Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa
File:                     3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa (raw, json)
Hash identifier:          38wmes0YuNyR3ykiFDFNDAHYrRNuqkA7iz6MwSGNkT8=
Subject key identifier:   8B:10:FA:23:5E:5B:2E:B2:C4:28:EA:57:9F:63:1F:F5:75:DC:4D:C6
Certificate issuer:       /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial:       010D0C9F432858457A488BD54E5CA4709B194F00
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa
Signing time:             Mon 08 Apr 2024 13:00:34 +0000
ROA not before:           Mon 08 Apr 2024 13:00:34 +0000
ROA not after:            Sun 07 Jul 2024 13:00:34 +0000
asID:                     16509
IP address blocks:        65.20.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7a:48:8b:d5:4e:5c:a4:70:9b:19:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
        Validity
            Not Before: Apr  8 13:00:34 2024 GMT
            Not After : Jul  7 13:00:34 2024 GMT
        Subject: CN=7a9d1dec-e23b-4714-9554-e7051c3971cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a2:78:5d:fa:01:ec:54:64:c6:e9:31:2a:40:
                    b7:22:b4:e7:86:ef:f6:60:0f:41:53:46:55:0f:f3:
                    8a:64:90:47:a2:ca:f7:15:34:6f:65:88:f7:2c:ff:
                    9b:4f:50:49:76:a8:60:d8:e0:7c:c2:73:34:33:8b:
                    58:fd:aa:9a:bd:0b:ee:d5:03:69:b8:64:c7:76:d9:
                    9f:f5:52:ed:d8:f5:ca:72:b2:1d:dd:1a:55:d4:b0:
                    a7:99:3a:db:67:d8:e7:83:e5:92:88:87:f7:dc:4e:
                    5c:ae:21:7c:c7:74:24:7c:cc:bf:06:38:8e:60:80:
                    12:db:59:99:43:cc:b1:04:0e:c9:80:37:5c:eb:27:
                    2e:de:33:48:e3:9f:8e:a1:44:b0:5f:26:b2:76:4e:
                    57:b6:a7:ab:f4:fa:c8:4f:4a:ba:2f:4a:a8:61:f5:
                    4d:61:2e:e0:80:b7:0d:e2:44:12:31:e4:eb:10:d1:
                    33:73:21:40:50:d4:c3:9e:05:aa:ce:30:2e:99:29:
                    cb:fe:42:98:f0:9d:a9:7f:d1:7e:b1:a8:59:31:e5:
                    5d:f6:25:94:20:d8:3b:44:bf:4b:51:aa:4e:7c:cd:
                    1c:03:6d:13:65:b3:0a:ee:24:2d:ee:61:9d:1f:87:
                    13:b8:d0:b8:9d:61:15:22:82:88:56:46:51:2c:4b:
                    e3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:FA:23:5E:5B:2E:B2:C4:28:EA:57:9F:63:1F:F5:75:DC:4D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/3f1a0618-7321-3fe4-8052-fb0e44277ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl

            X509v3 Authority Key Identifier:
                keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:9c:f5:59:b7:68:de:1a:19:21:83:ca:5d:8a:dc:05:22:ba:
         10:d4:99:73:0b:cd:d3:2c:a1:0c:80:a4:90:d9:1f:e3:89:f3:
         36:77:2e:0b:3e:0e:24:e4:08:9b:3f:d4:95:a1:02:89:ab:4c:
         ce:f9:ff:eb:17:53:d7:f3:cb:93:40:12:8d:7a:ab:dd:14:d4:
         fe:56:f7:e1:b5:2a:f4:5b:0d:b9:64:ed:40:5f:7a:cb:79:75:
         4f:70:08:9d:9c:b0:26:d9:c6:a0:f2:00:80:56:d6:d1:50:e9:
         cb:31:ec:a4:c7:23:d5:34:c4:32:af:87:64:d8:1b:3d:85:91:
         34:b8:01:01:6d:0e:42:8f:9e:e1:02:4e:9c:e4:09:8b:1c:96:
         3b:e8:8f:ab:5a:72:df:21:64:fb:75:73:f9:f9:02:f6:28:0c:
         f6:80:0a:ec:11:8a:9f:b2:f0:72:52:db:22:f0:5c:e5:6e:2d:
         ad:a8:22:3a:46:1b:c9:dd:17:86:a6:f2:12:e3:df:43:fc:ed:
         b3:db:45:33:cf:8b:af:e7:8c:99:60:d9:2c:ed:e6:81:1d:8f:
         60:90:71:40:f2:76:36:95:e4:93:80:4c:e1:7c:06:fe:79:a9:
         76:fb:e0:ff:e6:86:47:00:32:ef:64:68:9a:6f:01:ce:6a:3e:
         9c:5e:3e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:00:01 2024 by rpki-client on console-ams.rpki-client.org