Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
File:                     6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa (raw, json)
Hash identifier:          bfusY2NdxiakpjV3TbEK+cdSqLFeYqJ2Jshc8dBewII=
Subject key identifier:   09:7D:51:89:CC:01:D5:FB:F4:C2:53:64:E9:15:00:2B:78:BD:9C:6D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B5F02A356F28179DBE280
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     398885
IP address blocks:        65.49.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:5f:02:a3:56:f2:81:79:db:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=02318a8e-9338-4433-8508-2926739fd3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:59:2b:e8:67:26:57:a1:c0:40:f6:64:f4:e0:
                    13:67:28:62:4e:36:d0:bb:a3:9b:27:60:8f:9f:9a:
                    0b:83:12:01:98:ea:78:ac:c8:6c:8e:81:cb:b5:99:
                    b8:47:bf:14:a1:d3:02:00:1c:48:a3:8e:ce:59:b9:
                    92:77:62:55:f7:ad:ec:ec:ec:fa:ab:64:32:60:35:
                    22:12:77:ef:d3:b8:da:db:d3:7d:34:58:1a:1a:7e:
                    85:5a:9b:31:60:3c:86:4c:46:4b:e6:2b:b0:6b:81:
                    f7:6a:bf:f9:15:a9:c0:b4:3b:1f:c7:97:fa:5a:18:
                    34:53:56:33:b6:d5:56:6e:a3:f4:cc:0c:c4:4c:d3:
                    2a:e2:6d:7e:20:3f:07:14:ee:2b:6b:eb:34:ed:c3:
                    f2:0d:17:61:1f:20:10:2e:bc:d2:c7:fa:d1:5a:3b:
                    d7:83:26:c8:2a:26:43:6a:70:31:8e:54:28:e3:34:
                    f6:df:0c:a7:b4:b5:ab:df:f1:fc:b5:85:1b:b9:13:
                    5f:67:7d:e8:53:55:79:19:e7:8e:4a:28:fe:b0:c2:
                    63:75:db:06:52:fd:1d:88:f0:b0:77:70:d1:28:93:
                    91:c9:eb:64:6d:35:06:b8:02:0e:d4:84:47:dc:14:
                    6a:03:fb:9e:21:93:71:9b:83:91:b4:fb:3d:66:5b:
                    98:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7D:51:89:CC:01:D5:FB:F4:C2:53:64:E9:15:00:2B:78:BD:9C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/6d34b25d-6b8d-3f7e-94cf-90c7dbf47f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:13:af:c9:d3:c8:54:cf:12:eb:c9:44:d2:11:aa:4e:37:b2:
         d3:51:ba:6c:59:6b:52:26:c1:bc:98:6f:b4:42:00:6e:50:46:
         85:23:53:34:91:78:4a:bb:ae:4d:00:e9:da:2d:11:28:a7:bc:
         36:15:1d:02:66:0b:e5:85:54:9b:8e:00:04:74:b2:6f:74:79:
         f8:e4:ee:51:e6:92:13:47:e0:e2:38:95:ad:fb:8d:3f:03:ab:
         37:25:ef:9d:cc:9e:7d:6a:70:84:3c:7c:41:ba:44:e2:af:3a:
         21:7d:fa:ff:85:02:de:71:74:ea:d6:91:d9:2a:af:9f:67:45:
         b8:eb:b2:59:8b:e8:88:d5:7e:d9:e8:e2:81:68:a9:54:74:a3:
         21:8c:dd:2a:7a:a5:4a:65:b2:e4:e7:82:04:1e:e3:8a:d3:db:
         82:31:c7:83:cd:d2:9c:d6:b1:a0:df:9d:38:a6:65:30:4b:a2:
         43:c2:f8:39:41:e8:3b:65:04:5d:90:a6:09:2d:7d:2a:94:73:
         22:4a:7e:99:85:82:fa:fe:fa:04:dc:69:b4:40:cb:80:f4:2d:
         fa:d5:e0:0d:0c:8d:db:a6:90:49:26:7e:ad:26:5b:6a:16:a1:
         b9:2f:9d:ee:ea:f0:8f:89:53:3c:23:ef:d1:9c:da:67:ed:65:
         77:d7:3a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org