Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa
File:                     321af030-02a0-3657-a888-5ff509ca35d1.roa (raw, json)
Hash identifier:          OXcYrsXFJOiNC7+hL2KD9cMBIxbo2pBqj3U4yZkcO/4=
Subject key identifier:   79:BA:88:5E:40:C7:3C:C4:6D:AA:EA:AE:D8:2F:F6:F8:61:7E:E8:F1
Certificate issuer:       /CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
Certificate serial:       010D0C9F43285847AE36C2421CFA54CD01022E46
Authority key identifier: AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa
Signing time:             Sun 27 Oct 2024 13:00:41 +0000
ROA not before:           Sun 27 Oct 2024 13:00:41 +0000
ROA not after:            Sat 25 Jan 2025 14:00:41 +0000
asID:                     14618
IP address blocks:        65.38.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ae:36:c2:42:1c:fa:54:cd:01:02:2e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9acebd4e-10d7-44b3-802e-4efe607dd4e3
        Validity
            Not Before: Oct 27 13:00:41 2024 GMT
            Not After : Jan 25 14:00:41 2025 GMT
        Subject: CN=22dee572-e1d4-473c-b438-521f66c14b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:d0:aa:ec:80:31:60:9b:e7:e8:be:3f:5d:
                    1f:c1:37:da:25:79:f5:5c:72:43:bc:c3:b5:c6:0c:
                    3b:d1:c2:9d:f6:06:e2:aa:f5:47:65:e9:5c:0e:64:
                    58:4f:7f:fe:b5:26:e7:5f:de:57:05:63:68:9c:c4:
                    ff:11:a5:4b:4c:00:e5:db:39:a6:be:e7:9b:6f:14:
                    9b:8c:96:8d:bf:74:5e:e7:eb:ca:00:aa:a3:86:cb:
                    cc:a1:bc:76:a9:08:a3:f8:b2:38:58:75:04:d8:7e:
                    80:f9:2b:fe:60:30:0d:71:e0:ee:39:e1:bd:d6:87:
                    af:68:3f:f4:b0:c2:d8:44:6a:12:c4:87:76:fc:e2:
                    cf:c4:1c:f9:36:a8:b6:b6:7e:9a:23:b5:aa:4c:06:
                    cc:30:17:65:83:6d:b4:b5:e8:36:e0:6d:ee:fb:2d:
                    71:d0:e5:16:e7:26:16:a1:b2:ad:06:3c:a5:d9:e6:
                    bd:c2:7c:c1:db:5e:94:27:83:e7:03:ec:10:b6:13:
                    cc:ee:3b:c2:a8:65:3c:22:61:52:8c:0d:a4:db:31:
                    f1:76:2a:5c:e5:e6:d7:ac:0c:38:ca:6b:56:a4:f1:
                    87:37:c8:3d:3a:0f:d2:72:02:f2:df:c2:c2:70:11:
                    3e:d2:6a:80:78:1b:85:e4:46:30:36:f5:99:59:96:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BA:88:5E:40:C7:3C:C4:6D:AA:EA:AE:D8:2F:F6:F8:61:7E:E8:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/321af030-02a0-3657-a888-5ff509ca35d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3/9acebd4e-10d7-44b3-802e-4efe607dd4e3.crl

            X509v3 Authority Key Identifier:
                keyid:AA:97:35:3D:93:AC:AD:D5:70:FB:DB:56:2D:A5:D4:0F:56:55:74:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9acebd4e-10d7-44b3-802e-4efe607dd4e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:f5:58:28:38:e9:6f:9a:d3:0a:7d:48:a0:29:b9:3f:80:60:
         17:38:4d:76:b6:3a:d9:1a:c9:50:54:5f:54:38:26:17:a9:30:
         c4:44:a1:0c:14:f9:3e:b4:5c:01:2a:27:f6:11:3f:f7:53:27:
         cf:03:73:b9:bf:2f:3e:f0:81:0c:68:d6:1d:44:cb:55:9d:d3:
         6e:79:2e:d7:ef:75:8b:d8:d9:40:2e:1f:3c:75:f9:6e:90:48:
         6c:27:0e:8a:b5:f7:70:81:97:57:f1:b9:c0:20:71:1f:67:cd:
         20:20:62:06:13:48:f8:52:1a:9e:fb:c5:b1:52:4d:d5:3d:75:
         ed:8b:f6:54:a5:e2:00:d2:f9:1c:e6:79:99:ec:37:9b:0a:aa:
         68:a5:95:82:f7:af:a8:29:01:12:cb:2e:8c:c7:8c:4e:08:88:
         32:8f:7a:1c:71:53:ed:40:48:46:90:cb:94:c9:3e:1a:66:43:
         14:f5:48:a9:09:0d:01:1c:ad:66:8b:6d:c4:9f:66:a3:3a:45:
         1c:e5:36:ce:15:b9:0d:4a:03:25:64:2d:82:de:a2:52:fc:33:
         db:bc:7b:c5:ef:c6:28:69:e8:9d:c3:fc:55:eb:e2:4a:7f:1a:
         88:a0:5d:63:cb:85:7f:11:34:63:a7:49:a6:37:6c:89:9a:ec:
         6a:68:cd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:31 2024 by rpki-client on console-fra.rpki-client.org