Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2594e4e1-01a4-3285-b337-bbeb644ff0b7.roa
File:                     2594e4e1-01a4-3285-b337-bbeb644ff0b7.roa (raw, json)
Hash identifier:          CXCACi3AcIqRzXjgV7bIunzIWPronvBOP290P/kVl0k=
Subject key identifier:   4E:6F:21:83:E5:81:C6:53:DE:A9:B4:53:78:87:00:02:42:98:8F:A0
Certificate issuer:       /CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
Certificate serial:       010D0C9F432858477BA8BB96633971EC8589AC40
Authority key identifier: 08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2594e4e1-01a4-3285-b337-bbeb644ff0b7.roa
Signing time:             Wed 09 Oct 2024 10:24:21 +0000
ROA not before:           Wed 09 Oct 2024 10:24:21 +0000
ROA not after:            Tue 07 Jan 2025 11:24:21 +0000
asID:                     2698
IP address blocks:        65.110.224.0/24 maxlen: 24
                          65.110.225.0/24 maxlen: 24
                          65.110.226.0/24 maxlen: 24
                          65.110.227.0/24 maxlen: 24
                          65.110.228.0/24 maxlen: 24
                          65.110.229.0/24 maxlen: 24
                          65.110.230.0/24 maxlen: 24
                          65.110.231.0/24 maxlen: 24
                          65.110.232.0/24 maxlen: 24
                          65.110.233.0/24 maxlen: 24
                          65.110.234.0/24 maxlen: 24
                          65.110.235.0/24 maxlen: 24
                          65.110.236.0/24 maxlen: 24
                          65.110.237.0/24 maxlen: 24
                          65.110.238.0/24 maxlen: 24
                          65.110.239.0/24 maxlen: 24
                          65.110.240.0/24 maxlen: 24
                          65.110.241.0/24 maxlen: 24
                          65.110.242.0/24 maxlen: 24
                          65.110.243.0/24 maxlen: 24
                          65.110.244.0/24 maxlen: 24
                          65.110.245.0/24 maxlen: 24
                          65.110.246.0/24 maxlen: 24
                          65.110.247.0/24 maxlen: 24
                          65.110.248.0/24 maxlen: 24
                          65.110.249.0/24 maxlen: 24
                          65.110.250.0/24 maxlen: 24
                          65.110.251.0/24 maxlen: 24
                          65.110.252.0/24 maxlen: 24
                          65.110.253.0/24 maxlen: 24
                          65.110.254.0/24 maxlen: 24
                          65.110.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:a8:bb:96:63:39:71:ec:85:89:ac:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebee18c5-4e70-47ae-a5d0-702b8fb2916b
        Validity
            Not Before: Oct  9 10:24:21 2024 GMT
            Not After : Jan  7 11:24:21 2025 GMT
        Subject: CN=f99c1d55-e689-4ca9-b21c-cacf8606fe36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3c:ba:4d:55:1a:65:65:ce:64:5d:2e:b8:13:
                    6a:50:03:d3:7d:6c:65:72:32:c4:b2:f8:f5:26:bb:
                    ef:05:66:d9:c5:e6:68:84:c2:f3:75:66:fc:47:5c:
                    71:5d:84:8c:19:0a:86:2b:a5:60:a8:35:9e:82:09:
                    98:73:f7:1f:11:3b:80:08:d7:d2:04:25:08:38:b3:
                    20:de:88:cd:31:ae:3b:dc:0e:86:09:e6:d0:71:da:
                    dd:3a:ea:1e:7c:de:12:9b:8d:e5:0c:ab:70:5d:21:
                    3f:8e:5e:75:86:cf:2f:6c:f1:01:b9:64:78:3c:9f:
                    c8:97:78:a1:5e:60:59:c4:77:e0:5c:52:e3:54:03:
                    e6:16:52:d1:94:d3:be:a0:8e:81:00:0d:93:88:f5:
                    58:75:b6:df:10:6d:f2:ea:08:92:70:92:e1:1b:d2:
                    7e:e0:e4:80:a5:0f:e9:9e:d7:64:60:be:20:1e:d1:
                    ad:80:e6:a6:6c:a9:15:ef:f0:88:7e:a2:5e:73:51:
                    2f:9a:e0:1b:00:e1:63:5c:7b:1a:93:6b:42:46:c4:
                    31:6a:e9:7b:d9:85:e1:b8:15:85:03:35:22:63:65:
                    26:55:d9:bc:c7:35:38:ad:17:f7:0d:ed:88:ca:ba:
                    b1:74:a8:f5:a6:1e:2a:f9:f4:7d:da:53:2a:7f:2c:
                    48:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:21:83:E5:81:C6:53:DE:A9:B4:53:78:87:00:02:42:98:8F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/2594e4e1-01a4-3285-b337-bbeb644ff0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.crl

            X509v3 Authority Key Identifier:
                keyid:08:BA:10:3B:00:83:2A:3C:49:0B:6B:D6:F6:7F:30:16:C0:CC:C2:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ebee18c5-4e70-47ae-a5d0-702b8fb2916b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f2:67:32:70:9e:eb:aa:25:5e:26:1b:35:ff:ae:41:3b:f0:
         a7:38:e2:c5:21:08:5e:8e:84:44:5d:ac:04:1e:49:72:14:e2:
         4d:93:a1:d5:84:d0:75:c8:2f:c6:77:76:00:af:37:b1:66:67:
         49:fb:a1:e1:76:79:9f:7a:01:c5:7a:69:c2:32:33:ed:ec:12:
         7b:52:b4:55:80:90:7f:96:df:46:fe:76:1f:e9:83:26:7b:9c:
         93:bd:37:0d:25:f1:84:90:c9:6f:54:e1:79:c2:c6:ec:a7:f0:
         92:75:f6:02:28:96:96:c8:79:5a:e6:aa:db:24:a4:81:b7:48:
         2a:d3:e1:72:a1:65:55:9c:2e:78:c7:02:bb:7c:6e:05:c3:ae:
         55:68:3c:9c:7b:dd:15:72:9b:9f:38:61:30:a7:e7:33:1a:2b:
         a9:51:9e:26:e3:5f:f5:70:67:e4:cd:87:6c:e9:9b:ba:b7:51:
         bd:62:cb:65:6c:3c:87:74:ed:ca:26:44:bf:d1:44:e3:a4:5f:
         22:a6:96:af:65:a8:e8:c0:c9:a6:93:ea:1a:8b:0e:4c:b5:e5:
         ec:3f:c0:96:3d:66:e9:ca:f0:e0:20:68:2d:f5:a8:b4:0d:75:
         ff:29:65:6c:16:c8:c1:4f:a1:67:a8:80:ac:a8:da:45:67:93:
         f1:e8:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:27:50 2024 by rpki-client on console-fra.rpki-client.org