Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa
File:                     934160e5-55a7-33a4-be6b-7aad090ddddc.roa (raw, json)
Hash identifier:          OSLf8jh7BvxXDmK/h6VYMnUtNHuWn9aanfCBeeyl1X8=
Subject key identifier:   FD:10:0B:B2:6A:EC:9F:63:E7:AA:2A:EA:F2:25:BD:65:41:0B:15:42
Certificate issuer:       /CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad
Certificate serial:       010D0C9F43285847F2BA37AF41C5EC773BED1380
Authority key identifier: 27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa
Signing time:             Thu 21 Nov 2024 02:00:38 +0000
ROA not before:           Thu 21 Nov 2024 02:00:38 +0000
ROA not after:            Wed 19 Feb 2025 02:00:38 +0000
asID:                     54196
IP address blocks:        65.38.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:ba:37:af:41:c5:ec:77:3b:ed:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcafd4be-2865-4c0e-8cf0-831bdd0ecaad
        Validity
            Not Before: Nov 21 02:00:38 2024 GMT
            Not After : Feb 19 02:00:38 2025 GMT
        Subject: CN=8020c628-8958-4544-829c-2ab13b67bd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:98:80:b8:02:26:29:73:7e:4f:c5:4c:02:22:
                    0d:4a:76:ce:c9:0f:04:6a:08:00:f4:49:d6:b1:16:
                    60:e1:1c:b0:76:81:3e:c8:91:97:d6:8a:2d:fa:b9:
                    38:58:19:04:dc:8b:e6:b8:5c:0a:16:11:7d:74:27:
                    74:30:84:fb:61:66:72:68:af:cf:91:df:5b:c0:48:
                    b4:f4:09:32:0e:cf:28:96:53:bb:c3:b7:23:08:96:
                    9c:21:67:00:53:51:fe:07:45:34:aa:a1:67:85:6f:
                    52:63:e0:d2:59:81:a8:ff:1b:c5:33:6e:f8:d2:47:
                    9d:06:55:bb:a2:db:6b:75:73:0f:a7:63:99:14:35:
                    6c:82:fd:c4:d1:b8:eb:71:7d:9d:43:06:18:9f:97:
                    7e:82:1e:fa:aa:b9:5d:80:fd:aa:69:4e:fb:76:f7:
                    d5:1f:36:6f:75:6c:47:cf:df:90:76:e0:ed:05:8e:
                    56:a6:1a:69:e4:b3:92:28:e2:13:1f:9c:51:df:04:
                    fe:14:76:3b:af:e8:29:28:af:67:ca:02:59:6c:f8:
                    c8:03:1e:23:03:ae:6b:49:d8:0f:63:73:df:b0:fa:
                    8e:53:00:9c:e3:6d:8c:63:ee:ee:af:3b:ef:d2:31:
                    53:8a:80:2b:d7:02:8a:a8:77:90:6e:d3:25:bd:67:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:10:0B:B2:6A:EC:9F:63:E7:AA:2A:EA:F2:25:BD:65:41:0B:15:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/934160e5-55a7-33a4-be6b-7aad090ddddc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.crl

            X509v3 Authority Key Identifier:
                keyid:27:30:F6:19:D6:E3:7B:08:E5:F5:22:6A:12:8F:21:C6:56:81:C2:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fcafd4be-2865-4c0e-8cf0-831bdd0ecaad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:4c:70:8c:d3:df:37:fc:cc:6c:01:c3:3c:36:c2:21:ca:71:
         1d:41:d2:16:a3:47:57:7f:73:a1:21:3d:e6:c6:43:e6:35:e7:
         b4:6e:fe:6b:f2:e6:13:48:38:f0:72:38:c2:77:0c:b9:2a:2a:
         a7:71:42:cc:b6:bf:66:58:03:8e:41:f8:4c:9b:ef:14:22:dd:
         1b:4a:cf:88:06:d2:0e:1c:cc:fc:07:5d:ec:c5:30:b2:ba:7b:
         39:41:ed:21:b3:00:86:77:61:a4:d0:0c:ed:07:03:2e:3a:e4:
         3e:24:c5:31:a1:56:a1:33:b5:06:af:e0:f2:3b:c8:a6:af:93:
         10:04:b0:30:3e:1e:a6:3a:df:ac:81:d2:68:0a:cb:b1:59:08:
         5e:2a:6a:26:99:d1:16:01:8d:88:f4:cc:88:0b:01:cf:e2:7c:
         b9:6d:dd:e2:5f:ba:1f:25:5b:fb:b4:fa:0d:59:8a:48:56:05:
         c3:7d:67:af:17:f1:9c:1a:c1:30:9d:40:b4:71:e0:ce:36:48:
         2a:bf:6e:ae:b2:c7:d3:bc:e2:48:09:d2:4b:b1:1f:4f:c3:29:
         32:b0:6f:3b:b3:b0:46:5a:4a:d9:22:12:74:ce:d6:96:40:c1:
         75:64:bf:3e:3d:83:90:e8:79:22:cc:e9:9d:c6:0d:a9:51:78:
         59:37:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:56:43 2024 by rpki-client on console-ams.rpki-client.org