Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4050dabd-5702-3076-a838-a547364513a3.roa
File:                     4050dabd-5702-3076-a838-a547364513a3.roa (raw, json)
Hash identifier:          ThWz9uXnPs4lNma6UYiJ1JuJvPE/S92oGrL/yPPCZzs=
Subject key identifier:   DB:A9:FB:A0:62:89:F5:6B:30:73:00:ED:E3:3D:21:99:31:75:D0:B9
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845B21E24C82E975592830B09C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4050dabd-5702-3076-a838-a547364513a3.roa
Signing time:             Sun 28 Apr 2024 13:00:34 +0000
ROA not before:           Sun 28 Apr 2024 13:00:34 +0000
ROA not after:            Sat 27 Jul 2024 13:00:34 +0000
asID:                     40676
IP address blocks:        140.174.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b2:1e:24:c8:2e:97:55:92:83:0b:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 28 13:00:34 2024 GMT
            Not After : Jul 27 13:00:34 2024 GMT
        Subject: CN=483349a0-da08-4f79-b36d-207524386f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:7f:3c:88:27:14:0e:d2:d0:8f:e0:1f:8b:
                    10:03:f2:83:65:81:23:d7:80:51:b3:91:14:8f:a2:
                    7d:a6:d6:61:3b:00:25:07:ae:b7:89:c0:dc:76:0d:
                    90:ec:81:f5:f4:bc:25:71:0e:3f:e6:57:cb:86:0e:
                    eb:d0:f0:a5:ee:5a:f2:df:89:2b:45:f7:0e:66:3e:
                    43:b0:f6:cb:05:68:48:db:05:7c:6c:b9:ae:38:76:
                    44:50:5a:de:6d:1c:7d:3c:ae:f2:5b:83:59:87:13:
                    00:b0:21:03:d4:c4:93:a3:3f:c0:37:ec:fa:fc:1d:
                    d8:51:b1:0e:a2:32:c7:35:f1:cd:35:bf:83:3a:2c:
                    a5:c5:94:4e:c5:23:8d:10:c3:9d:03:0d:8d:55:0a:
                    6b:2a:bd:b3:3b:82:cb:66:5a:b0:f3:8e:ec:6b:f2:
                    b2:d7:a3:be:6a:3b:f8:a4:4f:cd:cf:ae:a3:48:b7:
                    f0:4c:90:d0:1d:5d:d5:69:37:99:9b:d6:56:de:20:
                    2e:b3:7a:28:9c:39:1d:6d:3f:70:08:a2:a3:82:01:
                    67:85:ca:3c:9e:7a:69:63:86:3e:f8:7a:78:64:ff:
                    cd:50:45:3d:44:c8:64:de:57:f2:53:eb:21:ee:07:
                    69:3a:d1:89:bf:a4:29:5d:4e:5d:53:70:e0:6e:de:
                    e3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A9:FB:A0:62:89:F5:6B:30:73:00:ED:E3:3D:21:99:31:75:D0:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/4050dabd-5702-3076-a838-a547364513a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:86:5b:32:dc:c2:07:e2:db:1c:ba:40:9a:d9:d5:39:a7:c3:
         6c:52:da:45:03:a9:0a:7d:50:a3:53:2b:18:1d:42:2b:3f:a3:
         ca:b3:93:d2:1f:93:3c:ef:de:c5:ae:57:01:53:03:38:9b:af:
         a7:5a:d0:e8:90:8d:fd:f7:8c:d8:6a:5b:81:a9:c9:2b:f3:7d:
         a0:79:32:9c:74:be:d4:17:36:f3:f4:70:a4:c3:86:c1:54:24:
         92:ab:3c:2d:35:bb:4b:13:ba:42:9e:27:00:19:8a:18:c4:6d:
         54:07:99:f6:e0:a2:44:12:bc:74:70:b5:6d:e7:ad:f6:d4:cf:
         3d:ee:7d:c7:96:58:6b:34:bf:d8:57:2b:a5:f2:c0:e4:e0:30:
         6e:33:90:a2:cd:92:4a:df:77:70:8c:db:0f:2f:8b:fb:60:7f:
         40:c0:64:ff:97:57:e9:bb:cf:c2:fd:1a:f7:fd:63:a9:18:41:
         e9:a1:d8:7d:8b:7a:d1:65:f3:78:3c:37:6b:ff:4b:81:a1:f5:
         b6:2b:74:e9:23:74:3f:55:49:08:5a:1a:d4:9c:0d:23:8b:23:
         67:76:7f:f4:6c:51:39:73:92:b6:08:09:29:0c:f6:ff:23:6a:
         a2:1b:8a:b1:cc:29:84:43:44:2c:ca:c9:0e:57:dd:12:a7:c8:
         f1:ab:bf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:56:10 2024 by rpki-client on console-fra.rpki-client.org