Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa
File:                     7291e172-07a7-3322-828d-5422f9b4ebb0.roa (raw, json)
Hash identifier:          YkwyQnNM8pUGKEPoi40VaH17s8AYHZAK8JUwhxiNOFQ=
Subject key identifier:   5A:01:67:AC:50:1B:DE:7B:15:3E:EA:20:CA:6A:A2:6D:D2:49:A4:9A
Certificate issuer:       /CN=5d69368b-4714-4878-9f6c-905e98da853c
Certificate serial:       010D0C9F43285847362B5AD7ADFA1C98C1C1AAC0
Authority key identifier: 3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa
Signing time:             Sat 14 Sep 2024 13:00:41 +0000
ROA not before:           Sat 14 Sep 2024 13:00:41 +0000
ROA not after:            Fri 13 Dec 2024 14:00:41 +0000
asID:                     14618
IP address blocks:        158.51.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:36:2b:5a:d7:ad:fa:1c:98:c1:c1:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d69368b-4714-4878-9f6c-905e98da853c
        Validity
            Not Before: Sep 14 13:00:41 2024 GMT
            Not After : Dec 13 14:00:41 2024 GMT
        Subject: CN=b8a687cc-b868-49c9-bdb9-01f82abb4a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:33:74:19:2a:72:c0:1c:85:cb:ff:d6:92:78:
                    be:37:47:8e:49:5a:54:54:89:31:44:e9:bc:03:37:
                    ad:f9:de:da:df:c2:c7:76:2c:97:63:8a:ef:63:c8:
                    eb:4b:9c:a7:96:96:e9:5b:af:aa:32:9b:8d:d9:8a:
                    fc:e8:b9:41:5a:4e:27:c3:03:bb:21:47:03:6b:4d:
                    bd:f3:4d:46:38:93:2c:37:de:70:69:4f:17:82:5e:
                    ef:53:47:91:9a:23:16:23:ed:1d:97:1b:3f:1e:57:
                    5d:49:3e:a1:7c:f8:56:01:41:7b:d8:6a:a2:f6:5e:
                    9f:0e:e7:bb:7e:88:1a:16:18:7a:28:c8:b0:3d:6e:
                    0b:16:2d:6b:e7:14:4b:61:55:43:93:c1:68:02:04:
                    6f:3a:8a:58:12:67:55:f1:46:f3:87:61:c3:27:87:
                    96:1f:91:26:b3:ad:7e:69:3f:97:e8:af:a1:81:48:
                    75:f9:43:93:c2:9e:dc:a3:62:8d:38:3c:7f:76:f7:
                    ff:d5:f2:80:15:44:b6:90:4e:bb:1f:2b:25:0b:c0:
                    95:f9:1a:68:dc:d3:cc:94:bc:d9:3d:7a:9f:cf:de:
                    79:95:5a:84:11:bc:55:95:f9:c6:b5:de:56:a3:08:
                    1a:9c:9f:29:32:b2:95:64:b0:51:56:8c:10:70:1c:
                    13:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:67:AC:50:1B:DE:7B:15:3E:EA:20:CA:6A:A2:6D:D2:49:A4:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/7291e172-07a7-3322-828d-5422f9b4ebb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c/5d69368b-4714-4878-9f6c-905e98da853c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:56:59:D3:78:18:67:3A:B0:07:CB:FD:BF:EA:03:ED:47:A9:B3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d69368b-4714-4878-9f6c-905e98da853c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:48:6f:5b:cd:5e:74:91:51:42:50:21:86:c4:79:6a:e0:
         78:6a:64:51:42:9c:7d:c2:c2:4f:a7:1c:9f:de:e7:9f:8b:fa:
         a1:69:4b:99:2c:80:9c:66:46:60:0a:5c:42:e7:4d:22:19:1e:
         8f:5f:d6:8c:ab:da:0c:23:2e:2a:ee:6a:9d:ce:26:4f:c5:0d:
         42:be:51:68:25:7a:d5:2a:bd:c8:46:12:40:a8:9a:5c:d8:09:
         28:73:7e:db:8d:27:67:89:1a:8c:c8:06:8a:b4:59:45:80:0d:
         75:aa:6b:c6:ca:d9:e3:62:b1:c2:61:16:4d:e8:b8:f9:5d:86:
         10:9e:41:30:a1:07:27:c8:30:3a:f2:a3:8b:62:f5:99:15:f3:
         bc:8f:e3:9c:37:9b:63:09:6a:ce:29:8f:2f:6e:63:42:10:68:
         2a:bb:32:e7:5c:1d:0a:df:17:e2:28:7b:8f:76:98:34:93:1a:
         79:ce:3a:bf:e4:c9:25:d4:95:90:62:67:ce:bc:16:00:57:7c:
         93:96:95:14:b3:ed:c6:6d:75:f9:9a:ce:41:45:aa:d0:2b:c0:
         17:67:c1:d1:d7:96:f1:06:03:34:78:73:56:6d:fb:43:3c:f7:
         64:a8:20:00:8b:87:43:60:58:50:88:f8:f0:b7:9f:7d:81:6f:
         a2:12:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:37:12 2024 by rpki-client on console-fra.rpki-client.org