Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa
File:                     0f387f92-9000-3cdb-a9b4-4db714342a6f.roa (raw, json)
Hash identifier:          CLj29xQn2xK+tpN2TIfLjkXEgsqwQbH/bfn56GFktbA=
Subject key identifier:   FB:45:BF:B7:78:20:C1:72:2C:10:D0:AA:63:5F:0F:32:B5:04:82:81
Certificate issuer:       /CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
Certificate serial:       010D0C9F432858487325B040DA75D133C7266020
Authority key identifier: 1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        192.135.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b0:40:da:75:d1:33:c7:26:60:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de51fd7d-37d7-4da6-8de8-7d346e0006aa
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=2a96ba4c-b678-425f-89e4-d78dcffe333a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:eb:47:0c:b3:f1:2d:7d:1a:16:a6:26:e2:2b:
                    23:46:61:bc:0b:c6:b7:23:29:85:80:92:70:3e:2f:
                    5c:a9:8a:ad:6d:e0:1e:f4:2b:5a:12:ae:f3:e5:ec:
                    a9:ab:b3:3a:d8:29:3a:0f:6d:3c:d8:b3:1d:ec:6c:
                    75:5f:fe:1b:ce:a9:08:df:b2:35:a8:1b:39:2a:bb:
                    04:d1:5d:c3:2a:c9:73:97:06:94:1f:5f:a9:49:03:
                    ef:16:16:b9:39:4f:8b:db:cd:6e:e5:65:2a:23:4f:
                    f0:3e:5e:be:0a:cb:f2:72:90:28:3b:57:ee:f3:af:
                    77:bd:f4:63:5d:af:5e:c5:f9:e9:57:4e:d8:9f:c5:
                    23:93:f1:4f:66:90:78:f0:15:22:9e:6b:08:e3:2a:
                    49:c5:a7:13:1f:ce:6f:ae:23:c0:7e:62:c6:09:d0:
                    da:b8:0b:e7:27:71:67:3d:05:c3:8d:75:a1:34:e2:
                    ef:d6:5f:2f:23:9a:8a:ab:e9:4b:7e:45:97:85:58:
                    c9:54:fb:df:b7:02:33:35:36:6c:e9:5b:45:56:80:
                    44:3b:bb:5f:ae:b4:a5:d1:6b:d6:55:43:9d:d0:8d:
                    ba:c3:0e:95:62:4d:dc:08:0c:73:49:f2:b6:7c:9f:
                    76:74:4d:8f:0b:78:b2:1e:0e:c5:bd:4e:01:42:18:
                    06:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:45:BF:B7:78:20:C1:72:2C:10:D0:AA:63:5F:0F:32:B5:04:82:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/0f387f92-9000-3cdb-a9b4-4db714342a6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa/de51fd7d-37d7-4da6-8de8-7d346e0006aa.crl

            X509v3 Authority Key Identifier:
                keyid:1D:8B:23:40:94:38:7F:DD:5A:A6:39:A1:53:D2:40:42:A1:BF:DC:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/de51fd7d-37d7-4da6-8de8-7d346e0006aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:16:9e:0a:c1:b1:30:19:40:f4:7f:a9:4d:05:fa:7c:f6:94:
         ce:d3:d4:72:52:5b:39:e4:b4:12:99:ad:ec:6a:c0:8d:5c:90:
         09:f7:9e:32:e1:8c:8a:d9:09:7f:b1:1d:84:30:85:9a:65:1f:
         8d:56:7f:69:47:99:e9:80:d7:6e:7d:97:92:75:52:39:47:f3:
         e8:06:54:ae:3d:a1:5d:a7:67:fe:49:c7:d1:d5:70:a9:e1:e1:
         1d:bd:ac:74:2f:5b:ff:8e:4d:12:d6:a1:87:82:cc:b5:84:04:
         3e:c1:b7:e9:4f:36:b8:1c:68:41:a3:d8:a3:6e:74:d7:ee:28:
         29:dc:1b:ec:9e:d5:d3:06:e7:e0:4e:45:44:e1:50:92:3c:e9:
         c0:bd:10:e6:79:92:2d:c4:f2:78:75:f6:95:99:f5:db:4e:0e:
         83:6e:9b:02:3f:28:ea:69:ed:74:09:3b:e1:17:3c:38:4a:e6:
         3a:67:e6:2e:7f:93:d9:97:22:e1:2d:6d:11:80:17:e0:d6:e9:
         0c:b6:7d:0f:dc:29:6f:d2:89:9e:25:9d:16:27:0b:44:ae:e6:
         a6:2b:c2:7c:72:98:b9:3d:ae:fe:bf:38:df:9a:2b:81:dc:d4:
         55:98:5c:af:f6:67:56:ec:bb:ba:cb:d4:70:a3:95:35:62:db:
         3f:33:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:29 2025 by rpki-client