Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f7326454-009c-3d77-b7e0-bb348c610475.roa
File:                     f7326454-009c-3d77-b7e0-bb348c610475.roa (raw, json)
Hash identifier:          PFz82JEF+KchP5QQQcW9USX/ZWmO67F+6W+NywjPWIc=
Subject key identifier:   87:0C:17:2B:1E:C5:13:87:5E:85:03:A5:EE:E8:9A:59:DE:25:5C:C0
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285845A15E199C4D2265D13E3E3BC0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f7326454-009c-3d77-b7e0-bb348c610475.roa
Signing time:             Mon 22 Apr 2024 13:00:33 +0000
ROA not before:           Mon 22 Apr 2024 13:00:33 +0000
ROA not after:            Sun 21 Jul 2024 13:00:33 +0000
asID:                     22345
IP address blocks:        65.51.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a1:5e:19:9c:4d:22:65:d1:3e:3e:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Apr 22 13:00:33 2024 GMT
            Not After : Jul 21 13:00:33 2024 GMT
        Subject: CN=e7ed6faf-fc65-4fb2-a41b-22c81061f730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:34:5d:21:c2:a9:c7:ff:eb:4d:73:45:36:21:
                    11:6d:e0:25:f9:03:cd:39:fa:66:28:02:e9:0f:01:
                    3b:8c:24:2e:a2:b0:c8:f9:2d:d9:36:9a:8a:ec:71:
                    6d:fc:fa:3a:ee:04:cb:48:e8:f7:3d:e4:9d:d8:64:
                    10:62:de:d7:d8:70:6c:2d:8b:44:e3:95:2a:3d:ae:
                    b9:f0:ec:78:f4:45:0e:b9:f2:1f:5e:8f:7d:93:9a:
                    26:b0:17:68:c4:50:f6:b5:0e:d7:6d:fa:d0:ac:a3:
                    10:dd:52:7b:e1:21:ec:51:0e:85:b8:b3:9b:dc:0a:
                    eb:f3:98:e5:1a:8f:86:09:99:1e:e6:38:4c:96:f0:
                    8c:3e:f1:a4:f0:02:eb:86:19:13:b6:6e:10:93:84:
                    95:df:51:7f:ac:a6:96:b5:03:1e:4e:57:35:29:16:
                    71:20:1b:20:33:c5:3a:70:fe:b9:1c:a0:e6:45:c9:
                    61:b4:cc:a5:5b:56:2b:e1:64:46:0e:0d:f0:f8:59:
                    88:b4:73:3b:ca:bc:e0:fd:5f:e9:48:f2:6b:f4:e5:
                    14:c5:df:91:e0:50:ab:28:0d:46:f3:5f:ca:ba:2f:
                    ab:88:24:3e:de:9f:b6:e9:6f:ff:7b:b8:87:c0:18:
                    41:b8:a6:e9:b2:9c:98:54:bb:ef:f0:9e:d3:4d:25:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:17:2B:1E:C5:13:87:5E:85:03:A5:EE:E8:9A:59:DE:25:5C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/f7326454-009c-3d77-b7e0-bb348c610475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:25:18:6a:fd:0f:58:7b:94:c9:3f:46:26:a9:24:7c:85:13:
         0c:8d:11:31:6a:70:a4:54:2b:3f:77:ea:e9:da:aa:38:5f:f4:
         00:a9:30:dc:70:33:23:92:b8:c2:0f:a2:3f:63:2a:8f:d2:75:
         fb:93:dd:7d:33:5a:62:b9:6b:f0:69:d9:ab:e7:33:ef:c8:36:
         5d:69:1a:9a:52:b2:0c:19:b6:68:18:6d:c2:13:1b:fc:ee:4e:
         d7:d5:45:ff:f6:20:0d:24:60:26:59:08:91:a9:2e:da:bf:9f:
         48:77:4b:ca:24:02:d9:9a:91:92:2d:a9:b8:a4:e3:34:cc:08:
         54:82:13:3e:56:eb:c1:a4:bb:c5:d9:9d:a7:d4:e6:22:5c:69:
         0d:d2:f4:9f:05:fa:d7:57:36:44:35:54:c7:ee:4c:39:77:64:
         9b:2b:73:61:b2:a5:cc:d4:c7:4e:6b:85:8f:fb:81:16:63:29:
         8c:b7:f5:f1:1c:80:e7:c8:f1:d0:73:67:b2:ec:1c:25:7c:b2:
         f9:75:fc:cb:ea:4d:e1:94:7b:50:ef:23:2f:98:26:f2:fd:32:
         09:be:d8:9a:53:08:c1:67:04:2b:f6:1e:cb:04:e3:b4:0b:86:
         35:4b:bd:eb:df:e8:06:9e:2e:41:4c:f3:96:a6:e3:84:a7:e7:
         6c:3c:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 15:27:35 2024 by rpki-client on console-fra.rpki-client.org