Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d304b8ba-b6aa-3ebe-9feb-13daa6622c90.roa
File:                     d304b8ba-b6aa-3ebe-9feb-13daa6622c90.roa (raw, json)
Hash identifier:          2i8bqaCgZzX//qWQbJrRiRtvyqnZYdxPYbqYcNUmCWU=
Subject key identifier:   88:24:FF:D0:1D:E7:C2:3B:FC:32:1D:4F:78:8D:2E:48:5A:2B:0C:8D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F432858473A5B44E4E54CBBCEF4066F00
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d304b8ba-b6aa-3ebe-9feb-13daa6622c90.roa
Signing time:             Mon 16 Sep 2024 01:00:29 +0000
ROA not before:           Mon 16 Sep 2024 01:00:29 +0000
ROA not after:            Sun 15 Dec 2024 02:00:29 +0000
asID:                     54288
IP address blocks:        65.49.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3a:5b:44:e4:e5:4c:bb:ce:f4:06:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Sep 16 01:00:29 2024 GMT
            Not After : Dec 15 02:00:29 2024 GMT
        Subject: CN=6bdaa121-76f9-4d0c-8903-94090dc29c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:cc:58:89:44:6f:10:7f:6d:83:f0:ca:9e:
                    36:bd:85:bf:ef:77:0f:6e:1b:0c:3c:b6:7d:a9:b0:
                    70:c3:b9:80:f4:24:96:95:84:a0:62:20:74:82:dc:
                    1c:b0:35:57:49:83:19:35:33:1a:c3:7b:c9:97:9a:
                    88:a3:d5:62:4a:43:31:30:b7:05:57:ee:80:5d:ad:
                    f6:52:93:bb:cf:03:8f:0a:22:32:21:ce:91:73:41:
                    64:80:a6:dc:4e:29:fa:5e:59:89:92:84:ac:9b:7a:
                    23:cf:27:33:45:a5:54:81:e1:1a:4b:4e:8e:0b:28:
                    9d:ec:54:67:fe:ce:9d:bf:de:3a:ce:5c:68:f2:63:
                    33:fc:d3:cd:8f:64:3f:ab:af:42:ee:97:22:c8:bf:
                    06:96:b6:d9:39:dd:2a:31:b3:b9:3e:47:fd:bf:b4:
                    d6:2d:3a:7a:b9:82:71:28:63:04:f3:0a:4c:96:19:
                    be:d9:55:df:24:40:51:49:66:93:cf:01:0e:ed:3f:
                    d5:d8:1a:9a:d2:1a:8b:4e:d6:b9:76:56:e4:65:85:
                    76:ac:72:56:af:25:99:8c:e8:6a:db:d1:83:d4:c6:
                    dc:c2:9d:dd:d3:49:bb:9b:e8:32:49:26:1a:33:c6:
                    6f:32:f5:db:95:ba:64:83:0f:4a:f0:24:6c:66:cb:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:24:FF:D0:1D:E7:C2:3B:FC:32:1D:4F:78:8D:2E:48:5A:2B:0C:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/d304b8ba-b6aa-3ebe-9feb-13daa6622c90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.49.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:78:0d:bd:27:9b:6a:1d:e8:1d:11:56:9d:1d:d5:44:9b:fa:
         70:43:a0:56:e2:95:6b:de:15:41:82:a9:a7:32:c2:54:e3:93:
         34:9d:7c:07:54:84:a9:7e:4e:08:56:7e:ac:13:9e:03:ff:7a:
         c7:79:38:fe:96:c2:b7:0f:b6:cd:c5:1e:79:b0:61:c7:00:2a:
         2d:81:04:29:f0:23:60:24:9c:69:9d:48:32:92:5e:f3:18:51:
         63:53:2e:7b:b9:41:df:07:47:81:f2:7f:02:d7:dd:d3:01:1e:
         1a:40:68:4a:f6:c5:e1:cd:09:95:d6:9e:21:02:38:55:82:4e:
         78:93:29:4e:7b:ef:4e:8e:e3:49:bb:50:f5:89:a1:02:aa:85:
         4f:1a:62:6e:f4:46:1b:76:a8:15:32:3d:af:de:7e:c3:06:7d:
         bb:ec:23:3f:06:cf:58:9e:3c:1d:2a:a7:7a:90:91:ee:1d:54:
         d3:1c:00:77:e3:a1:0d:06:c4:50:38:b1:e7:48:ca:9f:27:e2:
         59:1f:1c:73:7f:3b:ae:9d:86:ec:df:cc:fb:17:d3:3f:85:f9:
         bd:86:be:3f:93:db:2f:06:7a:dd:66:a9:68:29:96:8f:6b:17:
         a0:84:e6:5d:1c:b0:46:62:11:a1:a4:73:5b:e6:36:57:d1:17:
         c8:b6:64:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:32:39 2024 by rpki-client on console-fra.rpki-client.org