Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/a0d82991-7d2e-384a-a6e6-ce51a91ed752.roa
File:                     a0d82991-7d2e-384a-a6e6-ce51a91ed752.roa (raw, json)
Hash identifier:          osvmvwGvodyPGqpuhC7fDWaWXKPtH7dOqNgyjfp7X3A=
Subject key identifier:   12:4B:76:3A:6C:2D:56:EC:AA:10:45:8A:DD:F1:35:22:83:2D:DE:7C
Certificate issuer:       /CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
Certificate serial:       010D0C9F43285844EECFF94D2DA0D1DBCD5E3D80
Authority key identifier: 77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/a0d82991-7d2e-384a-a6e6-ce51a91ed752.roa
Signing time:             Sun 18 Feb 2024 14:00:30 +0000
ROA not before:           Sun 18 Feb 2024 14:00:30 +0000
ROA not after:            Sat 18 May 2024 13:00:30 +0000
asID:                     31898
IP address blocks:        65.20.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:ee:cf:f9:4d:2d:a0:d1:db:cd:5e:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cff3cca1-6cd4-4230-92d3-20abf4db7312
        Validity
            Not Before: Feb 18 14:00:30 2024 GMT
            Not After : May 18 13:00:30 2024 GMT
        Subject: CN=f76fbcd6-a917-47f1-b559-84dd64d9205e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:b5:44:cc:3a:3b:d3:2e:8a:22:fc:ad:96:
                    6e:8a:ea:b9:3b:56:4b:a8:a5:cb:f3:cc:40:d5:1c:
                    6d:5a:0f:85:31:36:c0:0c:75:45:56:79:fb:b2:e2:
                    73:4b:dd:3f:62:77:b9:b6:fe:6e:f7:44:e0:da:dc:
                    bf:bc:55:1c:2a:90:96:bb:50:d9:04:94:2b:89:49:
                    71:a8:ed:c1:16:f5:4e:f6:2a:a7:06:f7:2e:16:ff:
                    c7:35:0a:fe:ca:5d:79:33:04:b8:ca:82:83:47:c1:
                    3e:4f:68:ec:1b:a2:54:f4:a7:ba:4e:dd:78:1d:97:
                    79:b5:08:b6:79:39:35:3f:15:11:c3:19:45:8d:fd:
                    18:ef:43:df:11:45:d5:c9:3d:26:a2:1f:6f:25:8b:
                    b2:f0:73:ef:58:e9:b8:80:ab:ad:8e:65:4f:ec:d9:
                    6d:6a:45:04:3f:90:ff:8f:3e:32:fa:f9:a4:58:d8:
                    84:4f:0c:29:6d:48:c1:00:e5:bc:46:ff:97:2b:6f:
                    3c:55:29:fc:fa:53:84:06:6d:7f:41:94:19:8e:ef:
                    32:7e:ad:8f:a2:f2:f0:c8:ad:60:a4:bb:58:c6:13:
                    97:10:65:c2:bd:3f:8a:77:bc:51:71:3a:3e:82:49:
                    b5:72:54:b4:2c:01:54:a0:79:51:d4:23:3d:6f:3f:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4B:76:3A:6C:2D:56:EC:AA:10:45:8A:DD:F1:35:22:83:2D:DE:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/a0d82991-7d2e-384a-a6e6-ce51a91ed752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312/cff3cca1-6cd4-4230-92d3-20abf4db7312.crl

            X509v3 Authority Key Identifier:
                keyid:77:E3:44:38:73:33:98:DD:77:A6:17:C2:DB:80:77:71:CC:E3:B5:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cff3cca1-6cd4-4230-92d3-20abf4db7312.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:ad:5c:a4:89:55:b0:c8:90:30:6e:45:8b:b0:e7:ea:46:
         28:6a:df:0f:cc:32:0b:17:02:d0:48:cf:b8:5a:44:0a:c6:e2:
         fc:64:1f:f3:ec:88:4e:79:ff:25:18:3f:e8:58:88:d8:7a:f9:
         c7:bd:38:42:f5:53:1f:f7:1f:b2:31:4f:46:9e:c8:27:83:d8:
         4b:cd:21:97:92:20:2f:a8:78:42:d4:4c:27:9d:8d:56:72:27:
         08:90:a7:a4:11:8a:92:bb:a4:23:c0:5e:5c:75:10:2c:10:71:
         6b:40:b6:ff:6e:5f:94:c0:b1:5a:c1:7f:21:a3:6a:ff:d7:f7:
         2f:39:13:95:a3:3f:ac:fd:93:1c:6d:8d:79:a6:c2:77:df:21:
         33:86:f7:0e:b9:a0:06:cd:6f:cc:56:74:9e:c8:aa:01:6a:2d:
         b2:26:36:4e:86:6e:e1:06:3a:a0:30:1b:92:70:e1:e2:1a:af:
         30:bb:c3:f1:61:c7:3f:77:fb:ec:9a:67:51:e5:a5:b5:14:09:
         35:62:43:28:0e:3d:e8:7e:e1:46:76:2e:3e:fd:ed:cb:78:ae:
         23:83:c9:33:c7:ae:0b:21:28:a2:b8:c1:9a:65:09:0c:de:75:
         f6:ba:f0:77:e7:7c:9b:e5:a4:18:80:b1:a5:a3:92:3a:03:f7:
         c1:43:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:51:54 2024 by rpki-client on console-ams.rpki-client.org