Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8d10db77-f79c-3d84-b513-582048c43e45.roa
File:                     8d10db77-f79c-3d84-b513-582048c43e45.roa (raw, json)
Hash identifier:          O9NQWwxGIwgkYnG/g3KWDhNwsxqLcez2rJUCGvgPB9w=
Subject key identifier:   FF:8F:E8:6A:0E:CA:5E:94:07:4B:AA:5D:43:63:2C:7D:1C:B1:AE:C5
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A15E18AA8280C1A78DE9CC50
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8d10db77-f79c-3d84-b513-582048c43e45.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     30367
IP address blocks:        65.51.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:18:aa:82:80:c1:a7:8d:e9:cc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=5c2e6c83-16b8-421b-aa45-e11eaf2cb01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a7:9b:dc:66:ff:6b:f4:2f:ed:86:6c:18:da:
                    d1:16:34:cc:67:87:61:3f:52:7d:e0:e7:d7:2a:59:
                    30:32:78:ee:0f:cd:55:8c:ae:83:ef:08:45:0b:86:
                    b7:b4:db:28:18:e1:ee:93:e0:49:bc:81:03:86:98:
                    49:a1:af:85:b7:7e:89:d3:fe:85:89:e9:83:15:69:
                    ed:c6:18:a4:3c:ce:dc:b0:4a:9e:c0:01:56:32:90:
                    d6:f6:8a:6f:6f:b2:6c:18:4a:78:e3:b4:b1:03:05:
                    9d:17:f4:82:b5:d1:7b:5e:59:bc:ef:fe:e1:83:65:
                    6d:1c:5f:96:a4:f3:c1:c5:0f:61:25:61:5b:94:90:
                    1e:c1:df:1f:1a:a9:fb:66:00:44:7b:05:56:92:3f:
                    25:4f:2b:32:2f:96:0a:e4:f6:5e:44:c7:ee:2e:3f:
                    fb:a6:70:87:0d:74:18:a4:7a:e3:16:87:7e:bb:d3:
                    d0:cf:aa:7e:03:98:f3:ff:30:af:af:5e:fa:d1:00:
                    36:b8:a3:68:69:3c:78:16:00:9b:ff:ea:7b:10:7e:
                    09:13:40:6d:35:10:b7:9f:a6:a4:c1:e6:b0:57:df:
                    e4:af:ed:dc:3f:68:0a:95:31:8e:4e:92:42:03:4e:
                    de:69:4f:ad:5e:08:12:2f:e7:08:0e:c0:f8:72:57:
                    d7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:8F:E8:6A:0E:CA:5E:94:07:4B:AA:5D:43:63:2C:7D:1C:B1:AE:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8d10db77-f79c-3d84-b513-582048c43e45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:12:ca:e4:c8:2b:ba:96:66:b1:ab:15:69:fd:3f:6f:59:
         2f:9d:8b:43:90:68:c8:46:c2:f8:5f:0d:90:f1:6f:12:e6:d9:
         6d:1a:eb:38:01:f1:76:71:9d:c9:10:40:b0:3f:12:14:b4:ef:
         f8:65:be:e6:15:fc:9b:5a:fb:54:d0:4c:b5:dc:6f:0d:28:fa:
         62:20:ec:e7:68:c2:87:66:4d:f6:af:7d:75:87:74:5a:fd:8a:
         6d:5c:64:f8:ac:ee:c1:1b:c0:41:0d:64:89:1f:56:5b:d8:61:
         9b:c0:d1:08:ec:7e:1f:0b:b1:35:80:7f:bc:4c:19:4f:76:ed:
         0b:b8:f4:67:a7:a4:0e:64:71:87:60:97:bb:d5:7f:20:99:3a:
         f5:f1:1f:0e:df:8b:0f:7d:de:04:a6:24:7b:c1:4f:97:51:c2:
         72:d6:f7:47:3c:32:c9:01:1d:ca:cd:68:ec:36:21:21:df:1c:
         1b:27:00:fc:c0:93:48:ef:57:3a:df:1a:62:6a:3b:7f:25:07:
         b2:80:46:b4:ce:41:1a:bd:cc:cf:29:9a:ef:95:4d:c2:9b:73:
         df:a4:82:1c:c3:58:c9:86:80:a5:f7:e6:7e:45:43:c3:8d:8e:
         87:ca:a8:55:4f:76:e0:0a:7a:71:cd:7f:e9:b8:d6:e4:f5:04:
         5b:5d:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:27:35 2024 by rpki-client on console-fra.rpki-client.org