Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a730b90a-6bce-3197-81db-9e7c531b4458.roa
File:                     a730b90a-6bce-3197-81db-9e7c531b4458.roa (raw, json)
Hash identifier:          JCVij8dDdtXg2G1xSaeu7RGihcTFYDlo6Z8ODtUYJRQ=
Subject key identifier:   A4:62:29:A6:60:17:BC:29:28:D9:4B:1A:5D:BE:68:2D:43:E5:3F:09
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F432858479D76D7981358A8E2BA050780
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a730b90a-6bce-3197-81db-9e7c531b4458.roa
Signing time:             Mon 21 Oct 2024 13:00:41 +0000
ROA not before:           Mon 21 Oct 2024 13:00:41 +0000
ROA not after:            Sun 19 Jan 2025 14:00:41 +0000
asID:                     397219
IP address blocks:        64.6.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:9d:76:d7:98:13:58:a8:e2:ba:05:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Oct 21 13:00:41 2024 GMT
            Not After : Jan 19 14:00:41 2025 GMT
        Subject: CN=3eff5d53-6506-4d8f-a146-9b3ed534dd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b8:19:d6:45:4d:0e:c2:b1:79:94:e1:cd:3d:
                    32:01:96:88:0e:c8:43:45:fe:67:69:1f:3d:94:2a:
                    5c:0e:1f:82:65:8d:f9:45:29:f0:31:04:d2:46:33:
                    4a:b8:0d:4b:37:d4:34:c0:6c:47:3b:7d:61:b4:58:
                    30:40:9f:c8:ea:0a:13:d6:9e:3d:e7:bd:0b:ae:90:
                    28:6f:42:09:12:b5:f2:1a:37:7b:bb:8c:36:a4:05:
                    ea:24:65:10:66:1a:7b:69:d4:4f:f2:c6:c5:4f:38:
                    85:db:4a:19:d8:cf:3f:1a:76:bd:3b:dc:37:09:dc:
                    80:80:fe:88:06:16:f1:45:d0:e1:d9:cc:1a:14:a5:
                    c8:06:fa:bc:b5:1a:b8:0b:24:78:59:8a:24:7b:b6:
                    55:4d:1d:75:b0:32:c6:37:64:39:d0:24:da:6f:9e:
                    6e:3c:c4:50:62:56:0e:ba:d4:66:59:53:c7:cc:c0:
                    c0:a1:ff:da:ac:65:08:16:78:37:f6:c7:68:67:4d:
                    46:c9:a5:13:dd:9b:e0:9d:71:fb:08:14:63:80:3f:
                    20:1e:6d:40:8e:e8:5b:7a:48:99:6a:12:7a:7d:78:
                    f6:c5:14:cd:17:ee:9f:4a:25:68:8a:3b:79:f4:02:
                    27:99:e1:4d:25:88:a8:9d:06:ae:2a:43:08:95:6b:
                    30:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:62:29:A6:60:17:BC:29:28:D9:4B:1A:5D:BE:68:2D:43:E5:3F:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/a730b90a-6bce-3197-81db-9e7c531b4458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:52:79:44:73:b8:77:32:e3:56:91:a9:a5:82:a7:bf:00:90:
         55:c9:bd:9e:2f:40:c2:b6:62:94:a2:07:c6:05:42:1c:b6:ee:
         d0:46:26:ec:a2:6c:60:ba:c7:78:c3:a7:4f:e3:a2:df:09:c3:
         b2:5f:40:1d:e6:6f:84:dc:ec:73:e1:34:a4:ef:c9:1d:7a:11:
         d0:d8:af:eb:a0:67:55:2b:05:4c:7e:ee:c7:e1:3e:56:a6:da:
         c0:d0:68:ab:a0:9f:55:08:d2:fc:f8:eb:66:c2:91:d8:41:9a:
         95:b6:c8:9b:30:47:94:20:6f:6d:7c:d4:f8:af:3b:30:f2:ae:
         80:9f:c3:07:7b:a9:b2:02:25:44:79:98:ef:28:08:14:f1:58:
         ab:af:f2:cd:c2:8b:4d:a6:df:ba:13:f4:19:32:77:15:e9:61:
         2a:5b:1b:dd:e1:75:9e:91:39:11:7a:d7:84:72:56:16:26:30:
         cf:8b:9c:ef:37:4e:cb:a4:aa:13:de:c0:66:f6:08:b9:eb:99:
         1b:4d:ee:96:23:e7:34:e7:c7:1f:16:eb:16:02:ec:29:de:d1:
         60:bf:76:34:f6:56:dd:b1:49:0e:0e:f4:9f:78:39:e8:27:a2:
         f7:b7:76:c9:fb:e3:c7:51:7c:fd:8d:ee:9f:ed:16:c0:05:a7:
         0f:3a:fa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:05:39 2024 by rpki-client on console-fra.rpki-client.org