Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/fd2b1f24-52dd-3fd0-819c-422bd7d24668.roa
File:                     fd2b1f24-52dd-3fd0-819c-422bd7d24668.roa (raw, json)
Hash identifier:          jCbTvcoIROqSA09kz7pDAQRnC8jSb+JYB0WgmgFXUJ8=
Subject key identifier:   71:4B:65:04:37:8C:AD:56:7D:84:3C:9D:0E:D8:FE:C7:35:44:CD:1D
Certificate issuer:       /CN=27f24f9e-ef46-4828-9575-be547ae0263d
Certificate serial:       010D0C9F4328584754E0E3F9B7FA25BF0B723340
Authority key identifier: 5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/fd2b1f24-52dd-3fd0-819c-422bd7d24668.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     46475
IP address blocks:        141.195.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:e3:f9:b7:fa:25:bf:0b:72:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f24f9e-ef46-4828-9575-be547ae0263d
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=60ab6434-bade-452d-a262-199d5fffff66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ff:22:3c:6e:e6:3e:2b:d7:cb:5b:83:68:1c:
                    28:7d:0d:8d:fe:4b:c7:98:5a:e0:13:23:bf:e1:26:
                    40:6c:a1:70:40:f9:9f:26:ed:f6:f9:50:60:26:9e:
                    41:64:6a:12:1d:5a:0a:6f:d5:b0:75:51:af:f7:a4:
                    27:e8:8f:ef:e3:ee:15:f9:86:21:fe:97:a4:42:65:
                    fc:74:06:19:b0:1b:90:6c:33:8f:a2:2d:41:50:3f:
                    7f:98:cf:2a:04:a7:43:72:ff:95:26:41:d6:3e:e5:
                    40:9b:c7:85:6f:be:87:ca:02:98:e3:37:a5:de:08:
                    a2:38:20:86:6b:76:4e:68:22:55:b0:4c:cb:e2:67:
                    19:82:87:4a:39:43:73:79:b6:a5:1d:38:3f:84:26:
                    3d:fa:c0:69:98:f7:63:8f:7a:dc:b3:3d:cb:00:3d:
                    e7:53:bb:c5:07:35:6e:b5:99:42:85:20:13:f5:c5:
                    c5:0e:a7:65:01:35:35:bb:e9:4b:23:9f:8e:88:51:
                    3e:69:6b:84:db:08:43:6d:19:46:f6:e9:53:0e:88:
                    f0:34:6e:0c:dc:01:4a:db:30:f9:6a:cf:81:1e:e2:
                    4e:95:6d:a3:8b:2c:4b:b6:58:86:1a:e1:ba:31:86:
                    59:f7:4c:9a:ca:19:95:17:c3:7e:e7:55:e3:4b:ca:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:65:04:37:8C:AD:56:7D:84:3C:9D:0E:D8:FE:C7:35:44:CD:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/fd2b1f24-52dd-3fd0-819c-422bd7d24668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d/27f24f9e-ef46-4828-9575-be547ae0263d.crl

            X509v3 Authority Key Identifier:
                keyid:5C:D9:FB:4D:9B:51:64:06:A6:D0:AB:BE:A0:03:92:1D:13:83:FD:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/27f24f9e-ef46-4828-9575-be547ae0263d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:01:31:2d:2d:d7:93:c4:44:7b:4e:6a:4e:56:e3:aa:8c:c3:
         70:e6:1b:05:19:c0:77:7e:00:16:a4:71:40:75:94:36:51:46:
         00:5f:5c:f9:06:6f:e1:38:0c:08:3e:25:e9:0c:71:96:cb:43:
         de:c0:2a:b0:dc:af:20:a9:6c:6e:72:8e:75:69:68:71:61:9a:
         ff:2c:3c:eb:d8:89:02:25:ab:b8:c4:db:3e:3d:93:5f:43:b2:
         70:8e:e6:db:3f:fe:30:82:a6:b7:97:52:82:c8:5f:9c:f1:5b:
         7f:a8:73:56:58:55:48:d6:79:fe:65:4f:26:00:e4:9e:ce:fd:
         3f:16:ae:5c:d7:ed:7b:50:8a:71:23:ec:d2:26:ac:33:16:16:
         2d:54:23:2d:63:4b:07:e6:87:78:59:f4:e8:a0:e0:51:5a:ad:
         06:a4:58:e6:06:aa:39:de:19:7c:85:ae:d0:d1:de:58:84:9b:
         a6:02:89:ea:0d:52:b3:63:53:0d:15:e1:da:f4:42:56:a2:53:
         5b:85:8b:28:e5:b6:fa:14:f4:8b:73:04:a5:e0:49:0e:e9:b2:
         b9:0c:04:ba:28:3c:c4:32:5e:67:5c:27:3e:36:a4:e2:8e:af:
         0b:77:8d:df:4a:95:b3:84:f6:90:8b:3f:36:6b:38:28:58:47:
         c3:ab:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:00 2024 by rpki-client on console-fra.rpki-client.org