Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dc941db5-dbbc-3ed1-81ed-f57e92170c6e.roa
File:                     dc941db5-dbbc-3ed1-81ed-f57e92170c6e.roa (raw, json)
Hash identifier:          cCRgmbHIJya6bV6xNFXiSrFc/VD2pqoy+g3sEdwqsMY=
Subject key identifier:   99:E3:49:81:0E:BA:D8:F0:DE:7E:8D:B0:FD:14:93:6E:A8:33:EE:4F
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16642B89FB8
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dc941db5-dbbc-3ed1-81ed-f57e92170c6e.roa
Signing time:             Fri 05 Oct 2018 05:34:47 +0000
ROA not before:           Fri 05 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        140.174.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 27 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:42:b8:9f:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  5 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=7fe6da19-a2f2-442b-9312-affc63a0ae7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:8a:b0:29:dd:62:d9:87:71:5e:4d:b9:4b:
                    40:90:9f:1f:75:c7:d3:b5:8c:e5:24:75:2b:4f:44:
                    5b:10:6a:9f:16:c6:58:e8:a7:0e:fa:4d:24:47:81:
                    66:49:00:7a:48:c5:c7:d4:43:d8:1e:c1:d9:ca:d2:
                    21:ef:f8:07:a6:3a:e0:f2:09:62:6a:a0:be:82:bd:
                    88:32:0d:d3:c2:d6:6e:9f:cf:b2:fe:12:f2:1a:1b:
                    99:e1:84:8c:6c:cc:34:5d:2b:46:5a:68:67:11:e1:
                    a3:3d:02:1f:3c:78:e0:c6:e1:98:97:58:e7:5e:b8:
                    3e:1f:e0:60:42:df:b1:90:98:fd:b9:b6:4e:5f:c9:
                    a7:bc:26:c0:df:03:0e:1d:3e:38:d0:07:05:8c:7e:
                    20:a2:83:06:68:d4:b2:05:8d:45:f1:74:fd:0e:a5:
                    0c:f3:1a:db:eb:aa:91:df:ea:73:b3:47:4a:5f:1a:
                    3e:54:ad:05:77:f0:92:81:1f:93:72:a8:a6:c5:2a:
                    1f:ef:7b:44:ae:07:a9:7f:d6:a8:15:bb:52:42:22:
                    34:6b:83:09:c2:4f:c4:f8:48:5f:e4:3c:fa:6b:b8:
                    b6:68:8f:a9:93:62:c8:09:e3:47:31:4e:89:77:da:
                    72:9d:e2:82:5a:2b:4b:eb:61:47:81:43:fc:99:a1:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E3:49:81:0E:BA:D8:F0:DE:7E:8D:B0:FD:14:93:6E:A8:33:EE:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/dc941db5-dbbc-3ed1-81ed-f57e92170c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:ec:a9:fb:c0:1a:6e:1d:3e:a4:4f:00:e7:92:d0:0d:ba:90:
         5c:d8:1e:c3:c1:78:53:b1:2a:8f:0f:f9:14:ff:af:4b:d9:86:
         c6:f5:06:6f:66:98:61:ba:fe:1a:9b:67:86:7b:dd:12:60:9c:
         7f:58:9d:37:2b:dd:80:5d:d4:fb:44:3b:79:6a:9c:98:d3:bb:
         52:22:10:74:21:20:bf:68:26:15:f5:b3:48:1d:90:4c:37:74:
         f3:84:35:87:dd:f5:86:dd:9a:9f:94:57:f8:27:b1:1c:14:e0:
         82:d4:de:db:ac:3e:6d:d2:77:22:22:d9:5d:32:14:8d:f8:e6:
         1b:db:9c:d4:7b:a3:34:39:1e:f1:5c:bc:73:ed:de:14:0d:45:
         69:39:f1:d7:d9:57:3e:9f:00:ac:3e:a7:91:90:3c:84:97:db:
         25:0f:b5:33:ec:20:72:fd:ac:05:a6:b6:c3:8c:a9:5b:6e:4b:
         34:cc:62:76:62:a3:ad:90:6f:15:89:c4:ec:51:74:07:4e:df:
         4a:c4:be:c3:ce:25:94:78:77:8d:cd:d2:69:a1:72:6d:8e:38:
         9a:b3:6a:1b:b2:ba:0c:17:eb:7d:81:39:c1:ee:d5:3d:69:bc:
         83:65:7f:b3:1d:ad:46:6f:f7:89:21:31:d0:bd:d0:5a:bc:dc:
         7c:c6:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 06:17:13 2024 by rpki-client on console-ams.rpki-client.org