Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa
File:                     8649b369-c68e-3425-842a-125b5e1d9021.roa (raw, json)
Hash identifier:          ZZF0oY96d6WQ6qjKdmVaDTf6VxxC6DctDybEGJqFbn0=
Subject key identifier:   C7:BD:65:09:A8:F2:BF:67:96:D7:8E:DF:C0:41:C4:16:A4:A7:76:43
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285845D503AB81EBDFB8FF211B7440
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa
Signing time:             Sat 11 May 2024 01:00:27 +0000
ROA not before:           Sat 11 May 2024 01:00:27 +0000
ROA not after:            Fri 09 Aug 2024 01:00:27 +0000
asID:                     54113
IP address blocks:        140.248.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:d5:03:ab:81:eb:df:b8:ff:21:1b:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: May 11 01:00:27 2024 GMT
            Not After : Aug  9 01:00:27 2024 GMT
        Subject: CN=af6799ee-9758-4ea1-be98-636b23315ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:96:95:48:b1:28:65:b8:ec:3a:98:8d:cd:
                    db:b6:a8:ea:cd:79:07:3d:ba:e6:85:fc:4e:7b:e1:
                    54:7c:06:30:a3:2b:1b:f4:ab:ae:91:ed:36:f1:61:
                    54:a4:93:3f:b4:fa:76:85:19:86:64:e9:c8:6b:82:
                    bd:bf:cf:c6:05:7c:31:18:c0:62:fe:46:42:50:b3:
                    fd:46:5d:2d:30:3a:57:59:00:59:15:65:92:7e:7d:
                    04:1f:20:1a:30:4a:ed:3f:9c:e4:23:80:9e:46:b6:
                    97:e4:e6:77:26:85:d2:9a:54:7e:38:0d:36:c9:36:
                    93:1f:43:72:2e:2d:65:92:df:a9:88:2a:7c:e9:d8:
                    ce:92:5a:2a:65:c4:bc:24:9c:ae:fc:c5:a0:df:60:
                    ff:20:d4:34:d7:49:31:ff:66:29:37:40:64:b1:d1:
                    b0:8f:1e:62:f1:a8:e9:12:5a:61:71:0a:79:80:24:
                    84:ed:aa:b2:60:46:bf:08:ab:e2:7b:26:49:81:0c:
                    0f:93:1e:4a:4b:f4:a1:ac:0c:30:1f:57:cc:92:e9:
                    99:d3:cc:cb:5d:03:74:20:35:0c:8e:57:46:c2:59:
                    0e:3c:e2:d8:18:79:6c:7f:14:ab:f0:e5:4f:40:c8:
                    d1:18:15:42:1f:93:12:1f:f1:47:ef:07:e6:9d:92:
                    d6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BD:65:09:A8:F2:BF:67:96:D7:8E:DF:C0:41:C4:16:A4:A7:76:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8649b369-c68e-3425-842a-125b5e1d9021.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:47:f9:d6:66:2f:03:a0:58:fc:e1:58:2a:e0:de:ab:99:
         f0:2e:46:d4:f3:3f:f0:5f:55:8e:49:84:a5:be:65:f1:1a:13:
         36:c6:84:fd:f1:90:b3:a7:d6:ad:52:ea:b2:a7:49:ed:d7:a4:
         8b:d1:47:56:60:e0:1c:ee:23:f4:2d:14:32:24:5d:b4:a5:f8:
         c0:00:f9:d8:99:e8:8c:99:4b:61:31:b1:c0:72:bb:48:0b:6a:
         45:c6:f6:65:7d:f9:14:52:32:8b:c6:6c:97:ec:58:3a:52:5d:
         5d:70:35:78:31:9d:ac:f2:61:a7:f5:6b:8f:f2:ae:e7:bd:fa:
         7c:73:f7:30:5b:ea:0d:7f:12:1a:02:e2:95:e4:c6:f2:bf:68:
         16:c2:77:00:f4:47:9b:dc:14:14:b5:ee:4b:fe:75:d6:0c:0b:
         b8:fb:95:ad:20:0d:0a:0c:2b:58:ff:93:6f:b9:36:fd:cb:51:
         ce:77:14:c4:3a:3d:d3:de:2a:d1:63:1d:e5:17:64:1c:70:a8:
         60:e1:75:96:b1:ef:1e:04:02:10:6e:77:7e:c2:0c:23:00:7f:
         98:6f:fa:64:f9:e2:37:70:19:7d:b8:30:83:b2:3e:3e:91:f0:
         ad:04:ea:fc:f2:a8:83:0a:29:ca:a7:dc:18:13:c2:47:b2:86:
         14:6b:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 19:33:02 2024 by rpki-client on console-ams.rpki-client.org