Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6a8ddbf5-1586-3d9a-9245-2c8d10810ac5.roa
File:                     6a8ddbf5-1586-3d9a-9245-2c8d10810ac5.roa (raw, json)
Hash identifier:          eXyQELHVIsNTfLbR5DWsw5aq/Mk9nIXiGDjUwM/7rS4=
Subject key identifier:   86:5C:7F:2B:AD:A7:15:CB:DF:06:1E:8A:8E:B2:29:D1:BC:4F:6E:91
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858474850BBF344F2EA2114D8C780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6a8ddbf5-1586-3d9a-9245-2c8d10810ac5.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     46673
IP address blocks:        65.51.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:bb:f3:44:f2:ea:21:14:d8:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=4692d59b-d477-4284-9304-f36105ea7f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:54:6c:0a:98:25:2c:82:71:8b:4b:0b:e8:
                    5d:42:fc:86:95:17:80:66:40:e5:b1:83:4b:b8:81:
                    db:0b:3d:28:0d:c4:b1:0c:28:41:97:f3:2e:ff:dd:
                    25:0a:28:64:2b:94:88:26:f4:ff:eb:bf:f2:5f:be:
                    13:09:a4:7f:ff:32:8d:4a:f6:90:60:b2:29:28:b7:
                    25:c6:1d:f9:a2:0b:d4:49:a5:9e:b5:98:28:ac:17:
                    80:74:d0:35:54:aa:55:88:09:0d:49:73:72:8f:87:
                    8d:2a:fd:1b:e9:e4:17:3b:6a:20:98:4d:28:f7:9a:
                    85:de:03:55:c0:ba:91:05:c5:26:d5:c4:a4:45:c8:
                    a2:c3:e9:20:13:0c:a5:44:ec:f5:e1:29:08:95:83:
                    eb:2a:60:37:65:c7:14:cd:97:1f:1c:88:f1:71:a1:
                    3c:a0:26:c5:0f:2d:fe:6a:db:43:58:41:53:47:4f:
                    88:68:3e:c7:96:a6:7a:6f:44:f1:9f:9f:be:49:73:
                    cf:7a:a3:7f:4b:25:0a:e6:40:6d:44:57:4c:e3:39:
                    95:d7:b5:8f:ff:e9:86:40:5d:9c:e1:0e:1e:6b:a7:
                    b0:db:c1:71:db:44:8f:b4:c2:9f:65:47:b2:f9:ca:
                    2a:ad:78:13:30:cb:1f:45:1f:8b:48:5e:48:62:bd:
                    b2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5C:7F:2B:AD:A7:15:CB:DF:06:1E:8A:8E:B2:29:D1:BC:4F:6E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/6a8ddbf5-1586-3d9a-9245-2c8d10810ac5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:cd:b5:0d:d1:44:fa:53:01:f2:b1:9e:cc:20:81:56:28:d9:
         d2:fa:c5:34:e4:69:4d:ee:dd:98:2c:20:c6:86:3d:14:3f:0c:
         46:0b:a5:36:a7:88:ff:49:22:9e:e4:b5:e5:ff:bd:fb:a5:a4:
         c1:94:79:5d:04:b1:e8:50:ea:ba:55:e8:a9:f4:c6:99:79:01:
         5c:24:d5:c6:62:49:0a:e3:69:b4:6f:8c:12:c6:2e:9a:33:ab:
         76:f1:d2:3f:d7:b2:b9:e9:92:d9:63:65:c5:65:d7:1d:51:32:
         ea:38:21:8c:77:4d:07:d6:56:87:5e:be:19:87:2d:a1:52:e3:
         59:eb:79:29:4c:07:b7:84:01:70:31:98:6f:e0:9b:bd:4b:54:
         ff:f7:b4:90:e8:ee:a7:a5:23:f9:85:d2:3e:18:fa:84:97:2d:
         d3:9d:c1:ce:56:bd:61:ba:04:4f:c1:42:17:ec:86:90:5c:f5:
         1f:14:27:71:63:aa:79:2e:41:f9:e4:3e:cc:d2:1a:72:b9:74:
         30:ef:4a:4b:24:1a:ec:31:12:d2:aa:cd:c5:9f:9d:ad:1f:aa:
         f3:8b:fa:a8:e9:ba:7a:68:ff:74:89:a6:fc:35:d4:73:20:61:
         70:23:21:bb:94:ac:95:12:de:49:c8:d4:68:19:e3:bf:3b:d2:
         68:ff:6a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org