Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
File:                     fb331c26-4b64-3e7c-99a6-74c206aa3828.roa (raw, json)
Hash identifier:          HfZIBNhNaaOSWy9odE4XRVdutFogQ4v5wgJlHb5lO5I=
Subject key identifier:   C6:6D:52:C7:79:68:F1:FC:D0:6A:84:62:9E:45:AE:87:92:89:D7:D5
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F43285847213B23105E1C610334EDD0C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     211440
IP address blocks:        65.110.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:23:10:5e:1c:61:03:34:ed:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=682e0485-1a7c-4d14-a2a7-8bc2440c3762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a4:d4:b4:a6:6a:5b:be:5f:1b:e1:fb:f2:e3:
                    47:a8:2e:8c:29:f6:68:f2:b8:a7:ca:f9:9e:0c:52:
                    7f:58:ee:98:fc:53:49:5a:7c:03:d3:8a:51:64:db:
                    23:cd:42:a6:92:71:84:81:8a:b8:7c:7c:be:ce:d1:
                    15:b2:61:75:8e:b2:d5:f5:08:c2:a8:3f:0a:21:64:
                    68:aa:5c:fc:68:58:df:9b:cd:23:3d:b2:86:d2:bc:
                    39:4c:6d:3a:94:11:28:69:8a:1b:c2:81:bc:99:37:
                    03:1e:f3:69:e9:8a:98:24:67:20:c9:7c:99:4b:d8:
                    de:00:c4:f5:e2:c1:fe:e4:9f:50:bc:20:9d:ed:79:
                    c6:11:a8:2d:58:5a:ec:25:a1:68:22:01:cf:80:43:
                    3a:27:19:dc:4d:3f:e1:9c:11:a0:92:74:e7:82:f8:
                    40:ff:70:cb:ac:63:b6:58:c4:77:e0:e3:32:a0:c0:
                    35:33:ec:eb:ed:e3:31:2f:d6:2d:0e:00:40:2a:2b:
                    41:b9:a6:b2:22:06:9d:cc:ed:63:c9:b8:73:e4:e6:
                    0b:c9:96:69:c7:1a:92:08:52:ba:3e:f2:4c:b7:96:
                    eb:d0:5f:31:2a:9c:6d:04:fa:f3:b8:75:fb:d6:63:
                    41:a8:6b:f1:a5:27:f6:db:a4:53:49:38:6e:32:97:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:52:C7:79:68:F1:FC:D0:6A:84:62:9E:45:AE:87:92:89:D7:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/fb331c26-4b64-3e7c-99a6-74c206aa3828.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:8e:71:17:e5:e6:27:39:60:68:57:f2:b5:f7:3c:0f:7a:1a:
         b0:5a:1a:0f:62:e6:5b:2d:40:6d:f6:7c:21:1a:d2:8e:88:dd:
         ec:20:d2:cc:68:02:3f:02:8e:1d:76:78:80:1b:98:c6:a2:ac:
         57:c3:20:91:46:61:84:39:45:fc:02:c5:fa:f4:7f:ea:ba:58:
         b8:d5:63:28:b6:4b:9b:05:80:19:08:fd:36:f0:76:18:4c:24:
         b2:61:29:b0:b8:60:cd:f3:9f:f8:be:82:0d:26:74:b2:b4:2d:
         c6:2c:9c:90:b0:e3:d1:55:67:a2:af:dd:0a:61:a1:84:23:a2:
         fc:11:fa:5b:6d:76:9d:13:14:78:7f:20:1c:de:45:70:48:f0:
         e0:a0:0d:03:b8:9d:d0:46:6e:b3:44:9d:1b:fa:3f:d4:f3:db:
         9e:dd:f1:de:07:6e:dd:2e:d6:27:af:66:0a:c9:93:49:ff:23:
         84:12:a1:24:61:30:06:60:65:a0:a9:94:39:6f:35:ba:de:27:
         e3:9c:78:e1:e4:9b:f1:4e:78:10:82:3a:aa:ce:44:34:10:3e:
         15:6f:15:b5:62:e3:5d:dd:aa:31:c7:68:ad:61:40:14:d0:6c:
         dd:d6:ea:0b:aa:95:41:eb:2e:20:da:97:f5:1e:5f:e7:97:80:
         f4:17:dc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 21:00:31 2024 by rpki-client on console-fra.rpki-client.org