Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
File:                     4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa (raw, json)
Hash identifier:          Rx+Ts6g/tun6sB200DXJVwsFJxhzyKl9kMCy4WELpqs=
Subject key identifier:   9A:B5:F4:6B:A2:76:67:90:5E:95:B6:E2:F6:78:98:D0:DE:26:21:48
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847537B72F85D0294965E1D7580
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa
Signing time:             Wed 25 Sep 2024 01:00:31 +0000
ROA not before:           Wed 25 Sep 2024 01:00:31 +0000
ROA not after:            Tue 24 Dec 2024 02:00:31 +0000
asID:                     398116
IP address blocks:        65.51.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:53:7b:72:f8:5d:02:94:96:5e:1d:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 25 01:00:31 2024 GMT
            Not After : Dec 24 02:00:31 2024 GMT
        Subject: CN=45da3140-8f22-4014-867c-8f880c81784a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5a:eb:24:55:4b:a0:90:7c:7f:9d:82:58:b5:
                    83:90:37:91:fa:ff:b6:0e:59:1a:5e:28:9b:7f:2a:
                    e1:ef:cc:45:e7:b5:3c:41:50:5d:35:51:d0:22:1a:
                    22:72:1f:90:c0:bc:df:b1:02:68:2d:e7:f0:45:62:
                    92:d3:24:75:cb:74:ba:2d:b6:da:56:27:e9:4e:88:
                    60:4f:4b:56:ec:88:54:d7:a8:74:6f:85:56:f2:e0:
                    c0:25:b4:d7:55:97:20:fd:a0:f3:a4:25:84:e0:35:
                    2b:32:7b:d4:90:1b:b6:6f:00:90:cd:30:87:1d:57:
                    4a:e4:a7:4e:86:a5:43:3c:ad:ed:c5:52:52:de:9e:
                    c7:b2:dc:d3:c4:f6:37:d5:d3:ee:1e:ee:e4:e9:4d:
                    f3:85:1b:63:90:f2:ab:9d:27:c4:5b:58:31:d9:2f:
                    33:35:7e:5c:09:9b:1a:c8:73:c1:10:b8:6a:30:d9:
                    0a:b1:d2:c2:87:66:18:a2:40:ee:3e:44:10:4f:85:
                    47:44:07:1f:b5:a3:48:d3:c6:ea:37:11:8a:4a:12:
                    13:29:d5:37:e7:ac:a0:6b:57:3a:e0:04:15:25:16:
                    6d:47:f6:8d:06:83:5a:fa:8d:b3:f5:80:53:67:22:
                    94:21:13:ba:56:5b:11:c1:69:11:14:e0:c1:38:b5:
                    8f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:B5:F4:6B:A2:76:67:90:5E:95:B6:E2:F6:78:98:D0:DE:26:21:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/4900a0dc-ee81-3d5d-a9c1-8a2e5b9b6eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:38:da:f4:25:af:cd:fa:31:23:6a:55:3d:f7:81:a4:86:
         2c:7b:78:be:a4:71:84:42:b5:0d:4b:48:2f:a0:8d:52:35:b9:
         bf:37:c1:f0:42:7d:54:8c:be:bd:0c:5f:a0:df:e3:7f:3c:1c:
         7f:95:77:d3:93:9c:b1:e6:ce:2d:ff:27:b3:58:bf:bc:23:ee:
         2d:b9:72:b4:55:f9:c4:17:cd:aa:98:06:ef:01:4a:a4:cd:ef:
         d9:5c:63:45:31:a2:98:0e:b5:a3:82:3b:06:9c:59:2c:d2:4b:
         5c:7f:f4:c0:78:22:da:08:60:ce:83:76:17:47:12:59:b8:80:
         b5:96:38:a7:08:3d:da:b2:6f:87:fb:de:52:98:04:f8:a5:69:
         ef:c7:35:5d:69:53:2a:e3:76:f7:88:70:af:7f:8f:e3:3f:3c:
         94:10:2c:4a:17:79:91:dc:1f:dd:41:da:9f:f4:15:35:87:cc:
         03:30:a3:c6:52:d6:cf:59:ae:39:c7:87:26:f0:83:f9:f9:2d:
         23:27:3f:e8:bb:08:ec:eb:e9:bc:3a:e9:12:bf:60:81:d2:6d:
         a5:76:70:eb:85:ae:0c:ac:af:d8:49:73:fb:37:96:e6:d9:27:
         28:be:d6:1e:ab:4b:d6:1a:19:18:74:9d:bd:e5:56:57:38:68:
         7a:bf:c6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org