Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/aed98775-d58b-3df1-8ea7-a91619dd81ff.roa
File:                     aed98775-d58b-3df1-8ea7-a91619dd81ff.roa (raw, json)
Hash identifier:          MhIcRdslAP9w76IMr0P662ksxPmQp1bTcQQgeAZf9Z0=
Subject key identifier:   2A:DA:A9:8F:B3:2B:D8:7D:11:52:41:D2:59:51:51:66:3C:1E:9F:82
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584574B311DE444F8EF6A1676C80
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/aed98775-d58b-3df1-8ea7-a91619dd81ff.roa
Signing time:             Sat 06 Apr 2024 13:00:35 +0000
ROA not before:           Sat 06 Apr 2024 13:00:35 +0000
ROA not after:            Fri 05 Jul 2024 13:00:35 +0000
asID:                     12097
IP address blocks:        24.140.176.0/20 maxlen: 20
                          24.140.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:74:b3:11:de:44:4f:8e:f6:a1:67:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Apr  6 13:00:35 2024 GMT
            Not After : Jul  5 13:00:35 2024 GMT
        Subject: CN=8446638b-63c0-48c0-ba06-990b8a4862c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:e0:01:9b:d6:d2:bf:11:eb:72:37:4f:29:
                    cc:7a:22:07:72:34:2f:bc:74:2d:3e:d5:ab:c0:42:
                    da:97:6d:4d:c9:33:35:53:02:94:a9:90:b6:10:3f:
                    4d:18:71:b6:69:08:17:9a:26:66:f7:cf:23:d6:0c:
                    61:1c:44:5e:02:f8:20:93:83:bf:0f:6a:f3:9b:5b:
                    2c:cc:a4:9c:f1:7d:d0:a4:14:71:c2:e5:76:c0:a5:
                    2a:db:b3:ba:63:f2:7b:86:2e:76:0f:a0:06:b5:cd:
                    70:4e:10:54:ed:85:c4:1f:bd:67:06:e3:23:2b:6a:
                    38:50:0a:61:08:eb:1c:a6:d6:cf:9a:42:aa:47:a0:
                    92:ed:80:5e:84:98:7a:ca:2b:27:9e:8c:6d:6a:b5:
                    4c:6b:d2:df:d8:9f:0e:29:ea:3a:bc:51:a1:07:38:
                    d9:53:71:3c:c6:29:bb:ac:2a:af:ce:a4:cc:07:d8:
                    12:0b:97:e2:e3:8f:7e:a2:0d:e6:61:5d:e7:09:80:
                    aa:6d:41:b3:d5:e4:95:15:5f:60:2e:54:75:8c:31:
                    82:da:fa:46:bc:0f:aa:3e:19:4f:d6:ab:f9:7e:68:
                    4f:cb:f2:ce:19:b9:be:d8:a7:97:0b:11:44:f2:1d:
                    c8:9e:1a:2d:04:72:2f:13:95:70:3d:69:36:77:2d:
                    47:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:DA:A9:8F:B3:2B:D8:7D:11:52:41:D2:59:51:51:66:3C:1E:9F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/aed98775-d58b-3df1-8ea7-a91619dd81ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:58:cf:95:58:6a:c5:f1:68:61:2d:54:a6:bb:a1:ba:42:e3:
         a7:01:4f:0f:2b:54:f4:3a:55:2b:17:7a:a4:78:4a:57:9e:fe:
         38:08:d1:a6:32:68:8f:d8:06:95:d2:a5:45:c5:9f:71:92:3f:
         21:6d:df:aa:2b:56:e1:bd:8f:0c:2a:f6:3a:f8:1b:ee:a8:6c:
         71:a1:f2:92:33:06:f9:20:40:83:cb:d0:6b:28:1b:5a:e6:18:
         df:6d:cc:19:ed:5a:97:ed:63:ab:32:04:8e:ca:15:5f:e7:82:
         ac:d8:95:9e:b5:06:6b:c3:d0:65:88:0d:ef:87:3d:b5:45:86:
         76:b0:52:d1:03:57:e4:51:20:21:a5:e3:81:70:bc:b1:9d:69:
         9a:87:76:f8:2d:a9:d4:d7:fe:d7:41:38:70:54:3d:82:59:cc:
         fd:90:ff:4a:74:68:fd:a9:26:f0:39:c4:ab:72:86:5b:1f:f7:
         43:da:82:41:ea:df:fa:b5:66:71:03:47:d5:8b:54:66:8d:f2:
         50:8b:44:21:2b:08:e8:6a:96:01:fb:7d:ee:90:58:6b:99:df:
         71:13:33:e0:bd:08:0e:39:1d:af:3a:c6:4e:96:a3:05:79:50:
         48:5b:3d:dc:e9:83:28:9c:76:93:fe:6e:57:bb:0b:be:88:f7:
         1c:d9:ce:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org