Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa
File:                     96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa (raw, json)
Hash identifier:          LqsOj/2OX26QZtn8Sinf8ulD72cQn9SlwLEpDgk2K/w=
Subject key identifier:   83:A9:D8:1E:04:7C:C5:2C:F3:A2:A2:2D:05:12:F4:CC:E9:5D:55:10
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584762D653DFCAB24BFE86B5B280
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa
Signing time:             Mon 30 Sep 2024 13:00:42 +0000
ROA not before:           Mon 30 Sep 2024 13:00:42 +0000
ROA not after:            Sun 29 Dec 2024 14:00:42 +0000
asID:                     1632
IP address blocks:        65.51.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:62:d6:53:df:ca:b2:4b:fe:86:b5:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 30 13:00:42 2024 GMT
            Not After : Dec 29 14:00:42 2024 GMT
        Subject: CN=7980e09c-4468-4447-b57c-1c870ca7a708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:91:97:5c:29:6d:31:91:7c:a3:78:35:77:bd:
                    88:c9:b5:31:3c:84:57:5e:72:d5:87:24:1c:04:70:
                    c2:c5:3c:c8:5b:37:52:c0:8f:b3:c9:79:76:ca:d0:
                    db:e9:cf:a1:9c:c5:45:81:d9:07:3e:d7:9f:09:12:
                    ef:6c:40:e5:39:4d:c8:e8:74:9b:69:eb:43:37:c0:
                    84:68:5a:88:8a:81:cb:3f:0a:f2:3a:fc:b6:35:d4:
                    3d:0e:78:55:32:6f:96:46:37:26:de:aa:dd:1b:b7:
                    d0:74:53:84:a6:e3:14:26:86:80:93:c8:09:a1:56:
                    99:34:87:37:19:d4:a3:d0:5a:6c:52:b3:a7:c0:42:
                    84:ff:ca:32:63:89:51:c6:b2:54:8c:28:da:b7:78:
                    f4:d5:d4:fa:16:d3:3c:f7:2a:a7:7f:01:89:f5:38:
                    55:84:60:52:e3:01:07:5c:86:9c:99:5d:20:e8:cb:
                    84:46:bc:98:fe:b5:d0:9b:96:c8:ea:bc:da:ee:ad:
                    1b:10:66:61:10:d2:96:2e:6d:c7:74:47:a2:66:1b:
                    8e:6a:c3:24:a6:43:11:0a:5f:f6:41:eb:d4:8e:10:
                    5b:c2:dc:f7:53:c9:ae:e8:10:9b:10:9f:fa:51:82:
                    10:a1:63:1e:d9:4d:0f:19:05:e9:ce:26:e0:5f:21:
                    36:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:D8:1E:04:7C:C5:2C:F3:A2:A2:2D:05:12:F4:CC:E9:5D:55:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/96d2cf11-e0cd-3096-94d8-4f42bf2ef09a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:79:b7:c9:f8:3c:7e:13:19:aa:96:c1:eb:fb:26:23:26:d6:
         87:d8:11:55:a7:6c:3a:58:07:50:53:e5:c2:67:71:8c:c3:5c:
         17:9b:c7:ea:34:8c:fa:18:59:5c:10:fd:92:58:b2:f4:03:3b:
         d5:d1:1a:b9:86:67:b6:7f:9e:38:a7:5b:b9:69:d8:ac:13:20:
         0e:fa:8e:61:ad:a3:51:47:53:eb:f2:85:2e:bf:ca:fc:0d:dd:
         47:dd:5e:82:7a:45:ac:5e:05:3f:3b:cf:17:ca:72:24:f3:ac:
         1f:d2:a1:75:9d:fa:42:be:26:4d:47:0b:5a:4b:62:9f:b6:5b:
         24:f9:ad:50:93:bc:95:62:41:f0:1c:03:64:83:3a:62:a3:47:
         22:93:36:59:61:9d:80:71:49:4b:66:d4:f1:17:52:b2:26:af:
         96:dd:8f:b0:b9:fc:a0:21:ed:d7:0d:79:8d:ba:46:59:e8:0d:
         c6:75:d3:15:b5:95:f5:0b:c2:5f:9f:4c:68:44:76:c1:f8:77:
         46:a1:fe:ae:c2:e8:e5:05:9e:42:2b:a9:6e:b8:9d:c2:d5:83:
         c5:84:dd:24:44:82:a2:34:6b:86:8d:98:cf:94:4c:07:1e:49:
         2b:44:e4:f3:d2:8f:a7:f6:1d:5d:da:56:98:51:d4:4e:20:67:
         da:16:22:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:31 2024 by rpki-client on console-fra.rpki-client.org