Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/55e4f231-4ac6-36d3-b178-99a3126c4363.roa
File:                     55e4f231-4ac6-36d3-b178-99a3126c4363.roa (raw, json)
Hash identifier:          Znr0v/KpsHJliT15bDBRrLyrjMFde86g07KlcFIauUg=
Subject key identifier:   7F:2E:C5:EE:E2:06:42:9C:9D:3E:13:BD:23:CD:4E:16:0F:65:69:96
Certificate issuer:       /CN=d3237408-0888-4b1f-bed5-a45886656401
Certificate serial:       010D0C9F43285845DBFE684BA47F67E168802EC0
Authority key identifier: E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/55e4f231-4ac6-36d3-b178-99a3126c4363.roa
Signing time:             Mon 13 May 2024 13:00:34 +0000
ROA not before:           Mon 13 May 2024 13:00:34 +0000
ROA not after:            Sun 11 Aug 2024 13:00:34 +0000
asID:                     204958
IP address blocks:        208.65.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:db:fe:68:4b:a4:7f:67:e1:68:80:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3237408-0888-4b1f-bed5-a45886656401
        Validity
            Not Before: May 13 13:00:34 2024 GMT
            Not After : Aug 11 13:00:34 2024 GMT
        Subject: CN=8a6d94cc-c403-4ac2-8c96-eb1ff73957f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:46:ee:55:1f:c7:8f:11:c6:56:87:a6:9d:f9:
                    4f:39:82:22:98:35:e9:a0:58:87:6e:ec:aa:e3:18:
                    59:ef:9b:e8:c3:9d:7c:a3:26:70:35:32:75:b0:d2:
                    2b:a4:da:24:4e:3b:c7:7c:ad:19:2b:1e:9f:18:5b:
                    f6:f2:e5:c8:5e:7e:77:e9:d0:6d:d4:bd:9e:6a:d8:
                    dc:4f:a9:08:5e:a9:50:f7:2f:59:eb:f3:83:9d:93:
                    23:4e:32:8c:81:34:10:4a:3e:fa:05:60:a5:0a:58:
                    0b:32:2d:6f:fa:d7:c9:7d:6b:13:b5:4b:8b:e4:bb:
                    55:9c:79:9c:95:42:b1:84:de:f4:21:e3:c7:91:1b:
                    2d:e8:03:87:87:18:13:d2:7c:5e:a9:f0:4e:3b:f9:
                    96:44:ca:14:41:09:3f:05:fb:97:b4:09:fe:15:f3:
                    30:ae:33:42:9c:b1:ec:81:c1:e0:05:c0:02:cf:8e:
                    05:5f:f2:aa:54:6c:19:09:db:da:60:71:97:01:2e:
                    44:62:f5:91:e6:e8:df:06:6e:fd:02:18:4e:92:12:
                    64:55:d9:2c:2c:d4:2a:37:ff:d9:de:35:1c:2c:e3:
                    f3:61:d8:de:a7:30:65:a3:54:cd:30:73:53:05:3a:
                    b0:99:fa:4e:6c:34:93:bd:a5:60:2d:bc:45:b2:06:
                    39:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:C5:EE:E2:06:42:9C:9D:3E:13:BD:23:CD:4E:16:0F:65:69:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/55e4f231-4ac6-36d3-b178-99a3126c4363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401/d3237408-0888-4b1f-bed5-a45886656401.crl

            X509v3 Authority Key Identifier:
                keyid:E8:D7:55:D9:7A:18:FA:F9:D3:AE:04:B7:D4:31:2E:BC:45:FD:24:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d3237408-0888-4b1f-bed5-a45886656401.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0f:3e:15:ea:21:cf:39:03:71:47:91:8d:a7:73:c6:06:cb:
         0f:60:62:7f:59:7a:21:52:c2:5a:a2:ca:6a:f5:f4:57:8b:5f:
         1a:39:f5:8f:f2:33:4a:7a:ba:e8:2f:cf:68:16:ee:d3:87:c7:
         62:52:51:05:31:53:43:a7:1b:ec:eb:21:ea:57:bf:ca:30:79:
         4a:11:f5:e5:4b:4b:45:c7:6d:02:3c:50:e8:54:b4:e2:5e:ee:
         b3:06:40:32:9c:69:56:4d:4c:81:94:54:20:d8:df:89:78:c4:
         de:c4:83:ce:0d:e5:c5:75:34:8e:3f:72:c2:92:dc:e1:73:fb:
         50:47:8c:d1:92:6a:16:34:81:28:ca:26:36:b7:ff:d6:f2:43:
         fd:49:b4:4b:9e:74:a4:c0:7e:c7:4d:d0:f5:18:fb:75:5d:f9:
         d7:46:a5:c5:63:25:5e:21:39:da:fd:9d:d8:a0:bf:52:72:e8:
         c6:29:6b:0a:cb:3f:7d:03:35:d8:15:fd:fe:cc:f2:f6:85:e7:
         1d:c9:70:a0:e3:e9:59:21:bc:2a:56:63:68:1c:9e:04:96:cf:
         c6:3f:c7:dc:50:68:88:22:08:c9:69:ff:22:b5:f6:7d:92:29:
         d8:08:53:50:34:06:08:96:d5:12:55:12:ce:f8:4b:0e:22:c9:
         bf:b1:38:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 22:48:30 2024 by rpki-client on console-fra.rpki-client.org