Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa
File:                     ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa (raw, json)
Hash identifier:          Mc2cF4W9aYkGH/ScSbth8uQr1FtyABCacc/9/Mwqlhw=
Subject key identifier:   AD:39:68:61:14:F2:19:DC:68:CE:30:E7:56:98:76:FD:0F:2D:58:E9
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F4328584566BDB10FBC2B991238254840
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     395437
IP address blocks:        138.43.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b1:0f:bc:2b:99:12:38:25:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=3bc4911e-9ad9-48e1-b494-5ed9b7675d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:b5:be:61:04:81:f8:fb:08:10:d0:26:d2:
                    74:d7:6d:20:8f:88:01:72:45:63:b1:60:38:54:bd:
                    b3:4c:fd:c2:4b:9a:bf:f3:5a:50:c4:e3:3c:e2:c5:
                    61:8a:c1:04:93:e0:4a:5d:23:4f:51:8b:9b:74:bb:
                    28:91:a9:38:25:35:36:e1:e6:78:16:0a:5f:8f:82:
                    ac:3e:05:4a:9c:08:1e:1d:c5:77:63:2a:b5:0f:f4:
                    fb:ea:a0:8d:3f:75:b1:45:93:23:d5:75:13:a7:e0:
                    26:89:84:f0:d0:11:fb:e7:ef:83:79:cf:22:de:a1:
                    d4:78:c3:22:fb:c0:30:be:c0:56:c0:54:5b:9a:62:
                    0f:90:74:b4:2d:29:db:8a:e5:5f:c2:ae:d9:a5:be:
                    c2:18:7d:74:9d:2d:3a:0b:e6:c6:91:80:c3:e8:86:
                    6e:a6:a9:d8:8a:6b:12:98:23:4c:9f:55:64:f8:9c:
                    33:69:0c:84:0c:40:b0:80:3f:d1:d6:74:24:1e:83:
                    4e:d7:39:9f:d1:2a:53:40:28:ef:6c:82:b5:54:44:
                    6f:d5:b8:59:de:17:fa:e9:f8:ff:4f:b7:91:35:46:
                    6b:8a:7b:ce:f6:f6:dd:ca:78:3b:a3:5e:46:dc:25:
                    29:2d:e4:ee:f1:da:cc:0a:ef:c8:22:7a:3a:98:c2:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:39:68:61:14:F2:19:DC:68:CE:30:E7:56:98:76:FD:0F:2D:58:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/ba9c5d06-13d1-3ff7-9d30-951a9b14cd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b4:de:aa:01:4b:81:a6:92:ac:91:92:c9:0b:0e:09:39:14:
         a8:fd:0e:98:41:62:c7:87:ef:56:ba:6c:16:07:68:86:e0:fe:
         9a:63:7b:47:a9:45:c7:75:40:73:af:6a:a9:5d:02:9a:46:56:
         8b:c0:36:75:7c:8d:92:ba:e3:ec:c7:b4:c1:17:3d:1d:65:04:
         11:0a:66:14:b9:d2:c2:65:7b:b8:11:d8:c2:8f:7a:d5:a2:86:
         5c:af:21:40:2d:7f:9c:72:fa:f6:b3:fb:11:82:b0:1b:f1:90:
         a5:03:b2:66:03:b4:09:aa:f2:f2:48:cd:f6:6d:c1:7f:af:94:
         47:55:e5:12:73:8e:f3:5f:f3:16:50:9a:1b:f7:c6:fa:45:c5:
         fa:f6:c6:45:b6:3f:97:3e:1a:e9:70:cf:ed:de:ba:39:35:7e:
         d4:5d:a1:10:36:a4:e7:2d:52:9c:e3:dc:b3:c4:df:ae:03:82:
         bd:97:5b:c5:1d:ee:46:09:7e:64:da:50:88:e0:bf:27:9e:a4:
         db:2f:48:32:b2:cc:8c:72:c9:92:8f:67:1c:4a:aa:6d:1c:e3:
         f9:97:7c:98:6b:b0:ba:d0:86:6b:7b:16:a8:a3:ed:03:45:4a:
         e2:ab:9c:60:0d:87:bc:f8:5e:ed:91:0f:bc:82:74:c4:52:c8:
         35:90:d8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 05:50:07 2024 by rpki-client on console-ams.rpki-client.org