Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bcff4cf-546e-3595-abec-2063cb627fa1.roa
File:                     7bcff4cf-546e-3595-abec-2063cb627fa1.roa (raw, json)
Hash identifier:          79BF0JBWvUrtsKbMbvKN3fKRQ2A7SCZzPlm7NAr6/6Q=
Subject key identifier:   6D:21:FC:A4:E4:9B:6A:EF:97:8A:CB:90:2F:A9:00:03:16:E0:D4:4F
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3D85458086B810AF58E0
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bcff4cf-546e-3595-abec-2063cb627fa1.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     36103
IP address blocks:        65.49.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:3d:85:45:80:86:b8:10:af:58:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8b309fa4-b9dd-40bf-ae93-835b28d55d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:50:e7:0d:2b:93:5f:60:8f:91:e4:34:02:1d:
                    4d:a5:16:97:bc:72:31:f0:8c:80:14:5b:38:52:08:
                    d9:77:f0:9e:6d:14:12:37:3a:77:68:cf:21:15:b2:
                    f2:3e:3f:d0:d8:56:94:10:bf:57:fa:90:7e:bd:a9:
                    41:21:5d:36:e7:15:29:81:5c:fd:f6:52:34:28:82:
                    49:6a:a1:58:a9:e4:9b:1e:32:1e:f6:eb:38:b2:38:
                    51:25:30:e7:1b:85:e7:26:58:bf:67:80:b5:45:8f:
                    63:10:a4:6b:e8:0a:0c:93:d5:d1:4d:e8:f1:2e:c6:
                    cc:55:dc:cb:59:51:53:26:f1:62:34:72:24:66:4d:
                    82:e0:a0:2f:75:c1:a2:ed:78:87:ff:61:a5:8c:4c:
                    cd:d9:09:19:8c:b3:2f:5e:3f:fe:55:b0:f8:d0:b4:
                    95:a9:70:9a:5b:5d:09:65:52:d0:fd:ca:b0:e3:be:
                    ff:fa:b4:10:e5:f6:0f:13:31:f3:81:7f:0f:9c:39:
                    56:c5:fa:d3:4a:b9:f4:20:25:1b:6e:c8:fa:4d:ba:
                    76:6b:87:97:e4:b8:e0:ba:e9:c3:bf:0f:8f:da:73:
                    17:18:60:b8:1b:a1:5c:e1:74:f5:1d:30:aa:8a:62:
                    08:5a:1b:0a:69:77:4f:e0:4c:61:9d:75:e9:38:d1:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:21:FC:A4:E4:9B:6A:EF:97:8A:CB:90:2F:A9:00:03:16:E0:D4:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/7bcff4cf-546e-3595-abec-2063cb627fa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:d0:23:d1:1b:96:f5:7a:4e:a5:71:8f:1c:e4:ab:23:10:31:
         e6:ec:e0:b4:8d:9a:f7:24:48:00:08:d2:7b:86:4f:9f:ae:db:
         99:2b:e7:9d:50:0d:8c:76:0a:f5:e3:7a:08:39:24:a7:53:e5:
         60:16:c7:b7:9b:3e:a6:67:e7:27:69:a1:a6:4a:72:e9:ba:1e:
         96:2a:69:3b:f4:37:d5:53:f7:d0:c2:21:37:e5:4d:af:cc:7e:
         26:4c:fc:b2:01:8f:4a:22:a8:b9:f0:f2:44:a0:5f:1c:d5:44:
         43:cc:87:aa:48:41:30:7a:ff:c7:ec:1b:8a:55:d2:3b:bd:ee:
         a3:fa:42:19:b3:64:48:05:f7:1d:c2:5e:3e:98:e8:fe:dc:ed:
         68:fc:6b:66:26:d9:8f:f7:e8:03:97:ee:53:42:b7:09:a8:08:
         95:50:41:19:68:ed:6f:36:8a:6c:5c:4c:1d:e4:ee:fb:38:4b:
         fb:f2:d1:9e:95:0f:5f:48:b1:d4:fb:42:57:7e:35:b6:94:71:
         d1:d9:53:3b:80:86:b2:71:5d:08:16:3b:82:d3:90:ac:12:ec:
         90:b3:a6:ee:ce:f2:e9:84:8c:e8:94:60:6d:88:3b:13:f8:a0:
         90:87:c0:c1:fa:dd:7b:db:ce:d6:c9:89:0a:0b:11:6f:5f:4e:
         66:21:12:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org