Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa
File:                     241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa (raw, json)
Hash identifier:          5bJSAnFf4sWlnkgJmltEofG4C8/tqmiUywnif7A7UGo=
Subject key identifier:   8B:17:DC:75:29:68:27:B8:93:4D:1A:B7:D8:69:A0:4B:D6:31:0E:40
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A15E191782913A6786068400
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     46835
IP address blocks:        65.51.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:19:17:82:91:3a:67:86:06:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=737b141b-711a-4958-805b-75d5ad9e1f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:76:9e:3b:52:04:dd:8c:90:55:7a:77:de:2c:
                    15:87:ee:3a:3d:09:f7:0e:19:0f:bb:c6:52:a0:6e:
                    f0:c6:cc:90:4a:16:22:3d:fa:42:b7:d6:b5:cc:42:
                    67:ef:87:02:76:40:92:56:ca:fc:4e:26:9e:d0:01:
                    da:da:6b:df:12:81:6f:a5:0b:da:b8:2c:e4:bd:22:
                    31:62:f4:c4:ac:12:20:6a:84:1f:f6:4b:b5:4f:3e:
                    93:09:91:f1:4a:85:22:de:67:09:3c:4c:61:78:22:
                    0d:4f:80:86:9d:bd:47:27:b4:f3:f4:55:e7:5a:7c:
                    06:7e:c8:6c:69:02:4b:28:83:44:72:2f:90:4b:3c:
                    7d:1c:7c:c2:6c:01:71:f4:34:cf:ec:f4:51:14:d4:
                    78:ab:b3:d3:b4:75:eb:5c:23:b8:30:78:12:0f:ee:
                    ba:09:7a:61:15:95:15:17:d5:1d:0e:27:31:ed:28:
                    66:a1:a2:68:47:0f:e7:af:68:18:e8:3d:96:14:29:
                    01:42:45:04:6b:1f:75:6c:f5:1f:0d:a0:3d:41:6e:
                    77:54:2b:71:64:82:69:0e:fc:a0:43:15:55:26:fc:
                    2f:3d:e0:e4:2b:ff:79:5e:1e:69:fa:33:1a:b0:cc:
                    2d:2a:fc:d6:28:9d:d6:53:f9:cb:9c:30:4c:55:b8:
                    4c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:DC:75:29:68:27:B8:93:4D:1A:B7:D8:69:A0:4B:D6:31:0E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/241cfd6d-d73e-37fc-9fc1-d033ca9bbf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4b:2c:8c:ae:9b:4d:d0:5f:08:55:cc:23:8f:54:d7:43:8e:
         a4:47:9b:aa:c0:2e:a7:cc:8a:27:a3:12:8c:94:51:a7:69:59:
         1e:50:b9:d9:e0:f6:c6:23:3a:6b:e6:28:02:b9:fa:a0:e6:4b:
         71:90:0f:0e:39:0d:5e:df:f2:b6:65:b8:96:c5:c0:c5:a7:7e:
         e3:cf:4e:b4:4f:df:dd:7f:04:6e:48:0b:3f:cc:ed:d9:79:6f:
         88:9f:d6:1d:98:c6:ca:e3:f5:e9:26:97:e8:c8:52:b3:15:42:
         b1:d9:24:f0:85:f4:61:29:aa:d0:fc:35:16:2e:11:e5:12:32:
         d7:b2:18:71:2d:18:43:af:93:00:c6:42:0f:01:c4:10:90:7d:
         e0:00:a4:eb:e3:d7:b0:57:fd:21:e3:21:dc:03:46:dc:c1:1b:
         a4:bf:4c:f0:1b:63:38:73:91:05:46:fa:e1:c5:13:2c:28:a2:
         dd:dc:14:1d:ea:ea:35:fc:0f:a2:4d:d8:ef:87:d1:c4:cb:58:
         4d:e9:3d:2a:99:47:2e:8e:da:ee:50:0b:74:39:bd:67:f8:08:
         a7:fc:55:ac:af:88:ea:91:ef:a3:ce:be:3f:83:6f:4e:f5:84:
         ac:d5:0d:2b:b4:85:b9:f9:b6:e0:5a:e8:52:a7:17:da:be:f2:
         38:00:98:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:03:24 2024 by rpki-client on console-fra.rpki-client.org