Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa
File:                     0e53396b-8611-3d42-ac77-f3f6a383e7de.roa (raw, json)
Hash identifier:          iiD2rQpuR6WJvzHnkRuDhYD2yuTcRj0qoQmDRHi4YsE=
Subject key identifier:   C2:AF:7F:4A:32:DC:43:8D:40:F3:98:AB:61:D2:35:A9:59:05:F3:D8
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3FFCD1D919585823EFE0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     394996
IP address blocks:        65.49.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:3f:fc:d1:d9:19:58:58:23:ef:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=81c06abd-7acf-49a4-ad7c-c9090fd5c908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:83:1a:6a:18:40:24:6f:6b:23:3c:0b:75:d8:
                    08:61:61:e5:e1:1d:45:d7:bc:1b:d7:9d:73:bf:2f:
                    64:f9:9f:98:cd:bf:c0:12:87:fc:2d:bb:ab:9a:cc:
                    3e:5a:cd:93:d6:6e:7f:0d:57:2f:a7:9e:b0:99:e4:
                    f0:11:ef:b8:1c:b7:5d:e9:db:b8:29:b2:f8:42:e2:
                    9f:51:ff:a5:48:e6:2b:c5:36:c6:12:d9:95:f8:69:
                    65:fd:37:b2:98:d8:2f:d2:d3:95:d7:28:04:d0:c5:
                    b3:5b:07:6a:64:37:80:ea:ba:34:f8:f7:ac:d3:0c:
                    c6:85:7d:91:13:ae:39:57:d7:42:14:cd:99:ce:58:
                    74:b1:25:65:b3:db:45:b2:fb:08:89:9e:31:a7:e3:
                    24:1c:ff:40:7c:67:10:0b:31:b0:cc:3d:c0:0a:8d:
                    37:4f:93:e7:32:31:b3:cb:0b:40:a5:c7:b8:37:3b:
                    7c:7f:9f:2e:ab:48:9b:12:86:ed:38:ce:e9:62:dd:
                    61:2f:69:06:40:0c:a3:58:2a:39:65:66:ff:92:a5:
                    5d:82:38:09:ce:11:a5:79:06:5f:3c:52:9e:b3:6c:
                    d6:e5:6c:92:b1:50:ec:a2:39:aa:d1:e8:ca:b0:46:
                    17:ba:3a:b8:64:42:ef:8f:ca:b8:9a:4f:fb:ed:43:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AF:7F:4A:32:DC:43:8D:40:F3:98:AB:61:D2:35:A9:59:05:F3:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/0e53396b-8611-3d42-ac77-f3f6a383e7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:33:72:17:96:cf:dc:fb:15:67:0f:17:36:85:44:b1:3c:00:
         ae:f1:d4:7b:e7:85:4b:aa:03:fd:12:bc:31:92:e6:dd:bf:2d:
         f0:ee:c7:3f:96:31:fa:d8:15:fc:96:96:0d:b7:c0:fa:5e:f8:
         58:de:93:ea:5a:25:8f:95:ce:d3:7f:d0:7b:e4:c7:b3:cc:81:
         a5:5d:0f:85:10:40:d5:27:39:76:08:67:bb:26:78:24:d8:c0:
         fc:de:06:c9:30:63:32:85:d4:4b:ed:65:a9:63:4b:28:4b:8a:
         61:ec:f4:d7:7c:86:c7:8f:c1:c9:3e:4e:2f:d5:8a:68:e8:50:
         d8:60:d9:35:09:a4:fa:c8:9c:f1:79:68:15:5d:9a:5f:5f:46:
         5c:c6:12:7b:d3:b4:0c:5b:ae:8f:8c:2e:42:6a:b6:c7:12:79:
         6b:a5:48:be:30:2b:e2:aa:a7:43:06:d7:8d:b3:2e:f6:ba:8e:
         33:98:b4:87:f4:72:09:32:56:cb:66:5b:d5:24:ff:58:e5:58:
         ed:3e:6c:c7:f7:87:ee:21:f5:f6:29:f7:c7:d8:81:b2:8c:09:
         ae:43:10:22:0a:53:ad:5d:49:ab:eb:8f:9d:d2:75:08:f5:40:
         3c:01:64:e6:1d:83:0d:9b:55:a9:55:b5:0d:6b:60:b2:6e:6c:
         fe:ed:9a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org