Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa
File:                     a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa (raw, json)
Hash identifier:          R5rEnHlIZ4r65FvXJrX1sHUkGqq+7ecCgSRY58K7rqo=
Subject key identifier:   92:6F:93:1C:BD:EB:6B:24:FA:69:A7:EB:EE:79:CE:87:C2:C9:EE:E7
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285845CF7E6DC9746500BF93F961C0
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa
Signing time:             Thu 09 May 2024 01:33:08 +0000
ROA not before:           Thu 09 May 2024 01:33:08 +0000
ROA not after:            Wed 07 Aug 2024 01:33:08 +0000
asID:                     19527
IP address blocks:        57.140.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 10 Jun 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:7e:6d:c9:74:65:00:bf:93:f9:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: May  9 01:33:08 2024 GMT
            Not After : Aug  7 01:33:08 2024 GMT
        Subject: CN=10e09677-ff4a-4038-b072-a9f60294d89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:94:27:62:5b:10:b1:34:d8:09:8a:39:2a:
                    ce:77:72:96:1c:a3:85:36:df:86:8e:86:f3:01:a7:
                    83:e6:02:3b:e8:89:9a:79:f6:6c:25:a9:f0:b0:ff:
                    0a:49:f6:95:37:9a:2d:24:ac:72:76:ca:ba:82:61:
                    83:fe:09:68:41:c7:23:2b:d3:a5:21:cc:2d:86:af:
                    91:54:f4:93:c7:28:3e:64:c6:8e:ee:f4:90:98:5d:
                    d9:72:0c:15:44:9d:01:de:9a:bb:51:d4:68:ff:1b:
                    51:a5:13:53:e3:31:5b:0e:65:08:4c:18:df:f6:29:
                    62:d3:cc:ba:56:e1:69:69:6a:fb:35:57:7b:e8:0f:
                    e0:c1:fa:87:75:58:ce:af:1c:30:62:e8:d8:a0:74:
                    7b:b0:b0:ec:ed:4d:dd:8d:38:33:f0:0c:2f:07:10:
                    97:9e:78:2a:d2:27:07:31:35:b9:0b:38:fb:3f:0d:
                    4a:8a:4d:cb:a3:56:a8:d1:1d:28:7c:49:50:8e:4e:
                    e4:1d:cb:fe:19:18:18:21:a5:2f:bf:24:d5:db:09:
                    e2:3b:3a:77:51:67:2c:ca:2c:99:dc:b7:29:28:b7:
                    b1:0f:5a:74:7e:45:8a:86:7d:d6:78:d0:09:08:96:
                    78:a7:76:f1:98:2c:a5:e6:18:d5:b1:70:73:81:0b:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6F:93:1C:BD:EB:6B:24:FA:69:A7:EB:EE:79:CE:87:C2:C9:EE:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/a98f243c-415b-3bc1-b9b0-11a7ceddccc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:1e:cf:94:0a:45:00:12:65:f8:d1:ec:42:43:bf:83:52:
         a6:a4:fa:bc:a7:5f:81:f1:35:88:1d:9e:80:3d:e6:95:ea:e0:
         cb:0c:46:97:b7:c6:e9:38:4f:e6:b3:00:5f:bd:62:cf:24:62:
         ff:a9:e4:0c:20:eb:7c:3e:69:6f:c8:c6:7f:ed:24:91:a7:2b:
         62:ac:fa:5a:6c:f6:1b:cd:84:4d:79:ee:c4:ec:4e:6c:08:d9:
         2e:30:a4:41:b3:76:5b:c2:00:58:fc:40:de:72:db:1a:e3:16:
         aa:80:e4:cb:44:18:33:9a:44:61:b6:c8:df:86:32:80:cd:1a:
         8b:c9:b4:0f:ea:67:6e:52:37:1d:46:16:7d:2b:ca:1a:74:b6:
         b5:23:cd:89:6c:a3:fd:87:23:00:e1:4a:9d:ed:36:fa:d8:08:
         ba:86:ee:2c:87:a5:ac:eb:78:70:d8:8d:41:c0:ae:66:14:22:
         73:0b:d6:01:3e:ce:df:6d:26:a0:00:70:b1:d0:a5:0c:ec:6c:
         9b:35:c3:41:67:70:42:85:c2:5c:36:3c:23:d5:34:67:da:71:
         ff:52:72:90:40:02:83:55:84:0d:74:af:9b:e2:5f:f2:3c:2c:
         d8:cf:2a:c9:15:7a:a4:67:c4:b9:ab:46:1f:7f:96:a3:af:c2:
         97:cd:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:57:42 2024 by rpki-client on console-ams.rpki-client.org