Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa
File:                     19a2f898-48a8-33af-81f5-c708521d881d.roa (raw, json)
Hash identifier:          /SRktn+GGYTINaMLScmHndiSxihsfmUJ1W7o1Kqpg9k=
Subject key identifier:   FF:BA:EB:EE:7F:61:85:07:32:95:05:60:D2:55:A6:1E:61:C3:04:E1
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858451A6CF96D64266F2E3DB37480
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa
Signing time:             Tue 05 Mar 2024 04:56:40 +0000
ROA not before:           Tue 05 Mar 2024 04:56:40 +0000
ROA not after:            Mon 03 Jun 2024 03:56:40 +0000
asID:                     397630
IP address blocks:        65.110.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:1a:6c:f9:6d:64:26:6f:2e:3d:b3:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar  5 04:56:40 2024 GMT
            Not After : Jun  3 03:56:40 2024 GMT
        Subject: CN=2ce1cf1c-ca4b-4d25-b113-a578f30807ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:c6:eb:53:f4:7a:38:93:cb:49:06:2e:99:
                    98:cc:08:0c:d7:41:74:c7:a5:9c:4f:e8:68:fc:44:
                    46:b1:ce:d3:7e:2d:1e:7c:17:3a:d2:65:7e:aa:b0:
                    bb:1b:5a:1a:48:e1:0e:f3:c2:bc:7e:f5:72:e5:2e:
                    9e:32:e1:50:dd:3b:90:eb:66:f2:e6:2a:c6:16:fb:
                    bb:b0:00:d4:ec:72:2e:63:e4:b3:53:a2:94:db:73:
                    fe:06:15:26:22:af:51:ed:c3:a5:89:7a:16:d6:6b:
                    57:3b:9d:d7:09:28:89:6a:f3:20:52:cb:7d:25:cf:
                    88:36:83:64:21:ad:4e:a4:c7:a2:cc:31:2c:b3:b4:
                    a4:cb:f0:dc:08:4a:a7:b1:5d:11:44:a3:33:eb:01:
                    e7:e8:1e:a8:0a:2c:6f:b3:36:be:5b:68:bb:e1:39:
                    9b:ad:a1:69:44:5b:a7:97:73:16:65:9d:fe:9c:e3:
                    a1:48:90:60:14:93:86:d9:f0:6d:60:fb:c1:bb:a8:
                    31:ab:dc:53:59:59:f6:44:a8:27:78:11:51:11:bc:
                    27:cd:a9:ce:ce:8f:04:dc:76:35:f0:d0:0f:f9:11:
                    dc:24:5a:5c:a4:3d:75:e9:24:eb:4e:92:d9:19:dc:
                    f4:26:f8:ea:55:4d:20:43:dc:02:d0:91:51:5b:9d:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BA:EB:EE:7F:61:85:07:32:95:05:60:D2:55:A6:1E:61:C3:04:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/19a2f898-48a8-33af-81f5-c708521d881d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:4b:24:b4:5e:7a:de:83:43:f7:a4:77:0c:33:27:c0:b9:0c:
         d9:8e:1a:b7:a8:4a:ca:69:ce:2e:1f:4b:e7:8a:3d:33:22:ee:
         8a:58:6e:38:07:b8:38:07:87:c2:ae:fe:5d:5e:37:07:11:e0:
         9e:c7:4b:16:ac:13:50:48:3b:57:0b:a0:71:58:0a:82:cf:a5:
         a1:d9:8a:34:d6:10:64:a3:6c:f3:d5:63:5c:73:55:6a:37:e0:
         1e:0b:f7:e6:19:f6:1f:14:72:21:46:3e:16:8c:03:62:ff:87:
         9a:83:c5:12:88:c9:05:27:7f:da:c1:b5:ea:38:52:61:5d:17:
         d3:47:3c:3d:5a:de:a6:1f:0d:37:f0:cc:a9:88:45:50:64:34:
         61:67:d8:87:f0:92:c8:37:2a:78:e8:68:b2:d1:69:36:3a:02:
         70:70:f9:96:a3:66:bf:dc:a1:04:69:1d:1d:87:12:b7:69:a8:
         36:be:22:8e:0a:4e:7d:04:c9:3f:2f:bc:20:61:4f:de:c8:18:
         36:92:99:fe:b1:79:1b:3c:56:d5:66:36:94:fb:97:54:8b:22:
         e7:81:9e:69:d2:80:6f:cb:9c:3b:2a:94:ef:59:03:60:d5:37:
         0b:f4:b7:f1:7c:5d:6b:f4:65:cb:1b:b6:7b:97:4e:1e:31:73:
         be:64:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:15:01 2024 by rpki-client on console-fra.rpki-client.org