Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa
File:                     bf501b39-cf10-3228-be24-2d4a79b1b202.roa (raw, json)
Hash identifier:          RaA9kFhsY0rBvW3z6z++aOpVkpiDpBP5nzxSvJMeS9A=
Subject key identifier:   4E:28:5B:2B:3F:05:29:B1:90:72:4E:3A:F6:9F:06:A4:0A:D4:C3:D6
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F432858450EEAD288D91B7A1111C7E420
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa
Signing time:             Fri 01 Mar 2024 02:00:27 +0000
ROA not before:           Fri 01 Mar 2024 02:00:27 +0000
ROA not after:            Thu 30 May 2024 01:00:27 +0000
asID:                     12097
IP address blocks:        24.140.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:0e:ea:d2:88:d9:1b:7a:11:11:c7:e4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Mar  1 02:00:27 2024 GMT
            Not After : May 30 01:00:27 2024 GMT
        Subject: CN=e44156ca-2715-440f-98ee-41b2fa55b36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:35:6d:ce:a5:83:a0:e4:e4:d8:1b:eb:39:f9:
                    33:99:b4:38:03:cf:16:18:20:bf:50:46:31:eb:b0:
                    60:54:80:29:01:24:c2:08:e1:ff:a6:77:0e:1b:29:
                    fc:ed:7d:47:f6:1c:26:bc:ca:02:0e:6a:70:05:19:
                    4f:0a:3e:e4:fa:5f:87:bb:61:30:20:da:8a:81:38:
                    e1:4d:fa:7f:20:9f:58:c8:fd:6e:e9:18:3f:af:d9:
                    28:b7:11:03:f4:3d:ff:2b:3b:4b:11:0d:ea:db:a9:
                    0e:e2:ba:a7:fc:de:7d:00:89:1e:23:b0:21:b0:a5:
                    a1:13:0e:42:05:d4:d4:ba:43:60:c2:21:6e:69:94:
                    be:8d:e2:9b:73:d6:c5:34:7a:7d:53:c5:a0:7d:ed:
                    03:71:f9:5b:ed:ee:00:92:d5:6a:c2:31:df:df:f4:
                    62:fb:81:61:0a:e0:09:b5:58:e8:c1:9b:07:99:f6:
                    a1:c3:97:d4:c4:5b:cf:b8:6b:6a:f0:a7:54:43:87:
                    a3:06:db:41:fd:74:59:5f:22:1e:0f:18:b8:9d:4a:
                    44:d0:67:ba:8e:2b:91:ec:3d:f5:b5:f5:1d:8f:ad:
                    2a:e1:a8:4c:dd:90:40:dd:a4:56:5c:f4:bb:dc:e2:
                    45:0f:aa:76:b5:af:24:b8:7c:55:0f:cf:b3:e9:26:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:5B:2B:3F:05:29:B1:90:72:4E:3A:F6:9F:06:A4:0A:D4:C3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/bf501b39-cf10-3228-be24-2d4a79b1b202.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:08:1e:2a:9f:c5:f2:5a:e1:5b:c9:6a:9d:9d:e7:ac:b7:f8:
         52:8a:21:a8:4f:92:3a:7c:93:39:41:e6:31:be:8c:07:bb:0e:
         ae:64:9a:66:7d:9d:91:d3:26:b2:cf:36:b5:43:cc:4a:3a:c2:
         42:db:89:14:bf:43:20:f5:67:d6:d2:74:c3:72:0d:b2:36:4f:
         24:70:87:6f:7d:de:1a:30:2a:cf:0b:13:36:48:a9:b3:b6:b1:
         aa:1e:c4:a1:bf:36:49:7b:75:a8:49:7f:a0:d5:46:a4:38:4f:
         f0:82:23:b3:20:0a:d9:48:fb:a9:8a:66:1f:f7:f1:0e:93:28:
         50:1d:a3:28:35:27:fc:d4:3a:86:db:9b:8b:35:24:06:57:35:
         a9:3d:4a:a5:70:46:b5:3c:90:17:59:f4:ee:82:0f:38:b1:8c:
         8a:58:59:a9:d1:14:79:bc:55:0f:de:32:a2:06:17:5b:20:66:
         d3:7a:15:b5:dd:fc:d1:b8:b9:9f:15:35:d7:bb:46:1d:26:5c:
         1f:cf:05:b4:14:8f:9e:a9:28:de:7b:a3:bb:ff:8b:17:90:90:
         9f:f0:97:c1:2a:10:50:14:45:a0:1c:dd:70:86:c1:a2:7a:61:
         10:ca:ca:09:44:65:7b:a8:5a:9f:eb:85:75:ca:7e:e4:20:2b:
         e2:db:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:36:02 2024 by rpki-client on console-fra.rpki-client.org