Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
File:                     c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa (raw, json)
Hash identifier:          61wyIRedUKh5nBnaHKJCwBKpPE9cXDilDwhjzHrWbzU=
Subject key identifier:   E6:F8:EA:51:EE:71:E2:81:EB:7E:C9:53:FF:D2:E0:23:EE:14:75:23
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A428B0541049727731E04900
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa
Signing time:             Tue 23 Apr 2024 13:00:34 +0000
ROA not before:           Tue 23 Apr 2024 13:00:34 +0000
ROA not after:            Mon 22 Jul 2024 13:00:34 +0000
asID:                     399208
IP address blocks:        65.51.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a4:28:b0:54:10:49:72:77:31:e0:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 23 13:00:34 2024 GMT
            Not After : Jul 22 13:00:34 2024 GMT
        Subject: CN=2c48c617-2a0f-4ec0-bc06-e1121c56f80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:d8:39:e2:91:be:75:be:6b:cb:b9:00:72:
                    ad:fb:ee:e3:f1:56:91:98:b4:e7:ec:24:b7:9b:18:
                    a1:4f:a7:d5:de:7b:9a:65:71:42:15:75:51:10:27:
                    4e:93:5b:71:1c:af:82:f9:da:43:10:4d:51:28:d8:
                    f1:0c:28:0b:c1:f0:13:00:bb:25:3f:f1:bb:0c:ae:
                    88:e3:8b:d7:48:8c:aa:a4:aa:01:c6:3b:60:17:e5:
                    4c:41:4e:5f:13:be:83:e5:22:b4:a2:4f:d5:e4:07:
                    ad:95:3d:3b:58:7a:7a:a3:7f:f1:84:f1:cc:e1:97:
                    0a:c9:0b:54:aa:53:70:7d:25:27:1b:28:12:ed:64:
                    ea:b8:10:11:18:0c:3f:60:e6:41:5f:8e:81:1a:c4:
                    d3:03:3f:45:70:2b:ec:65:fa:45:ad:0a:df:f7:a5:
                    7d:f4:d1:d0:d8:b0:2d:19:4e:5f:a5:a5:be:03:58:
                    5c:67:ae:e2:d7:4d:7c:91:ae:a1:24:ba:72:10:bc:
                    2b:24:55:e1:3d:79:53:36:9c:c3:26:a3:8d:81:6a:
                    d9:fd:a6:42:66:af:86:66:8f:d1:18:5e:01:6b:83:
                    f3:9e:e2:96:53:b8:c9:8c:1c:76:74:14:d3:95:4a:
                    e6:d9:a0:8a:36:19:f4:b3:f8:8e:ee:96:bb:7f:c4:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F8:EA:51:EE:71:E2:81:EB:7E:C9:53:FF:D2:E0:23:EE:14:75:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/c2b7abbc-ca57-332b-9afe-f1dc2913f252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:be:2e:24:07:71:82:3c:43:9b:23:2c:9d:ba:c2:11:e9:29:
         a7:e8:32:c1:b5:9a:ad:f0:7c:3e:6f:6d:37:d0:b6:80:22:63:
         a4:b6:f8:65:34:d5:95:97:4d:91:5f:85:d3:b4:d1:83:87:58:
         cd:25:ac:4e:9d:4b:0f:b1:56:5a:c4:66:1e:d4:7e:73:4a:0a:
         3a:37:e5:fd:93:45:e0:02:54:cf:96:14:13:44:fc:20:ac:6b:
         54:ff:c7:15:70:65:a3:f3:85:01:2c:39:19:ae:e0:32:3e:11:
         40:cf:87:07:a1:4a:6f:96:7a:44:17:cb:08:de:07:0c:d7:0f:
         70:64:a6:fc:9c:a7:f0:0c:d5:7f:30:55:98:81:2b:f3:56:44:
         07:93:14:8e:77:35:25:18:81:7e:f6:6f:28:4a:fa:7b:5e:6f:
         67:f5:0b:8a:a9:f7:00:ab:a7:2d:12:bd:a6:a7:eb:0b:56:a8:
         c8:a7:a9:4f:9d:9e:fe:59:e0:ee:8b:da:b8:bd:b2:01:8c:c4:
         de:39:ca:7d:ae:0a:23:5d:e6:b1:d2:d7:80:5a:0c:1a:69:e9:
         f6:ce:99:15:57:91:9b:97:67:87:7f:88:db:80:3c:53:16:c2:
         a9:f2:ee:fc:fb:87:dd:32:72:8d:64:79:02:ee:b5:d2:59:e8:
         74:a4:76:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:15:43 2024 by rpki-client on console-ams.rpki-client.org