Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa
File:                     7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa (raw, json)
Hash identifier:          e98oldMUwoYNb51zll3j5mEHIpnxBLLLHawWyP8pqlc=
Subject key identifier:   44:D6:45:B1:B7:D2:B6:7E:61:13:58:AE:B0:86:5A:18:00:ED:D6:7E
Certificate issuer:       /CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
Certificate serial:       010D0C9F432858474850AE7D22290AEE0B945E00
Authority key identifier: 8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa
Signing time:             Sat 21 Sep 2024 01:00:33 +0000
ROA not before:           Sat 21 Sep 2024 01:00:33 +0000
ROA not after:            Fri 20 Dec 2024 02:00:33 +0000
asID:                     14618
IP address blocks:        65.37.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:48:50:ae:7d:22:29:0a:ee:0b:94:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03bdf5b0-733b-481b-adcb-fb8459b7028b
        Validity
            Not Before: Sep 21 01:00:33 2024 GMT
            Not After : Dec 20 02:00:33 2024 GMT
        Subject: CN=4d5d6031-f56b-4799-9fd1-23352add9376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:85:9f:f1:fc:7e:15:a4:de:0b:2e:05:60:df:
                    a2:42:4f:42:3f:8f:02:8c:d8:75:8a:5c:e8:1b:47:
                    e8:4b:d7:25:60:c7:90:ff:71:f4:36:8b:a6:d0:1e:
                    69:bf:c5:d2:be:59:bb:2d:d5:d0:d8:97:f9:3c:7b:
                    5c:ef:fa:4a:14:45:7b:c3:ab:00:11:53:f1:9e:58:
                    7e:b9:27:58:a1:0e:9e:e4:0f:56:03:5e:42:4f:f9:
                    f1:85:56:ae:b5:f1:f2:1a:3e:4f:c2:f4:56:01:3c:
                    9e:19:c7:30:f1:1d:ef:d2:9f:27:12:33:26:40:eb:
                    dc:bd:77:e5:cd:73:ed:03:0e:75:05:78:9c:1b:92:
                    b3:86:8d:d9:47:e3:af:f3:24:0c:3f:06:3d:42:88:
                    b0:dc:9c:9e:d5:08:2f:79:20:bb:5c:37:a4:52:f7:
                    9b:2f:ca:f4:3b:dc:df:4e:cb:18:d9:0c:c7:c5:35:
                    45:0f:e5:13:dd:4c:87:3e:b7:d1:7b:63:8a:ca:b7:
                    24:40:3e:f7:e9:03:4c:31:16:8f:5f:4b:71:55:eb:
                    d1:22:ba:68:3b:ea:16:cd:31:59:ce:63:29:33:5c:
                    c8:e8:14:11:68:8d:7e:99:a0:f3:8f:be:f1:53:12:
                    2d:43:20:c1:1d:f6:cf:44:b7:d7:4b:b9:bc:c1:5a:
                    77:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D6:45:B1:B7:D2:B6:7E:61:13:58:AE:B0:86:5A:18:00:ED:D6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/7f78efa4-3448-31ef-a1d5-cd690a4dc7e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b/03bdf5b0-733b-481b-adcb-fb8459b7028b.crl

            X509v3 Authority Key Identifier:
                keyid:8A:70:E5:B2:68:20:BD:68:D3:A4:26:CA:92:82:EE:AA:09:FD:3F:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03bdf5b0-733b-481b-adcb-fb8459b7028b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.37.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:a9:8b:7c:d2:d3:35:bf:4f:d8:f6:d2:0b:7f:bc:72:6e:
         1f:5e:a6:4b:7a:07:bd:44:34:75:f1:f0:b6:4b:48:b3:e3:ff:
         8b:f2:5e:46:c0:8b:af:20:7c:e8:41:30:42:b9:bd:b8:69:7d:
         74:f0:50:bd:e2:34:ba:bd:69:8e:7f:18:57:87:db:67:a4:c3:
         97:65:28:95:b6:f3:c5:76:8b:9a:7d:fe:2f:b6:06:71:3e:3a:
         7b:e1:51:f1:51:2e:39:9d:5c:b2:f1:02:01:d1:1f:9e:50:68:
         a8:56:ae:1f:0c:ca:22:99:38:6b:70:13:d5:a2:76:c1:71:16:
         6b:7f:a7:18:86:0e:36:20:77:e6:b7:59:4f:c2:e9:0e:b8:0f:
         46:c4:96:7f:7c:4a:99:2b:92:f3:43:97:94:2d:51:be:16:67:
         68:ce:ee:23:ad:eb:a4:73:8b:22:65:8e:5e:5e:47:f2:f1:e5:
         bb:da:98:91:32:b5:f0:e9:55:4f:8c:54:ed:8e:d4:97:28:21:
         5b:2d:ed:bc:4a:a3:39:2d:01:99:49:67:8b:fa:b6:05:a8:a6:
         82:58:69:cb:4d:64:1b:1e:a1:66:8c:b1:7d:91:ae:77:f7:37:
         7d:f4:b8:ae:34:31:59:59:a2:20:d0:5b:49:7c:d0:a8:eb:30:
         36:75:16:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:56 2024 by rpki-client on console-fra.rpki-client.org