: 24
                          65.51.144.0/20 maxlen: 24
                          65.51.160.0/20 maxlen: 24
                          65.51.176.0/20 maxlen: 24
                          65.51.192.0/20 maxlen: 24
                          65.51.208.0/20 maxlen: 24
                          65.51.224.0/20 maxlen: 24
                          65.51.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6e:00:fb:01:8a:4d:f4:56:f4:86:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct  4 13:00:42 2024 GMT
            Not After : Jan  2 14:00:42 2025 GMT
        Subject: CN=ce72b55c-2951-43fb-864c-b6b5cb2572e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:2f:59:c7:b3:43:51:c3:1e:71:1a:69:4b:
                    22:a2:07:56:63:da:e9:42:5e:b4:cc:db:70:d6:34:
                    46:a5:5a:3e:df:43:bd:02:46:10:63:2e:23:de:3f:
                    15:93:34:fc:3d:d8:d4:05:7c:75:3b:33:9e:1a:e0:
                    d4:ae:cd:84:45:8e:80:80:16:b2:a2:49:95:e4:53:
                    94:90:ff:77:73:2e:8b:e7:3c:09:a0:4b:93:6a:7f:
                    64:08:92:cf:e0:2e:a0:61:0e:bc:ee:80:1d:c4:3a:
                    1d:da:47:ef:3e:50:75:0d:d5:75:7e:25:bd:20:81:
                    13:82:64:8f:44:aa:05:ec:cb:7d:e7:fe:19:f9:ff:
                    2e:7b:f1:ff:79:89:ef:df:52:0c:a4:27:bf:a8:6f:
                    96:ea:78:f2:26:1d:bd:b5:95:be:d0:63:8b:23:4e:
                    10:21:d8:42:26:55:5d:e1:61:f6:81:d7:bb:aa:f4:
                    7e:38:39:05:35:aa:2f:6c:88:ee:30:f4:17:bc:e1:
                    7e:36:db:5a:cd:65:1d:cb:80:7e:44:40:d8:08:98:
                    30:fe:bc:c1:8d:5d:09:67:ad:05:82:c6:db:e6:fa:
                    ea:9e:a4:c5:23:3f:9a:09:cd:85:21:d5:f7:93:53:
                    cb:04:9d:77:43:3a:da:da:be:78:89:2a:08:71:69:
                    e3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F9:38:31:80:DA:54:A7:8C:DD:AD:7D:95:34:1F:E2:D4:02:DD:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/0dfd3e25-c4cc-3813-8714-9c669957c21d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.0.0-65.51.27.255
                  65.51.30.0/24
                  65.51.32.0-65.51.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:93:57:0b:6f:6d:c2:a1:87:bc:af:45:fc:34:3a:38:18:cc:
         54:98:67:2f:df:48:0c:df:f5:48:27:0e:31:34:7f:bb:8e:71:
         a5:40:ad:46:74:5e:0f:c6:57:21:ac:29:7d:92:a7:71:9b:23:
         49:d5:30:47:ed:a0:e3:f0:f9:73:41:24:e4:21:38:21:86:6d:
         52:dc:eb:b7:e0:af:3e:9e:cc:4b:43:cf:38:89:97:c2:85:f8:
         82:9c:f0:99:2c:88:09:f9:b7:de:e7:1d:77:08:3c:bd:4c:20:
         de:7b:85:78:17:be:c8:df:af:28:a9:6b:92:72:75:91:bc:67:
         07:03:9b:ac:6c:60:08:8a:ec:91:64:f5:4e:14:0b:bc:b1:a6:
         84:32:5f:62:bd:ae:72:b0:b2:8b:77:4d:26:35:7b:66:22:d9:
         8e:22:c6:ea:de:81:70:7a:f0:b6:2d:01:98:f4:cd:5c:58:f4:
         d5:2e:ff:73:d6:c0:48:a0:e1:0f:3e:ad:49:e2:c0:b6:ab:d0:
         f0:13:3c:69:fe:7a:84:b5:ce:f5:1a:26:e2:fb:3e:11:4b:93:
         b4:5f:bb:85:70:2d:fe:b2:f0:c6:ca:2a:61:d3:e9:3e:b0:70:
         74:95:31:59:0e:5b:e9:0e:13:a8:e5:99:24:ad:ab:d5:55:76:
         79:6d:cd:5c
-----BEGIN CERTIFICATE-----
MIIGXTCCBUWgAwIBAgIUAQ0Mn0MoWEduAPsBik30VvSGaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI0MTAwNDEzMDA0MloXDTI1MDEwMjE0MDA0MlowLzEtMCsGA1UEAxMk
Y2U3MmI1NWMtMjk1MS00M2ZiLTg2NGMtYjZiNWNiMjU3MmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaUvWcezQ1HDHnEaaUsiogdWY9rpQl60zNtw
1jRGpVo+30O9AkYQYy4j3j8VkzT8PdjUBXx1OzOeGuDUrs2ERY6AgBayokmV5FOU
kP93cy6L5zwJoEuTan9kCJLP4C6gYQ687oAdxDod2kfvPlB1DdV1fiW9IIETgmSP
RKoF7Mt95/4Z+f8ue/H/eYnv31IMpCe/qG+W6njyJh29tZW+0GOLI04QIdhCJlVd
4WH2gde7qvR+ODkFNaovbIjuMPQXvOF+NttazWUdy4B+REDYCJgw/rzBjV0JZ60F
gsbb5vrqnqTFIz+aCc2FIdX3k1PLBJ13Qzra2r54iSoIcWnjrwIDAQABo4IDbzCC
A2swHQYDVR0OBBYEFKP5ODGA2lSnjN2tfZU0H+LUAt0OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvMGRmZDNlMjUtYzRjYy0z
ODEzLTg3MTQtOWM2Njk5NTdjMjFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAsDAwBBMwME
AkEzGAMEAEEzHjALAwQFQTMgAwMCQTAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO
AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv
cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKJNXC29twqGHvK9F/DQ6
OBjMVJhnL99IDN/1SCcOMTR/u45xpUCtRnReD8ZXIawpfZKncZsjSdUwR+2g4/D5
c0Ek5CE4IYZtUtzrt+CvPp7MS0PPOImXwoX4gpzwmSyICfm33ucddwg8vUwg3nuF
eBe+yN+vKKlrknJ1kbxnBwObrGxgCIrskWT1ThQLvLGmhDJfYr2ucrCyi3dNJjV7
ZiLZjiLG6t6BcHrwti0BmPTNXFj01S7/c9bASKDhDz6tSeLAtqvQ8BM8af56hLXO
9Rom4vs+EUuTtF+7hXAt/rLwxsoqYdPpPrBwdJUxWQ5b6Q4TqOWZJK2r1VV2eW3N
XA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org