Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa
File:                     0f387f92-9000-3cdb-a9b4-4db714342a6f.roa (raw, json)
Hash identifier:          yWgBHCQF1BBDnIhmy5OZcdxLKUkKG7lASSCWhJDGWn4=
Subject key identifier:   0D:A8:2D:0B:C2:8F:8B:F0:1E:AC:B9:74:9A:94:0F:C3:F0:92:AB:90
Certificate issuer:       /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
Certificate serial:       010D0C9F43285844F5CAA55EFFF8929400ABBF28
Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa
Signing time:             Wed 21 Feb 2024 02:00:25 +0000
ROA not before:           Wed 21 Feb 2024 02:00:25 +0000
ROA not after:            Tue 21 May 2024 01:00:25 +0000
asID:                     14618
IP address blocks:        192.135.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f5:ca:a5:5e:ff:f8:92:94:00:ab:bf:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
        Validity
            Not Before: Feb 21 02:00:25 2024 GMT
            Not After : May 21 01:00:25 2024 GMT
        Subject: CN=6dbaaf5e-6059-45aa-8860-c39c35ce2cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:93:c8:ec:a8:3e:2c:4f:ac:d3:97:c1:db:c5:
                    45:83:9c:17:6e:94:ce:ec:e2:a0:fd:fb:66:bc:db:
                    18:99:f9:21:3f:2e:25:15:69:3e:43:8a:6e:c5:ba:
                    b3:85:04:a7:5c:91:fa:15:c3:c4:7c:5c:55:3e:cb:
                    95:f6:3e:6e:3f:bf:a3:98:cf:64:7c:08:3c:32:b2:
                    3d:07:5f:08:15:b1:8b:0f:60:c6:54:5b:c4:96:1c:
                    0f:94:72:d7:ba:8f:8d:72:55:9e:de:2a:d3:20:04:
                    a2:88:d8:37:19:66:94:fa:79:d1:3d:d6:3e:ec:31:
                    dc:4b:f9:d5:e6:67:88:7a:52:f0:2b:80:3d:6d:f1:
                    3c:db:94:96:a0:16:26:11:94:15:62:73:03:ca:77:
                    58:ce:7a:b3:75:c9:a9:9d:f9:79:eb:20:ff:95:20:
                    fa:77:40:98:8f:85:84:d7:f2:b0:c6:a5:d2:63:df:
                    be:b5:d5:84:45:13:0b:2a:9a:f0:36:c9:f8:56:db:
                    38:ad:42:17:4c:9c:1e:f3:24:85:b3:7a:4b:93:66:
                    8a:9b:a4:ab:a5:be:0b:5f:c7:f1:9e:7f:e0:88:e9:
                    be:a9:f8:b8:9e:b8:9f:52:31:c0:3e:4c:89:14:a5:
                    ff:f3:c3:5e:c2:98:a2:7e:67:d3:70:c8:99:2a:35:
                    25:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A8:2D:0B:C2:8F:8B:F0:1E:AC:B9:74:9A:94:0F:C3:F0:92:AB:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl

            X509v3 Authority Key Identifier:
                keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:f5:51:26:9d:7f:57:dd:6b:65:b4:cb:dc:b9:6d:4f:4b:da:
         b4:99:21:ad:4e:62:4b:27:8a:39:ac:99:7b:a2:0f:0c:98:0e:
         19:08:9b:92:ea:c0:09:c6:83:26:ac:95:eb:32:37:57:e3:11:
         23:73:21:08:0b:53:d7:00:58:4e:21:b5:4b:ea:82:9f:04:55:
         d7:5b:6c:5d:13:cd:ed:7d:2b:8b:d2:52:90:9f:dd:9f:e0:21:
         c1:c7:01:74:dd:0d:98:0f:0a:9e:64:a5:55:28:60:5a:08:1e:
         66:db:96:15:6f:c7:40:ab:7f:c3:e1:ac:ee:76:a7:d7:ce:8b:
         ac:7b:ee:c7:f1:b2:91:cc:d7:29:e5:9a:36:1c:cb:a4:b4:ff:
         73:39:f3:40:90:9e:cf:7e:ec:a2:46:bc:ce:db:ae:95:5a:31:
         6c:0b:cb:2f:66:f2:7a:35:1f:0d:83:fe:9b:45:a7:d7:62:d6:
         cf:bd:52:e2:bc:ef:6f:a4:80:71:0d:bb:57:f1:be:94:71:c0:
         01:c2:4b:5a:ac:77:86:9e:f3:0e:9d:5e:50:dc:86:fb:19:e9:
         8c:dc:46:9c:85:31:ca:df:bd:7b:06:e8:a8:be:a5:37:c0:90:
         d6:f0:c7:21:5d:fe:8c:9d:28:73:68:55:a6:b2:ef:76:75:c0:
         5b:31:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:30:10 2024 by rpki-client on console-ams.rpki-client.org