Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa
File:                     31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa (raw, json)
Hash identifier:          4IoWwaSuGtJ9iVBhwUSUacHUYWaXF8k+nrWFWGFISlU=
Subject key identifier:   18:7B:81:EE:25:C8:C1:68:60:0E:CB:8B:CC:6B:77:20:B6:40:08:14
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285847107AF81CA7022826F9D74580
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa
Signing time:             Sun 01 Sep 2024 01:00:31 +0000
ROA not before:           Sun 01 Sep 2024 01:00:31 +0000
ROA not after:            Sat 30 Nov 2024 02:00:31 +0000
asID:                     27370
IP address blocks:        140.241.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:7a:f8:1c:a7:02:28:26:f9:d7:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Sep  1 01:00:31 2024 GMT
            Not After : Nov 30 02:00:31 2024 GMT
        Subject: CN=2911095d-932c-4a38-b303-8042be8456d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:89:17:97:85:c7:b0:1d:78:12:99:38:9d:1a:
                    60:1c:e8:82:e9:4c:f9:96:11:55:dd:6d:30:7e:a7:
                    0e:20:82:6d:af:58:2e:d0:08:c9:eb:56:b7:31:79:
                    e8:1e:61:54:4f:b3:20:04:1e:fb:d0:f0:c3:1d:63:
                    f3:40:e5:7d:2e:39:bb:56:78:9c:73:4a:8d:de:56:
                    74:d3:02:d8:dd:48:f1:3b:43:e4:35:0e:c8:21:54:
                    b0:f3:fa:4e:0a:09:7b:f9:22:f1:49:da:5f:dd:2d:
                    f8:80:3d:4b:d7:27:88:6c:83:9f:29:a5:90:6f:2e:
                    43:b9:fb:85:83:63:34:25:ff:5a:68:fb:a1:47:65:
                    54:32:96:a8:e1:68:49:f7:6c:bc:cc:07:d5:61:37:
                    ab:ea:fc:08:c8:01:83:2b:b2:1e:fa:02:1b:c1:28:
                    55:dc:63:5e:c5:16:9d:ee:9f:75:62:8a:e7:93:71:
                    d6:dd:96:97:ce:ab:36:ec:ed:4c:95:00:78:6b:ca:
                    d6:43:4a:4b:93:30:75:6e:fe:65:4d:de:7c:37:df:
                    37:64:90:ec:6c:74:81:ab:32:99:e7:b0:16:5e:1f:
                    93:bd:d1:a7:32:1b:9d:8c:a4:65:4e:bc:f0:8c:a2:
                    9e:84:d9:9c:9d:52:0f:f7:94:2c:d2:36:fe:c8:b3:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7B:81:EE:25:C8:C1:68:60:0E:CB:8B:CC:6B:77:20:B6:40:08:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:a8:67:ab:8f:ec:46:a1:e1:a7:0d:ba:c8:1b:ee:85:a6:02:
         5f:23:94:53:42:8f:91:a6:6c:44:3e:ac:ab:32:a9:25:b6:a0:
         57:74:a0:e3:7e:db:ff:21:74:3a:01:14:e9:7b:f1:fb:42:2f:
         23:6c:64:b1:22:6e:64:6e:38:2e:23:97:03:32:27:e3:40:16:
         51:73:a2:6b:10:d6:6e:2c:d0:b9:1e:cd:76:50:c0:d1:98:73:
         60:66:6e:2f:91:7f:98:a2:4e:6b:a4:d8:45:26:82:46:de:db:
         43:d7:07:fa:28:5b:d4:82:9b:a8:11:ee:cc:64:2f:89:bc:ff:
         71:85:e0:da:30:a0:6a:3c:7a:62:05:bd:f1:b1:cc:39:e4:db:
         4e:84:56:b7:51:18:ca:ff:39:ba:5f:9c:4b:66:0d:75:98:ab:
         6a:dd:80:77:69:31:91:93:a0:ea:b8:be:42:d7:f1:6e:50:d4:
         25:78:7e:bf:67:65:e8:53:8d:6a:96:81:8f:db:fb:82:dd:be:
         3e:00:0d:6f:fc:de:c4:51:06:bc:83:4a:87:38:21:24:b7:cb:
         a4:a3:41:1c:b1:0c:c5:bb:44:70:da:03:4f:56:89:bf:28:d8:
         19:a1:d2:10:0b:2d:47:39:e8:5a:b2:e4:15:a0:69:93:b0:f0:
         31:39:f5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:58:33 2024 by rpki-client on console-ams.rpki-client.org