Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/95d5bb05-1ef5-303f-93ef-7a4d8870c8f5.roa
File:                     95d5bb05-1ef5-303f-93ef-7a4d8870c8f5.roa (raw, json)
Hash identifier:          5ELJ7f4kaRPKONvHXDXQezSKIu+hnGqXwRsVs8tMlms=
Subject key identifier:   FA:44:C6:AE:58:8D:2E:8F:FC:56:B2:EE:3A:EF:3E:93:66:50:84:B7
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285847600B8EB618591F61E327F120
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/95d5bb05-1ef5-303f-93ef-7a4d8870c8f5.roa
Signing time:             Sun 29 Sep 2024 13:00:41 +0000
ROA not before:           Sun 29 Sep 2024 13:00:41 +0000
ROA not after:            Sat 28 Dec 2024 14:00:41 +0000
asID:                     40137
IP address blocks:        65.51.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:60:0b:8e:b6:18:59:1f:61:e3:27:f1:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 29 13:00:41 2024 GMT
            Not After : Dec 28 14:00:41 2024 GMT
        Subject: CN=2f7b1f05-7bb7-4ec8-8ade-ad2712c07229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:5f:cf:94:32:37:1a:a0:b4:19:0b:82:da:
                    0e:56:61:69:95:b0:7a:f0:5a:d1:23:23:61:c5:9e:
                    93:70:13:68:b2:76:62:7e:ff:26:0a:4a:f0:68:35:
                    47:c3:77:b3:12:09:d4:ab:fa:95:8b:57:8f:24:fb:
                    3e:cf:f9:db:02:96:25:df:54:04:6f:fd:24:26:a5:
                    a4:d6:cb:59:70:ca:8c:61:86:bc:be:3f:2b:82:75:
                    ed:f4:3b:28:18:97:d5:8a:a5:27:97:8e:bb:6b:9c:
                    0e:db:a1:f6:9f:53:49:f8:cc:f7:d4:19:cb:75:da:
                    34:ea:cf:e7:c2:1d:43:3c:cf:49:59:e0:64:02:87:
                    1c:75:44:8b:79:12:2e:cd:bd:ff:31:b0:c2:c4:92:
                    90:e2:68:11:3d:81:59:97:1c:e3:1d:64:f5:99:e2:
                    a0:91:7d:19:5e:2e:10:97:99:91:dd:a4:8c:33:f5:
                    b5:52:19:df:bb:18:33:02:ab:81:e1:a1:23:cc:c8:
                    f2:82:5a:8e:4d:08:2f:7d:36:df:70:c8:f8:af:33:
                    0a:3f:19:2d:75:58:3c:f9:6c:2f:b1:4b:2d:f9:21:
                    f2:aa:5b:c4:a1:90:4b:a6:e4:12:3e:85:a5:b1:c3:
                    89:bf:26:8f:69:d1:ae:41:4d:3e:c5:5d:8f:d7:bb:
                    49:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:44:C6:AE:58:8D:2E:8F:FC:56:B2:EE:3A:EF:3E:93:66:50:84:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/95d5bb05-1ef5-303f-93ef-7a4d8870c8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:cd:40:59:1d:be:3f:27:0a:d9:c5:7c:be:5e:b8:a7:4e:66:
         87:5a:e0:e0:68:4a:02:c1:44:65:66:84:9d:99:cb:ba:53:ae:
         97:10:d5:3d:e6:3d:0c:89:2d:88:7f:ac:16:bf:df:71:11:8a:
         b1:c3:73:e9:48:d4:38:05:1f:b5:60:e8:8b:26:ea:62:ad:b7:
         80:74:8a:0d:4d:8f:4c:d9:7b:1e:1b:4f:e7:c1:8f:94:2d:ab:
         c0:45:22:27:13:ef:d4:56:54:f8:55:ae:ad:2c:58:c6:2e:78:
         65:ad:57:59:8c:fb:89:dc:bc:20:43:44:ef:18:11:ef:a4:2e:
         77:2a:9a:b0:60:51:17:c9:4a:4c:a5:a4:3b:89:c8:e2:8d:72:
         99:45:c8:45:a1:2f:d2:31:55:33:c1:fb:55:c9:77:da:8f:37:
         7a:6e:ec:18:c2:ea:78:dc:8f:e4:0d:6f:20:46:f4:9d:3e:cf:
         d1:40:d3:b4:e7:05:4d:0d:3c:27:d8:9c:ca:c5:86:b7:1c:e6:
         8a:fb:e9:ff:b9:b8:cd:ae:d2:3e:6b:f4:45:a0:c9:be:9d:38:
         ad:6e:b4:a9:e3:3a:ea:93:90:93:e5:eb:db:a4:9e:d8:06:cd:
         3c:b6:f9:5c:c9:d5:51:70:ac:67:43:db:07:e2:f4:f9:82:68:
         3e:57:89:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:14 2024 by rpki-client on console-ams.rpki-client.org