Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          fNpe08Bh74P5I5DRFvnuP441p/JeTdvJayRt3/RGWnY=
Subject key identifier:   11:B2:06:83:A7:DF:94:9A:8D:69:8B:9D:10:5B:C6:F0:9E:2A:46:3F
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F43285845734DA996E7EE44B3AB0BA080
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Sat 06 Apr 2024 01:00:26 +0000
ROA not before:           Sat 06 Apr 2024 01:00:26 +0000
ROA not after:            Fri 05 Jul 2024 01:00:26 +0000
asID:                     12097
IP address blocks:        24.140.48.0/20 maxlen: 20
                          24.140.24.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.192.0/19 maxlen: 19
                          24.140.40.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.64.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:73:4d:a9:96:e7:ee:44:b3:ab:0b:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Apr  6 01:00:26 2024 GMT
            Not After : Jul  5 01:00:26 2024 GMT
        Subject: CN=99155a69-bb77-4fe7-a73d-91391b9a1095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:51:4b:d2:b3:65:83:54:53:a1:9d:8a:3d:
                    a1:47:aa:74:8c:9a:df:06:a4:15:7e:55:3c:70:1f:
                    44:9e:ef:67:22:8f:ec:fe:9d:0d:38:fd:30:c7:3d:
                    3a:13:4d:4d:84:8c:4f:68:65:64:b5:6f:c4:18:83:
                    4e:d8:ce:89:97:2c:47:2b:fb:7e:69:10:54:c5:21:
                    b8:6a:34:6b:9b:25:53:01:49:24:75:50:4e:70:7a:
                    af:d9:40:ed:9d:b3:9a:96:0a:4c:f4:b6:f9:f9:91:
                    9d:36:c5:8d:3f:21:af:81:7b:bb:91:b9:38:48:d8:
                    2f:83:80:16:03:55:e0:21:c5:e6:1b:8b:5d:26:ac:
                    cf:02:8a:d5:6e:09:c5:96:81:55:3d:45:4c:43:90:
                    f6:d2:99:cc:f1:46:ed:0c:af:f9:b8:c0:26:6b:91:
                    4d:49:66:41:de:cd:a6:e5:5b:fe:50:72:31:73:49:
                    2c:96:83:5c:7a:46:32:92:ec:f3:db:0f:03:bd:59:
                    bf:79:ce:34:e0:72:b1:53:56:1f:51:e9:fd:c0:3c:
                    c3:74:ca:f5:8a:96:e5:3a:ae:df:d8:75:06:3e:3d:
                    81:b9:88:4e:08:0c:a1:00:74:54:bb:db:f0:3e:fe:
                    41:a2:ac:cc:23:4f:46:04:22:95:7d:5e:65:66:33:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B2:06:83:A7:DF:94:9A:8D:69:8B:9D:10:5B:C6:F0:9E:2A:46:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.24.0-24.140.135.255
                  24.140.144.0/20
                  24.140.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:10:0a:73:b8:8c:3e:b7:f8:c9:dd:34:12:f0:a0:a6:28:a5:
         3b:eb:ed:29:ae:24:47:2e:58:0c:8b:1e:bc:a5:26:4a:a5:86:
         81:ef:05:c1:a0:b1:48:4f:30:e7:a6:05:6c:c2:93:c6:1c:22:
         2d:03:fa:ef:c0:78:a6:24:f9:6d:7f:14:af:80:15:92:c7:14:
         44:91:37:ab:10:24:ce:0c:7d:5d:06:44:02:ef:c7:26:62:06:
         43:07:03:c8:1c:2c:fe:6c:60:29:fa:9b:ee:74:7e:49:31:e5:
         a7:36:59:e1:a1:34:61:d4:f4:b9:04:38:a3:86:d3:52:77:a4:
         05:42:de:18:80:5a:59:9b:7a:10:32:e3:75:2c:f0:3e:c4:35:
         66:54:5e:59:44:0e:0d:51:52:17:2d:b4:26:8a:ee:0d:c1:19:
         ca:e0:d6:6f:cd:ab:d9:d5:40:26:63:12:b7:53:13:e9:57:ea:
         d9:28:de:3f:18:07:3b:41:85:64:d8:87:48:9f:a6:d9:86:35:
         a2:2c:46:10:13:cd:c8:d3:5e:11:89:35:b4:00:ff:85:fc:eb:
         39:0c:54:f7:3a:4a:84:5b:ac:53:72:2c:18:f1:ef:71:fc:a2:
         ed:0e:91:98:db:b8:24:8c:be:4e:8c:ce:de:fb:3a:34:bd:e4:
         ad:e8:0a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org