Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa
File:                     9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa (raw, json)
Hash identifier:          /s2sh07hcQM3UNqkj+wzseXvPqfUSGKXyemRFhq3N4s=
Subject key identifier:   5A:1F:23:F7:CD:1B:0E:F2:0C:D3:1F:47:3D:5D:BB:A9:78:46:22:2C
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858452AB7DA54FB130DC7ADDF9800
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa
Signing time:             Mon 11 Mar 2024 01:00:26 +0000
ROA not before:           Mon 11 Mar 2024 01:00:26 +0000
ROA not after:            Sun 09 Jun 2024 01:00:26 +0000
asID:                     400836
IP address blocks:        65.51.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:2a:b7:da:54:fb:13:0d:c7:ad:df:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar 11 01:00:26 2024 GMT
            Not After : Jun  9 01:00:26 2024 GMT
        Subject: CN=99582d74-ad63-43fa-a508-d1de63635859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5e:73:0b:1b:2b:36:2c:ac:fc:93:ca:5c:a1:
                    8d:5a:af:68:91:8a:78:cb:ef:4e:83:6e:3b:64:08:
                    4a:11:70:bd:85:6b:2d:8d:95:ce:41:96:52:49:2a:
                    d4:e2:eb:bb:11:2c:e9:b7:52:1e:39:3e:e9:f5:28:
                    22:4c:6e:aa:03:88:9e:e0:d1:ba:75:fe:20:37:5b:
                    17:92:e2:12:1a:b6:75:88:3d:26:1f:ff:95:1b:2f:
                    01:b4:f0:0b:f5:f2:31:72:a2:72:cf:45:19:56:d9:
                    7e:49:f6:8d:00:3e:8b:98:85:dc:2c:1e:a4:b2:12:
                    68:5a:5b:a7:f7:49:e7:96:39:3a:a6:5a:70:cd:c4:
                    30:d0:de:e3:96:b0:50:17:f0:a8:84:3c:01:76:1c:
                    0e:0c:42:c1:74:9a:c9:9c:ad:b0:23:b2:77:d1:21:
                    71:6e:d5:69:db:09:41:b1:40:8b:4f:e6:8e:21:06:
                    d7:29:c1:b7:24:0c:5b:a5:1a:1e:2b:5f:1d:ee:d5:
                    50:01:12:e0:2b:b1:e5:40:7d:30:15:ae:1d:19:4d:
                    65:84:cd:8e:87:03:6f:ab:18:c4:0c:ad:0c:32:ee:
                    14:7c:08:97:05:37:b1:52:27:8d:5e:65:87:78:a1:
                    4e:2e:36:b6:76:df:a6:a8:d4:03:f3:b0:75:c1:2a:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1F:23:F7:CD:1B:0E:F2:0C:D3:1F:47:3D:5D:BB:A9:78:46:22:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/9873fa7c-f2ed-3f7f-a640-9986aeaf95e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:b1:45:5f:bb:a3:96:8a:0f:50:84:a8:b8:d1:6c:77:1a:db:
         d0:24:09:b9:4a:87:fe:bc:4b:f3:dd:b6:e1:cc:c5:1d:25:4c:
         e9:18:83:e2:74:08:01:2b:10:7e:6d:e5:93:2b:b5:7b:95:6a:
         5a:7e:f0:05:4e:01:cd:a6:40:58:0d:bf:f9:5b:03:63:f7:c8:
         32:dd:9f:70:0c:36:96:8a:a5:c5:21:f0:c5:d9:92:a6:69:61:
         41:01:1d:b5:96:33:4f:36:d6:06:c8:fe:3a:e7:77:63:57:79:
         42:13:d2:54:b1:cb:44:ee:4e:8e:0b:f2:b1:1d:6e:bf:92:94:
         a4:f1:fd:3c:8c:c8:34:23:61:16:76:59:b7:db:3d:c6:0a:6b:
         b3:e8:de:3e:8f:a0:7c:52:2f:24:a9:c2:27:42:21:1b:23:48:
         a9:98:a5:15:b1:59:3a:ee:a7:ac:0a:b1:c7:6b:02:81:68:5c:
         a3:cb:46:36:df:a6:c6:8f:5f:6e:18:2a:89:de:88:5d:6b:15:
         bf:a3:cd:58:35:3c:91:e1:85:c7:21:73:37:6b:9e:0d:63:44:
         4e:36:ea:c2:78:8e:7e:01:43:26:c6:d7:4b:87:f9:a0:4c:f1:
         2c:90:dd:dc:96:60:a6:77:48:e6:68:75:9f:c4:4f:e9:39:54:
         52:46:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 02:03:25 2024 by rpki-client on console-fra.rpki-client.org