Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dccefe5d-2938-3db8-b30b-923955d82b8f.roa
File:                     dccefe5d-2938-3db8-b30b-923955d82b8f.roa (raw, json)
Hash identifier:          Evl3vd1hIwfVAZ+dq51vPopPsoUde3jryZwZWIDnZQs=
Subject key identifier:   23:14:02:30:FE:A4:ED:61:62:72:9D:72:6C:6E:AB:F1:AC:68:3F:83
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858472DCB2F9D18C85781C7D30380
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dccefe5d-2938-3db8-b30b-923955d82b8f.roa
Signing time:             Wed 11 Sep 2024 13:00:42 +0000
ROA not before:           Wed 11 Sep 2024 13:00:42 +0000
ROA not after:            Tue 10 Dec 2024 14:00:42 +0000
asID:                     203724
IP address blocks:        208.65.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2d:cb:2f:9d:18:c8:57:81:c7:d3:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Sep 11 13:00:42 2024 GMT
            Not After : Dec 10 14:00:42 2024 GMT
        Subject: CN=7785b906-c567-4328-bf28-1002a00bc7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:75:f2:90:cc:f9:03:30:ec:b9:24:1d:25:a6:
                    f4:c6:2a:2b:8d:e1:56:46:bb:ce:e7:0c:44:7f:be:
                    2c:12:68:2b:d1:4c:4b:ad:a5:11:91:ec:94:cc:51:
                    19:74:0a:08:39:76:8c:5e:ad:cd:6e:77:42:af:bf:
                    1d:76:c3:6c:18:96:5a:8f:9d:ec:0f:8d:3e:8c:6c:
                    8e:a7:a2:f6:57:f6:ff:d1:d2:70:fb:de:12:c6:9e:
                    6e:81:b9:31:b8:21:1c:e4:c1:41:f6:3c:9a:68:94:
                    b5:4e:3b:8d:be:3c:1e:5f:7b:26:84:7d:cc:99:ed:
                    48:89:b1:f0:73:f7:d4:e8:f3:3f:94:29:c9:2b:f8:
                    b7:67:2b:cd:b1:fb:e3:4a:a6:3f:7c:ae:a0:3c:3a:
                    44:b9:3b:12:58:f4:55:af:f4:15:b6:0e:ad:47:f3:
                    e8:6a:3a:13:14:47:4b:b2:c7:1c:c4:ee:d2:46:6d:
                    5f:34:40:3c:2b:87:b8:95:05:25:00:eb:e2:44:a7:
                    fb:31:14:cc:03:75:5f:34:9f:de:e2:50:b2:ad:18:
                    16:74:f1:a7:91:70:2f:10:74:62:30:30:fa:15:0d:
                    0b:09:8b:0f:05:ef:05:f9:6d:e5:ce:ae:bb:1e:14:
                    c3:0c:cd:29:1c:c2:7b:b8:c9:46:8a:92:99:8d:ce:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:14:02:30:FE:A4:ED:61:62:72:9D:72:6C:6E:AB:F1:AC:68:3F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/dccefe5d-2938-3db8-b30b-923955d82b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:48:bb:88:8d:ad:42:da:eb:1e:8e:fe:31:09:2c:a1:03:32:
         2f:6e:8e:26:2d:9f:46:2b:c4:67:7d:0e:10:42:14:ac:6f:e2:
         9d:6d:dc:04:77:b7:43:f0:a8:52:96:b6:a2:55:4c:a9:2c:de:
         52:2c:78:ff:64:37:34:75:2b:10:d1:07:83:37:5d:35:39:01:
         17:2c:16:eb:b8:1c:99:c8:e7:54:e2:56:66:9d:94:15:f5:5f:
         44:f4:09:66:a7:4e:33:e9:96:dd:8e:ee:92:de:85:d3:19:76:
         2c:50:f6:e6:c6:d0:5d:f8:d4:71:e4:95:7a:87:96:e3:34:85:
         b3:91:e2:ca:e7:54:f5:4e:58:67:ba:1f:e3:5c:eb:1b:c5:e0:
         de:7e:e4:2d:20:8b:81:0f:dc:87:b1:e0:f8:82:ef:c9:f1:c3:
         83:24:8e:9e:61:12:66:71:d2:e8:6b:89:50:21:5b:00:ec:ac:
         86:2f:b2:e1:6c:8f:e4:c3:a5:0a:70:60:54:ab:bd:9f:73:6a:
         ec:14:eb:8e:a3:1a:aa:30:74:fd:d5:54:e2:de:13:42:cd:82:
         26:d7:a2:8e:34:0b:57:c4:3e:69:90:f4:a3:89:42:8a:a1:4b:
         2f:61:ba:ed:fa:50:fd:1f:c3:e7:e3:85:54:b6:a1:4b:a1:f1:
         a1:33:41:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:21 2024 by rpki-client on console-ams.rpki-client.org