Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa
File:                     2b60bb16-5e02-367c-94b9-b2b069234fee.roa (raw, json)
Hash identifier:          kXcHqKH4gNYk6jTlr42iByJ467FSV0Xy+9/j/u7ga/c=
Subject key identifier:   D8:87:01:A2:94:9F:D5:DC:AE:2F:07:34:3C:FA:CB:14:E8:66:9F:D7
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845B4E8D1ED523D840182676B80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa
Signing time:             Mon 29 Apr 2024 13:00:33 +0000
ROA not before:           Mon 29 Apr 2024 13:00:33 +0000
ROA not after:            Sun 28 Jul 2024 13:00:33 +0000
asID:                     13938
IP address blocks:        65.51.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b4:e8:d1:ed:52:3d:84:01:82:67:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 29 13:00:33 2024 GMT
            Not After : Jul 28 13:00:33 2024 GMT
        Subject: CN=1df9883f-b987-4a5b-9db9-72afbe78193f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:5d:44:75:25:47:88:6a:8b:aa:27:a9:fc:
                    ee:07:fd:77:10:7d:45:5b:99:f8:8c:e5:22:fd:2f:
                    69:61:9d:37:29:51:6e:af:d4:bc:f4:8c:73:e6:31:
                    31:f7:d6:57:69:8b:fc:ce:89:13:eb:36:f6:0a:5d:
                    68:21:bc:5a:e6:cd:9f:93:a7:60:8b:29:eb:20:25:
                    ab:45:d6:27:41:b8:b4:1f:fd:45:ec:90:1a:67:01:
                    1b:d5:7d:55:d1:87:f4:ed:4e:7a:75:4d:78:2e:ab:
                    a6:92:dc:d6:96:d1:65:80:41:bf:c6:1d:02:a9:8c:
                    94:7e:72:80:e3:6a:3d:39:ac:34:eb:02:30:e8:c0:
                    22:cb:ec:17:3c:a0:cf:fe:24:15:bc:22:fc:60:d4:
                    47:fa:d6:ab:91:f3:2b:a1:8e:15:c0:57:fd:f8:a3:
                    14:6f:31:05:64:7c:30:35:6b:a9:75:96:d6:86:0d:
                    95:aa:aa:fc:93:16:05:b6:2a:0b:24:f0:12:64:a3:
                    d9:a4:ff:dd:31:cd:62:72:73:ce:53:a2:c1:c2:1e:
                    27:a6:3d:d7:d1:50:78:67:84:22:e0:80:fc:a9:5f:
                    15:e7:a8:90:9b:4e:99:92:28:34:d0:89:cb:e6:fe:
                    a7:97:dc:2f:5a:4e:5a:04:5f:cf:dd:a9:24:1a:a7:
                    81:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:87:01:A2:94:9F:D5:DC:AE:2F:07:34:3C:FA:CB:14:E8:66:9F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/2b60bb16-5e02-367c-94b9-b2b069234fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:29:98:6c:5d:20:0a:2c:63:15:c1:58:56:96:d0:6c:4d:7d:
         ed:fa:a6:2d:01:90:e1:3f:e7:07:26:35:4a:7a:b8:4a:82:64:
         fd:6e:b6:c8:06:af:1f:b0:22:5f:2b:25:4d:72:da:f3:61:67:
         e7:7d:a9:2c:0c:ee:cc:b3:bc:23:83:29:de:db:fe:42:4e:c8:
         c1:1a:ec:5b:4d:bd:00:a4:87:39:c8:ff:18:29:7f:31:4c:17:
         15:0e:8b:11:1c:76:8b:c5:53:67:af:13:e2:c4:ef:3c:34:7c:
         27:cc:16:e5:97:0d:c8:ca:7a:ec:6a:9b:51:5e:7f:4e:50:cb:
         1d:26:56:2d:f2:2b:18:24:57:a1:1e:c0:91:70:37:ad:92:1d:
         6e:10:fe:b7:05:86:df:73:fd:98:29:15:08:27:2e:1b:df:7c:
         91:ce:ea:ab:73:93:e5:22:47:0f:82:aa:e2:bf:a4:cc:46:37:
         5f:fe:1a:bc:19:47:eb:29:f2:07:20:fc:ef:8c:77:85:37:37:
         fc:1d:d5:79:4c:4d:e3:7c:99:51:bf:a8:a7:bc:38:d4:8d:fb:
         77:99:0e:6a:b2:3b:52:9f:e9:a0:c9:9f:ca:e8:e1:71:30:0b:
         85:15:15:c4:5c:4a:6b:e6:a1:50:c0:e8:0c:1d:73:7e:2a:62:
         41:7c:ff:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 17:01:50 2024 by rpki-client on console-ams.rpki-client.org