Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa
File:                     36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa (raw, json)
Hash identifier:          jISc+IjSgCPgbSWiYC+sxV/nmfgbIfAsEKvRLAhGpp8=
Subject key identifier:   79:B8:09:B0:AC:16:7A:DB:05:EC:C7:A4:65:05:8D:70:1C:BE:39:BC
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F432858454272BE126A6A86D7EB5CA080
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     212384
IP address blocks:        65.110.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:be:12:6a:6a:86:d7:eb:5c:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=6427135b-ab06-499b-9cf7-5dd44dd12722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:fe:da:81:e2:31:a7:ec:7c:ce:4f:95:98:
                    87:e4:01:1d:dc:c5:33:4d:54:14:d4:8d:74:e4:15:
                    7d:9e:48:ac:67:9d:3b:78:23:92:3d:9d:70:38:b2:
                    af:f2:8b:18:51:08:20:9a:28:82:cd:b6:f6:6b:1f:
                    4f:0f:3b:ff:05:15:3f:d2:04:d2:27:28:8e:e1:ee:
                    7b:e6:ff:6e:5c:a6:99:85:46:80:b8:62:f4:79:f9:
                    79:e7:54:43:e7:3e:cd:23:2d:fa:a6:9d:a2:a1:3e:
                    f6:75:73:71:93:14:ab:41:ef:e7:87:8f:23:48:21:
                    00:a4:0a:ef:b4:51:8c:69:33:34:c8:da:1e:8e:37:
                    75:60:ae:5b:40:74:ab:99:3d:76:c2:84:f0:e1:af:
                    74:c4:18:3e:03:1b:a9:43:b4:ed:7a:dc:d0:7b:33:
                    e4:9d:1b:d5:d8:e3:a0:da:6a:8a:85:6a:de:33:24:
                    f1:99:84:59:1d:4e:29:1a:0b:d0:93:fc:22:c4:cb:
                    23:48:c4:d6:cf:b8:aa:99:3b:04:2b:e1:83:e1:f9:
                    45:1d:32:98:c3:47:3f:1d:fd:ac:f6:d2:42:fb:b7:
                    41:6f:24:16:6c:f8:65:0e:0e:6b:b5:73:5c:17:e2:
                    7b:cb:8a:50:f0:dc:91:77:2a:7f:e7:4b:b9:e0:fb:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B8:09:B0:AC:16:7A:DB:05:EC:C7:A4:65:05:8D:70:1C:BE:39:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/36b73ae4-d88b-3a8d-9c79-38203e8e9e00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0a:0f:bb:30:32:d4:c3:96:d0:a9:00:b6:27:5a:99:e9:3d:
         cc:ca:d6:40:fa:99:56:9d:75:6c:27:c7:c3:e4:f6:7e:b3:93:
         bc:d7:b4:0d:36:29:70:e2:05:0b:16:a7:11:7e:04:33:ca:1e:
         81:10:67:fc:f8:7e:a0:3c:3c:29:1e:ec:67:03:14:e3:5f:76:
         ed:0d:b8:1d:ff:84:63:01:5f:8b:8b:1d:0d:fd:2b:b5:90:aa:
         76:ae:c2:81:59:af:f7:12:e8:01:47:53:7a:48:24:ee:63:c5:
         1a:09:5f:bd:69:ff:93:72:2f:71:a5:7a:19:fb:1a:9f:00:74:
         1b:8d:16:09:75:f2:dc:99:ad:44:2f:40:5d:6e:99:1a:f7:55:
         52:96:81:57:4b:fc:aa:7a:5a:c1:04:4f:11:3d:46:df:34:e8:
         22:d1:75:df:5b:e4:b2:ae:0b:d0:e8:40:b4:98:4d:03:39:72:
         52:b7:7a:62:6b:f8:f3:62:97:3e:ba:3e:14:82:38:9b:e8:af:
         a8:04:21:62:3f:0d:45:9e:bc:f4:77:65:d3:57:4d:81:b5:4a:
         7f:4c:88:f4:55:47:e6:18:e3:cb:76:63:a2:c6:ca:29:41:17:
         63:41:e7:69:93:b0:40:1b:c8:62:7c:ef:6d:c4:94:54:af:e4:
         d5:57:6d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:17:51 2024 by rpki-client on console-ams.rpki-client.org