Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
File:                     14a69187-3551-3a4a-8a20-6c538d19949d.roa (raw, json)
Hash identifier:          XLE13JcSWF1aC5X0YfXr6abm3Ke6jQFZKW1tnQBkgxE=
Subject key identifier:   BE:0E:57:83:04:9E:22:5B:71:D1:9E:C7:11:86:42:3A:45:4A:3A:33
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285847213B0D4CAC16F0901864EB00
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     211439
IP address blocks:        65.110.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:0d:4c:ac:16:f0:90:18:64:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=3dcfaa93-7983-4fdc-84a7-7969606bcbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:bb:5e:79:3b:b5:5e:30:9a:11:af:90:17:
                    0f:06:6a:05:ee:5a:1f:64:d0:cb:5a:64:94:87:9f:
                    fd:d3:56:29:2c:c6:6f:fa:bf:e6:f7:c3:0a:d8:48:
                    e0:9c:76:0a:13:c1:21:17:6a:44:be:5e:3e:4c:56:
                    1e:97:8a:bd:03:b6:18:c2:4b:9a:56:e7:47:35:ee:
                    21:f8:1e:bd:f5:a4:99:06:6f:69:c0:65:44:e9:9e:
                    21:b7:b1:72:a6:b3:74:d9:0e:26:74:7d:f2:70:80:
                    e9:da:c1:40:95:4d:51:3c:5a:46:47:aa:50:15:f6:
                    ba:b6:27:d2:0f:4c:75:57:3b:39:ed:6d:45:98:93:
                    59:92:63:0d:06:61:b2:65:ee:6b:f3:d2:86:6c:5c:
                    78:70:47:0f:df:f7:18:2e:9b:7f:87:04:cc:9d:29:
                    78:e1:3a:6b:16:5a:a7:fe:69:e2:3b:a7:61:d0:fd:
                    1f:c9:36:8b:72:c4:0f:ac:6c:99:59:95:d7:62:33:
                    63:72:4b:1e:5c:4c:dc:5e:f6:ef:c8:eb:4d:22:25:
                    67:6f:0f:9d:be:80:39:33:06:40:1f:02:f4:8a:c6:
                    e3:63:63:2e:ba:7a:8f:c2:53:0e:34:37:71:ac:01:
                    0d:21:fe:6f:f7:00:a1:9b:13:06:b3:06:d1:0f:4d:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0E:57:83:04:9E:22:5B:71:D1:9E:C7:11:86:42:3A:45:4A:3A:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/14a69187-3551-3a4a-8a20-6c538d19949d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:63:da:b2:01:3a:f0:c2:d7:35:c5:75:28:9c:64:05:5e:
         a4:ef:c0:36:26:7b:09:b8:e9:75:95:a1:ee:6e:76:ab:9d:6f:
         ff:c2:a7:12:e2:1b:32:02:6c:bf:74:5a:b1:99:ca:a5:15:f3:
         05:85:23:91:c4:54:99:ea:a1:9f:79:49:ac:3c:bc:ea:a4:62:
         56:d0:7e:90:33:2a:c7:18:a3:0b:07:0a:44:23:dd:b6:2a:b7:
         67:dc:5d:30:07:5a:f6:16:da:6a:64:63:01:73:51:86:27:fe:
         3a:bc:56:3f:4f:66:0a:27:e0:4d:1b:66:9f:83:cf:0c:dc:b5:
         7a:e8:63:23:09:79:fb:46:4d:96:ef:f5:c9:9a:f1:1c:58:f0:
         ab:03:1f:d2:79:3a:27:48:b9:b1:6d:29:a8:36:2c:ac:7d:4c:
         27:41:94:65:48:26:29:c2:33:ed:02:73:10:f4:cb:71:95:b4:
         38:39:8f:d8:ac:41:8c:1b:ba:a5:d2:46:e7:e6:ae:80:92:48:
         a7:3e:9b:19:ae:ed:24:a6:5c:0c:90:35:04:58:8b:2a:67:8d:
         15:1c:8d:d4:4f:07:ab:8d:be:14:bf:36:b5:4f:e5:f5:c0:b7:
         29:d5:4c:ec:3c:78:51:a9:0a:ae:2d:8e:2b:42:30:60:11:fb:
         1a:6f:b3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:36 2024 by rpki-client on console-fra.rpki-client.org