Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8046b7a2-d7db-364b-b405-ddf50872cb75.roa
File:                     8046b7a2-d7db-364b-b405-ddf50872cb75.roa (raw, json)
Hash identifier:          zpZ1skjS4vDyCmKZFq+D1j27bFIsCsZOd3wg77aAbaE=
Subject key identifier:   6A:16:40:8B:83:F1:D8:F2:08:8F:78:FC:3A:F1:7E:60:6D:FF:E0:0B
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B4FC977AE2FC31AF4E800
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8046b7a2-d7db-364b-b405-ddf50872cb75.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     53268
IP address blocks:        65.49.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:4f:c9:77:ae:2f:c3:1a:f4:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=8acf7c9f-dcec-4fe0-94cd-3830cc96e482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:c9:59:36:bb:42:81:81:1c:f1:6a:bb:db:
                    66:62:5f:7e:4e:cf:ea:81:a4:77:fe:f0:8c:b3:19:
                    57:0b:51:5c:e5:c6:45:89:e2:93:05:c4:ce:b8:3b:
                    10:59:cc:75:b0:72:88:93:e1:f1:a9:e1:1d:4c:2f:
                    b4:c1:46:50:66:98:bf:ff:ae:11:22:4e:86:cb:3a:
                    5a:eb:b7:2d:5d:e7:22:59:df:10:e2:16:50:b0:fb:
                    8f:f6:76:a4:a5:fc:69:ad:8d:7c:9b:e7:1d:d9:26:
                    c2:85:18:d0:49:fe:0c:81:03:83:1b:3e:34:9d:57:
                    be:38:82:fd:39:7f:30:54:87:db:47:82:19:f5:d0:
                    bc:cc:7c:af:e2:6e:e8:33:18:18:91:17:0d:71:7c:
                    75:6c:e7:ad:85:33:b6:79:ed:66:42:b5:01:5e:7a:
                    f0:78:d6:fe:4f:67:a4:4b:bc:16:7b:ba:8a:4f:aa:
                    aa:6c:0e:01:53:9c:ff:25:ab:cb:8d:a0:ab:53:07:
                    c7:ae:74:4c:51:81:71:a3:00:0c:62:d1:2c:83:ee:
                    77:4f:9e:95:c0:11:92:0a:9d:89:c9:81:9c:50:60:
                    34:66:ac:8b:c1:c0:a4:ec:b6:ab:85:e2:53:3c:3b:
                    a0:64:d9:45:5d:bf:aa:af:25:42:dd:12:04:3e:e4:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:16:40:8B:83:F1:D8:F2:08:8F:78:FC:3A:F1:7E:60:6D:FF:E0:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/8046b7a2-d7db-364b-b405-ddf50872cb75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:b2:bc:2c:cf:ff:c6:52:c1:05:66:60:be:f9:10:be:65:
         9d:be:bf:5c:3a:86:bf:9b:6d:0d:93:0f:c7:a8:40:15:9f:87:
         5d:b8:0b:23:1c:c2:6d:e2:67:21:13:cb:db:65:6f:5a:90:ec:
         87:a9:78:7d:61:c4:4e:4a:11:51:94:ef:6d:db:28:38:29:d7:
         3b:f3:aa:55:ec:3c:71:82:4f:fb:56:0e:03:85:3a:56:f7:0b:
         d1:da:00:c1:8c:93:ef:24:9c:41:47:c3:44:2b:b9:6e:e7:d7:
         7a:f4:4e:f9:b3:94:dd:fa:07:d6:9b:94:7a:bb:01:26:6c:95:
         e9:22:70:ab:1a:f2:88:f8:a9:e9:28:66:7a:d0:99:60:e5:7c:
         4a:e6:9f:73:c5:0c:e6:08:c0:c6:cd:b6:4d:c0:a6:3c:f1:dd:
         38:09:60:b2:d5:5b:cd:c0:93:30:67:ad:9c:fa:a5:04:de:fa:
         bd:72:b7:d1:6e:2f:ea:7f:69:71:7f:5f:d6:9c:ea:9d:f5:49:
         9d:14:bc:fb:bf:07:0a:dd:a7:d9:57:70:cf:44:9f:86:e5:6b:
         10:3e:67:7f:be:3c:2c:21:45:a9:60:bc:d8:ab:86:fe:9d:7e:
         14:54:2d:1b:60:61:3e:a8:44:04:40:25:dc:53:87:66:47:60:
         42:67:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:36 2024 by rpki-client on console-fra.rpki-client.org