Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/b21bef4f-fc24-3a9b-8e48-afd8f539f619.roa
File:                     b21bef4f-fc24-3a9b-8e48-afd8f539f619.roa (raw, json)
Hash identifier:          GHJOrlJ5FICKqQoI8yqMtbfWBYkg0OZMRlOusAq673E=
Subject key identifier:   9F:16:7B:28:35:C5:DA:AF:E5:7C:78:B7:BB:70:F6:C9:D3:4F:90:8D
Certificate issuer:       /CN=07c4e5ee-2226-4e08-9241-86de7cdb8274
Certificate serial:       010D0C9F43285847766106C6AF7D5C87029F9180
Authority key identifier: E7:7F:24:34:5C:20:3E:3D:C7:CC:44:0D:BE:65:77:59:CD:59:09:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/b21bef4f-fc24-3a9b-8e48-afd8f539f619.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     31898
IP address blocks:        141.226.141.0/24 maxlen: 24
                          141.226.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/07c4e5ee-2226-4e08-9241-86de7cdb8274.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/07c4e5ee-2226-4e08-9241-86de7cdb8274.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:06:c6:af:7d:5c:87:02:9f:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c4e5ee-2226-4e08-9241-86de7cdb8274
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=37ce09f4-4624-4a2c-8528-c262686e5b31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:34:30:55:a8:be:fc:79:8d:e0:09:7b:58:44:
                    6a:41:2d:4a:51:a7:8f:57:26:0d:db:5d:96:5b:6a:
                    16:6f:ef:c9:f6:5a:4c:3b:d7:14:85:e8:8f:52:b8:
                    8c:e4:1a:41:6c:ea:f1:df:bf:12:2a:3e:b7:ee:cf:
                    64:66:4e:f9:87:95:ab:b8:6c:b1:cc:74:2b:a2:a9:
                    67:d9:ca:1a:61:cf:6f:59:4f:3f:05:03:d8:2c:7f:
                    d4:4e:b4:9a:41:90:8e:cb:69:9f:a4:e9:f0:c0:93:
                    a2:62:b7:85:b7:bc:7e:47:3f:4a:54:00:b6:03:1d:
                    ed:52:fc:e2:29:da:d9:4a:74:e2:9f:4f:b7:a2:d2:
                    01:64:11:aa:d9:2b:4b:23:4a:43:48:c7:70:b3:4c:
                    c4:15:76:d2:ca:58:10:3f:21:24:b3:4f:64:1d:11:
                    1c:71:ee:7a:1f:05:6b:96:17:de:91:44:c5:9b:d0:
                    4c:2d:06:d4:b0:95:aa:9c:3c:e9:23:c8:34:12:a8:
                    31:76:0b:c4:90:f8:f0:ca:e9:54:15:91:e5:cb:b1:
                    c8:f0:24:36:51:65:b6:74:e6:60:33:0e:eb:d2:9c:
                    10:b5:b6:81:b2:da:cf:e4:09:84:4f:5f:13:13:06:
                    45:80:77:ec:dc:5a:4c:3d:55:7d:92:b6:c9:17:c7:
                    7e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:7B:28:35:C5:DA:AF:E5:7C:78:B7:BB:70:F6:C9:D3:4F:90:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/b21bef4f-fc24-3a9b-8e48-afd8f539f619.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274/07c4e5ee-2226-4e08-9241-86de7cdb8274.crl

            X509v3 Authority Key Identifier:
                keyid:E7:7F:24:34:5C:20:3E:3D:C7:CC:44:0D:BE:65:77:59:CD:59:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/07c4e5ee-2226-4e08-9241-86de7cdb8274.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.226.141.0/24
                  141.226.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:ea:a3:5a:71:da:18:b9:4e:99:c0:35:55:a6:7f:5e:eb:9f:
         69:f0:99:4e:55:23:43:8a:8e:84:a1:c9:fa:18:e6:f7:a9:37:
         84:e6:ca:b7:d4:5b:3a:c8:d6:01:df:45:5d:63:75:48:db:b5:
         3c:12:88:29:da:00:f7:20:57:4e:8c:2a:cf:ea:cf:2f:c6:20:
         6e:d4:0f:d9:d8:a6:39:cc:12:04:42:38:c0:2a:1f:e9:64:54:
         44:9b:26:3f:c4:64:19:16:f2:74:21:8a:26:63:d5:6c:83:8d:
         8b:28:ab:db:cc:9f:4f:10:8e:08:5f:49:b0:1f:f1:bd:ba:36:
         05:ee:e9:70:ab:7f:97:3e:9c:0a:f4:5e:e8:36:4c:1f:75:59:
         9a:a0:96:ca:23:b3:93:57:91:5c:bb:bd:b0:93:78:2d:aa:f8:
         44:a2:bd:2d:ae:9d:de:76:e4:0e:bc:22:9d:0d:89:8f:36:d1:
         99:35:23:2a:f0:91:88:83:df:a2:9a:dd:6b:4e:c5:e7:26:4a:
         00:99:12:74:e3:f6:08:0b:5d:9c:b3:3c:e6:02:c2:a9:c1:cd:
         92:58:dc:e4:30:1a:af:4e:86:6b:1b:8b:c7:71:ee:52:dc:57:
         ec:f1:1a:d5:07:56:69:ff:ee:cd:94:a0:c1:bf:a9:75:ef:f0:
         b1:df:bb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:43:16 2024 by rpki-client on console-ams.rpki-client.org