Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
File:                     329dde8e-623f-36ee-ba20-f94b526c14c1.roa (raw, json)
Hash identifier:          awPcMlU7C/e2RqWJvIqpFk5nKaQUcWd5r+fLgf5NNZI=
Subject key identifier:   13:F6:A7:07:92:38:8A:45:EC:89:24:31:1E:29:F3:83:EF:CE:85:D5
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858471BB45C6AE358AA793486EA80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa
Signing time:             Thu 05 Sep 2024 01:30:11 +0000
ROA not before:           Thu 05 Sep 2024 01:30:11 +0000
ROA not after:            Wed 04 Dec 2024 02:30:11 +0000
asID:                     214314
IP address blocks:        65.49.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:1b:b4:5c:6a:e3:58:aa:79:34:86:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep  5 01:30:11 2024 GMT
            Not After : Dec  4 02:30:11 2024 GMT
        Subject: CN=b0655016-955d-4f27-bc04-fcfd598bc493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:a8:41:18:49:fd:13:05:33:01:97:d8:5b:
                    84:ef:c0:be:88:6e:56:b4:f0:cf:60:c1:9f:d1:a4:
                    ca:86:d7:ae:9a:46:22:c8:e4:66:67:55:f0:dd:83:
                    fa:c5:4b:0a:44:d2:ec:85:a9:11:fe:45:85:8c:a0:
                    07:50:74:78:7c:de:43:d8:87:17:f1:60:c0:97:3b:
                    1d:9e:22:f0:6c:c5:3e:6c:ef:8b:10:87:3a:84:f3:
                    13:3f:08:2c:8f:56:a7:e9:8b:33:8a:1d:e0:f7:4e:
                    7e:a0:a0:25:24:88:46:38:0d:d6:4a:f4:37:f0:66:
                    e0:4b:f8:4a:a2:24:ed:55:c8:d3:60:fb:b5:d2:4e:
                    aa:25:50:d1:95:d1:83:a0:9c:09:80:3f:00:26:32:
                    2c:01:18:3e:7b:2e:92:5a:bd:c7:7f:c6:01:09:e2:
                    7c:10:1f:4f:0e:62:cf:d3:bc:53:4c:26:7f:6d:61:
                    64:66:98:da:f5:6a:db:a5:d3:6b:91:d5:26:83:9e:
                    be:e9:80:13:da:59:15:b0:f7:6f:9a:60:e8:cf:cf:
                    32:17:b2:41:de:89:67:d5:07:86:a0:7f:6a:98:8b:
                    d5:36:1a:f4:ca:12:ff:fd:b8:9e:37:df:2a:a1:34:
                    ff:f5:93:dc:6b:42:f0:bc:9b:f2:31:9c:cc:27:dd:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F6:A7:07:92:38:8A:45:EC:89:24:31:1E:29:F3:83:EF:CE:85:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/329dde8e-623f-36ee-ba20-f94b526c14c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f7:ca:74:85:a3:58:2c:a5:13:b4:92:47:1f:5d:e5:19:df:
         8a:d4:e9:26:30:22:3b:a9:6c:f0:2a:b7:10:fe:54:52:31:74:
         47:0b:80:76:1b:29:0b:76:cc:95:55:16:62:e1:a5:ed:ad:3c:
         be:8f:71:62:09:b7:b5:ea:92:c4:44:a7:29:60:b7:0f:4a:5c:
         ad:c3:10:7d:79:49:97:d7:5a:50:cf:ae:2f:e7:b9:16:7d:60:
         e0:f0:21:d1:fc:bf:50:4e:4d:24:3c:c4:cb:b6:94:d0:14:2a:
         48:65:77:5a:c5:9f:03:d3:88:de:da:e4:30:d3:d3:ac:ee:1b:
         0c:84:f2:ea:9b:6a:cb:13:4f:d1:73:27:1a:0f:26:66:15:08:
         9b:55:1a:4f:24:0e:97:7a:a3:b5:ba:75:ad:18:2f:f9:e4:c9:
         09:cb:0e:8e:84:74:00:fc:9a:4a:f6:00:f2:60:ac:ac:d1:2c:
         2b:c0:3c:bd:e7:00:48:db:9c:72:17:8f:92:43:bc:dd:91:67:
         ba:86:72:18:90:37:12:c7:48:44:cf:51:c7:a0:83:39:12:21:
         9b:b5:02:75:e6:4f:80:62:1d:39:a7:36:f9:53:8c:e7:e7:93:
         27:3d:e6:e6:8e:08:e8:43:b9:e4:8d:90:e5:f8:85:24:21:54:
         71:1b:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:21 2024 by rpki-client on console-ams.rpki-client.org