Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
File:                     8a7c8fd9-33c8-3896-875f-f6567b317496.roa (raw, json)
Hash identifier:          +aIZTg9VgrWy9hBbsW4fb8oRPmI/A68yksNzDz2gmpc=
Subject key identifier:   39:DF:31:C9:3D:FB:66:BE:31:00:AE:DC:C9:B6:1E:F6:CC:22:8F:40
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858477D5BA4841D2278DBE13C1E80
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa
Signing time:             Thu 10 Oct 2024 01:00:33 +0000
ROA not before:           Thu 10 Oct 2024 01:00:33 +0000
ROA not after:            Wed 08 Jan 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        140.209.192.0/19 maxlen: 24
                          140.209.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:5b:a4:84:1d:22:78:db:e1:3c:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Oct 10 01:00:33 2024 GMT
            Not After : Jan  8 02:00:33 2025 GMT
        Subject: CN=2ddb9c74-9c88-40c0-bab2-bcaefbef65c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:20:51:00:7e:12:2d:31:c5:56:45:75:18:80:
                    8e:2f:68:cc:bd:b3:4c:cb:57:39:3b:5c:75:f5:df:
                    b9:cb:a9:11:cc:7f:37:cd:4d:ca:32:da:79:8f:ff:
                    23:81:c5:ba:aa:8b:35:ae:ce:4e:38:6b:10:eb:b1:
                    9e:0f:dd:0a:db:2d:e9:06:57:7e:45:ff:52:9e:ca:
                    90:d2:37:49:ad:57:a9:7f:52:8a:c7:53:2e:df:4f:
                    09:f1:a8:1c:8e:4b:b5:d2:1c:28:0f:b6:2c:17:38:
                    81:b3:a6:d8:01:8f:0b:a9:2d:91:8d:0b:46:38:9d:
                    e6:48:9f:92:ec:01:48:28:10:e6:60:5a:db:41:ae:
                    10:2d:cf:db:78:4e:a5:cc:6c:1d:e2:af:80:b7:dc:
                    80:4f:57:0c:50:d5:8a:8e:51:de:66:40:38:37:6f:
                    30:8e:fb:bd:cd:18:e8:da:12:f0:b6:5b:96:af:93:
                    59:e5:4c:af:c5:db:3b:dc:80:c7:2a:7f:f4:73:34:
                    23:da:34:09:bf:a4:51:14:d9:61:7e:b6:5b:97:14:
                    b8:65:fe:7d:46:3e:ba:30:53:29:b9:7b:b7:48:86:
                    c0:f3:de:46:e7:b1:8b:e6:00:5f:f9:3b:75:48:59:
                    3d:74:15:55:ae:8e:ae:df:e0:9a:14:8b:24:eb:06:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:DF:31:C9:3D:FB:66:BE:31:00:AE:DC:C9:B6:1E:F6:CC:22:8F:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8a7c8fd9-33c8-3896-875f-f6567b317496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.209.192.0-140.209.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:c0:b8:9a:4f:69:63:f8:cf:22:20:b8:5a:be:03:3f:ac:02:
         73:c1:10:ed:3c:d5:bb:ee:c0:1f:1b:55:16:ff:4c:dd:b2:dd:
         84:1a:e8:04:b5:9d:79:1c:71:00:5a:10:f4:ce:6c:46:5a:7f:
         58:95:68:3d:a3:ca:04:8c:c0:2b:3a:c7:45:33:95:82:c7:fb:
         00:57:9b:dd:05:70:0b:2e:2f:dc:ec:90:ec:96:b6:b1:63:7f:
         04:6a:6d:6a:57:f1:7d:a0:9a:25:22:c8:ff:46:c0:1e:fc:e7:
         f6:2e:bb:29:76:44:47:e1:8a:83:2c:81:2a:63:c3:91:4e:52:
         24:74:56:11:9d:9b:ec:a6:3d:e2:43:79:79:82:7a:2b:57:05:
         35:7b:8c:89:ff:21:75:bc:5f:10:df:8b:31:5e:2b:67:97:dd:
         d2:14:a1:ad:a5:6d:30:60:01:73:a2:9f:a1:1d:f0:62:64:11:
         d7:49:b0:81:73:26:64:b7:9d:a3:6d:27:9f:1e:f0:c2:0d:d7:
         51:56:d4:89:8d:88:8d:48:a6:ca:67:05:fe:e2:cc:70:90:78:
         99:28:3b:7a:50:15:cf:12:32:89:06:e3:c8:5e:d9:56:c5:da:
         d6:7f:77:d9:04:af:0e:ff:35:95:ed:af:6d:fb:11:8e:db:7d:
         c7:b6:26:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:27 2024 by rpki-client on console-ams.rpki-client.org