Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
File:                     a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa (raw, json)
Hash identifier:          NasaLy8DxtVpNuz7L2sZlau+cLTLHhvKKM4l0rPh9+k=
Subject key identifier:   C0:A8:85:53:12:68:29:8C:B2:9B:44:40:C8:1A:ED:12:03:97:15:57
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B3628F5033EEEBE3CD600
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     46491
IP address blocks:        65.49.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:36:28:f5:03:3e:ee:be:3c:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=c5e6a7fd-5668-4b3f-b4ca-f12a5e29da3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7e:10:44:7c:a2:22:fe:43:ca:a2:34:56:72:
                    77:f3:ee:7c:04:d5:fc:97:6a:55:3d:c1:e2:04:bc:
                    d0:b1:2a:19:2f:6c:79:5a:e0:0b:02:85:e5:ea:a3:
                    00:e2:84:86:82:23:7c:b7:13:02:79:23:5c:88:d7:
                    40:73:2f:bc:62:3a:f2:96:92:05:ae:78:f1:2c:7b:
                    02:8c:0b:a2:69:08:7f:a2:54:6f:5f:87:4a:ef:f8:
                    a1:14:2f:e7:a3:4e:80:cf:a4:df:65:5e:9b:9b:e0:
                    bb:c9:97:24:09:29:43:06:59:2d:51:e0:02:f8:93:
                    bc:bc:01:0f:3c:a5:77:c4:54:39:af:66:f2:5e:51:
                    20:a3:41:aa:9c:fd:b4:2d:dc:4c:85:7f:15:07:ef:
                    29:d1:76:87:21:56:30:a3:ae:39:ef:e2:f3:dc:ae:
                    a5:db:42:d3:e9:e4:b3:37:63:04:19:e4:f8:12:d2:
                    d3:12:f8:c5:69:2e:5e:7d:be:40:ee:b7:7b:49:92:
                    a9:12:5a:1e:0d:7b:01:63:66:91:67:3a:c4:2c:6f:
                    77:f6:31:a1:9e:59:23:b5:5a:13:00:7a:c2:87:9b:
                    f7:2e:19:ac:26:aa:59:6e:c3:9a:89:ed:d4:91:7f:
                    0d:be:d5:1f:c3:26:e6:db:88:cc:42:05:2d:0a:8d:
                    55:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A8:85:53:12:68:29:8C:B2:9B:44:40:C8:1A:ED:12:03:97:15:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/a0cdddea-86d0-30d8-93ce-c85d927fe7bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:43:ab:33:6e:1f:a2:0f:12:91:ea:86:54:45:57:76:c2:e7:
         09:5e:f8:fb:6e:79:aa:db:44:53:e2:f3:35:43:ce:d0:57:36:
         66:fd:16:c4:78:49:b8:99:59:96:b2:c8:af:6d:ec:31:06:24:
         56:a3:44:ed:3a:7c:4a:6d:83:83:aa:47:b9:85:3e:2c:ab:00:
         79:91:6c:1c:ce:f6:b3:4a:b9:51:66:cd:70:2b:f4:63:ab:72:
         cc:31:a1:43:91:4f:cb:e9:f4:d8:e5:65:79:49:7e:b8:52:5d:
         5a:da:b8:b9:5d:da:5a:7c:eb:09:a5:8a:ce:b9:68:9f:ec:bf:
         3e:8c:65:f1:89:9b:77:f0:3a:b3:59:30:13:6b:a5:10:bb:52:
         72:a9:54:7c:05:75:2d:66:04:b7:d5:40:ba:d7:57:ed:42:ac:
         63:28:f5:65:04:0e:07:c1:a2:e3:ee:9c:7e:8b:d9:1b:3d:fc:
         1f:2b:71:06:5b:0e:ad:88:82:65:43:82:31:32:45:45:0e:f4:
         a2:9a:d8:61:72:5c:c0:96:b7:e7:84:7a:6f:07:de:82:08:88:
         14:c5:ed:d0:29:a8:62:fe:7c:28:80:30:21:0c:4c:5f:52:92:
         e3:60:06:0c:68:45:96:63:ff:90:4f:f5:09:54:a0:2e:5e:de:
         8e:f1:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:51:29 2024 by rpki-client on console-ams.rpki-client.org