Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f8c89a50-bd64-3764-a3d7-945ad9cc10e5.roa
File:                     f8c89a50-bd64-3764-a3d7-945ad9cc10e5.roa (raw, json)
Hash identifier:          b5ZcbHMGzqz+r2rCUecHNA8k1sYIQQ1kpGDK/AQ4cL0=
Subject key identifier:   63:AE:00:C4:31:FA:EE:E7:46:E2:6A:B7:45:AD:0E:15:99:C8:6B:0D
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285847213B107D997AB77391E2EE40
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f8c89a50-bd64-3764-a3d7-945ad9cc10e5.roa
Signing time:             Sat 07 Sep 2024 01:00:31 +0000
ROA not before:           Sat 07 Sep 2024 01:00:31 +0000
ROA not after:            Fri 06 Dec 2024 02:00:31 +0000
asID:                     55247
IP address blocks:        162.211.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:21:3b:10:7d:99:7a:b7:73:91:e2:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: Sep  7 01:00:31 2024 GMT
            Not After : Dec  6 02:00:31 2024 GMT
        Subject: CN=513ee6d4-25cb-49d9-ae72-06d9f360a4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:38:84:36:90:ad:8e:31:5b:41:b4:2c:cc:49:
                    54:f8:06:2b:89:a2:18:45:ba:8e:73:5d:68:9f:0e:
                    57:8d:82:6d:b2:f6:79:c5:54:e8:d2:ae:12:72:23:
                    f0:b3:cf:82:c4:12:8e:a7:46:11:f5:9c:f0:75:04:
                    ab:2c:a3:77:05:bc:d5:45:4a:f5:18:f3:53:53:cc:
                    ef:b9:c3:4f:17:3d:f1:c8:98:48:45:bf:9f:84:ab:
                    0c:74:d7:1e:3c:e1:c0:d5:75:41:d9:86:26:24:3d:
                    af:3c:b0:2a:00:0b:ee:d2:27:d8:94:1f:44:31:ab:
                    e5:6b:fd:d3:a0:6e:8d:bd:76:01:ed:ab:9a:b2:86:
                    74:97:19:fe:e3:c4:c5:0b:2b:33:5e:c4:1d:07:fd:
                    d0:d2:5b:ff:91:13:c2:13:41:e7:d4:be:e2:dd:72:
                    7b:f9:73:67:d3:1c:a2:ff:10:b2:db:ea:dc:bc:68:
                    03:b2:e2:cc:a4:5d:18:bc:fc:ee:7e:3d:a3:e9:05:
                    14:02:05:3e:82:e2:0a:e1:3e:1b:c8:85:0a:49:87:
                    a4:d9:0a:d1:66:4b:ea:8a:6b:7c:d5:91:f7:4e:a2:
                    e1:15:a0:59:bb:de:62:98:76:9d:24:7b:b9:6f:ab:
                    eb:f8:43:6f:7e:02:d7:69:46:20:61:23:38:09:f9:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AE:00:C4:31:FA:EE:E7:46:E2:6A:B7:45:AD:0E:15:99:C8:6B:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/f8c89a50-bd64-3764-a3d7-945ad9cc10e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:61:da:b5:20:00:36:ca:1b:05:79:fc:21:6f:3e:cb:d1:19:
         4f:48:75:65:59:9e:37:cb:89:c8:68:0d:7d:93:81:b1:a5:05:
         9d:4e:c0:39:5c:3d:97:93:71:0c:c9:d0:c2:eb:3b:c7:69:eb:
         c5:90:53:45:fc:f0:22:e9:bd:a1:60:30:4b:c8:ae:22:34:bb:
         56:65:06:b4:10:cc:93:76:b9:df:62:27:4a:d9:40:9f:9a:18:
         07:70:83:58:b3:d9:31:14:a1:2a:e3:ef:ff:a9:53:50:08:25:
         fc:9c:7a:d3:7b:ca:45:32:1b:25:34:f2:5d:30:0c:42:f7:e8:
         d3:0a:88:a9:4c:c1:ce:83:b0:0b:b6:3c:30:75:05:07:a5:c1:
         18:23:08:87:bc:3a:1b:0d:ee:4f:aa:d7:b2:28:3b:bd:c0:82:
         f9:de:a0:de:7a:f9:a5:fa:b9:d3:18:22:b2:55:b5:ea:6e:ac:
         74:b0:e2:9c:28:f2:14:0c:db:52:dd:8d:43:9b:9f:30:42:b8:
         43:88:60:21:b1:d6:a2:3e:86:28:58:86:a9:9d:2c:92:e3:c4:
         23:eb:4d:97:59:b0:14:23:0d:f2:98:5a:67:a1:15:b1:84:17:
         05:43:b4:f5:90:c3:17:89:52:a5:d5:11:6d:66:4f:c5:75:96:
         30:43:b4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:12:50 2024 by rpki-client on console-fra.rpki-client.org