Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
File:                     4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa (raw, json)
Hash identifier:          KCbrVe5eZuYRgzcxGszx240jjVI9lXsR+4M32qes0vU=
Subject key identifier:   44:9C:37:76:B1:70:C8:7A:71:BB:D2:F6:D8:07:21:E1:DE:E9:99:09
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285847107AF7BF5FBC064245F1E9C8
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa
Signing time:             Sun 01 Sep 2024 01:00:31 +0000
ROA not before:           Sun 01 Sep 2024 01:00:31 +0000
ROA not after:            Sat 30 Nov 2024 02:00:31 +0000
asID:                     27370
IP address blocks:        140.241.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:10:7a:f7:bf:5f:bc:06:42:45:f1:e9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Sep  1 01:00:31 2024 GMT
            Not After : Nov 30 02:00:31 2024 GMT
        Subject: CN=9cfbc59d-d854-4c73-9dc1-b88511954a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:29:73:bf:b2:cb:5f:45:3a:9e:c2:68:9a:6f:
                    d2:04:10:d9:e7:56:29:ab:b3:9e:e2:43:d6:a0:ff:
                    26:68:27:3c:a1:d3:02:95:44:ae:71:20:d3:9e:53:
                    0e:69:f3:1a:99:44:d3:75:a8:2e:dd:df:9e:5c:e5:
                    0d:23:54:f1:fc:e1:63:8c:f7:63:15:4a:cb:44:48:
                    ee:80:8c:88:ed:0a:da:3d:5b:c4:93:7c:9a:07:91:
                    a9:18:30:8f:3f:20:12:e8:59:a7:f6:3d:6d:1e:ce:
                    21:fa:d6:0e:45:ad:83:81:d5:a9:b4:ec:c7:ed:f8:
                    e4:54:10:fa:3a:c8:b0:64:e1:22:57:6b:76:61:ad:
                    db:c3:5f:18:1b:7e:a2:a2:32:7c:da:8f:02:2a:fc:
                    7e:b0:3b:37:e3:5c:5d:4f:62:6d:6b:2d:dd:9a:d0:
                    4c:bd:eb:e0:9a:59:62:36:83:34:bb:72:79:61:07:
                    05:93:9b:d8:13:e6:88:88:6d:8a:86:09:34:c7:ff:
                    43:37:2c:e5:bb:a6:22:d0:e7:c7:d8:05:9a:23:ed:
                    66:53:64:19:55:0c:65:86:2e:48:28:86:37:fa:c8:
                    a4:d7:5c:ab:dc:b3:ca:7c:7c:8d:2e:69:08:ff:90:
                    d1:79:5c:dd:bf:2b:c5:a0:c0:83:61:60:59:0d:33:
                    5a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9C:37:76:B1:70:C8:7A:71:BB:D2:F6:D8:07:21:E1:DE:E9:99:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/4d611b35-07ef-33d7-9ae9-7f51f057afb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:4c:5f:47:07:d6:46:83:77:80:cd:f0:9f:df:b8:63:40:f2:
         e5:8d:43:c4:fa:1e:dd:d5:ce:ef:ef:7a:8f:e2:8f:aa:c6:ef:
         f6:e1:72:e9:66:64:a4:27:74:6d:17:a3:7b:17:f4:a6:42:be:
         9c:c6:aa:d9:dd:35:8d:e8:be:5f:20:c0:cd:9e:22:b5:bc:cd:
         93:c5:96:65:79:f8:63:5a:cd:7e:99:7d:f0:6f:78:b1:d3:07:
         21:ed:f9:27:dd:b5:2f:9b:76:eb:43:d4:30:a1:c9:39:7c:84:
         23:2e:29:cd:32:a5:23:97:db:e5:96:a1:5e:63:a4:40:47:8b:
         9d:6a:1f:55:96:38:05:68:63:00:89:2f:b8:99:44:66:d5:5e:
         d2:29:55:d9:99:fe:36:79:b0:d7:31:4d:f2:ca:8d:53:33:03:
         5b:b0:32:f8:3e:7d:21:41:79:44:23:f8:ce:99:25:e0:dd:40:
         3f:49:6e:97:84:bc:fb:b4:99:08:14:68:29:5b:63:7f:68:79:
         8b:cc:7e:30:99:19:a2:47:0f:84:24:03:5d:6b:14:20:d9:62:
         f7:a2:35:45:8e:59:06:8e:47:1f:48:4c:32:ba:41:8b:8f:58:
         6c:e7:11:21:0d:2f:2d:a3:ec:ea:df:e4:fa:ad:c3:c4:95:0d:
         40:2d:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:45:51 2024 by rpki-client on console-fra.rpki-client.org