Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
File:                     e4c840a6-7c44-37cd-8d84-325c36434df5.roa (raw, json)
Hash identifier:          R67LaGxaqiKi2IqnuT+JXL9xz4Ig/dmh58ELGthAH8U=
Subject key identifier:   27:9D:C4:D7:70:8D:80:35:01:0F:45:D5:FD:9B:54:93:40:76:E3:86
Certificate issuer:       /CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
Certificate serial:       010D0C9F432858478CB67CDFA11289CEBFDBA500
Authority key identifier: E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     395437
IP address blocks:        143.55.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:7c:df:a1:12:89:ce:bf:db:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40d03225-c5b6-47c4-9f4e-7de1d16d554f
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=88325020-0565-4e82-b4ba-6afb02492957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:80:d0:4f:b5:fa:78:b9:67:a3:4d:bb:0f:57:
                    57:1f:30:1d:67:67:98:74:cc:6e:ca:91:41:97:88:
                    26:0a:fb:2e:46:43:90:1a:55:0b:6c:3d:79:3b:b9:
                    98:a4:a3:08:b0:07:21:39:dc:2e:b9:d8:6f:ec:10:
                    fe:da:22:d8:97:e1:e0:63:8d:15:64:85:b5:4b:fb:
                    1f:92:2b:ad:77:16:3a:a4:65:b8:95:83:61:56:d5:
                    28:54:28:66:d3:1c:b0:10:1c:2d:0f:0d:a4:35:17:
                    22:62:86:1f:d1:b4:b0:0f:95:34:df:ac:4d:76:86:
                    e6:70:5b:77:86:2b:f4:75:53:fe:96:c2:8f:5e:34:
                    17:7d:9e:74:1a:ed:bc:96:9a:75:68:18:8e:b9:3f:
                    7d:f4:e9:7f:7d:c0:8f:2b:b3:1f:71:51:5e:ed:05:
                    bb:9e:e1:39:46:07:cf:4b:3f:ca:9b:08:44:51:06:
                    0e:7f:32:3b:9b:75:66:f0:e5:8d:29:4e:e1:41:53:
                    d0:01:26:10:d4:49:b5:1e:a0:a2:61:e3:df:b9:ed:
                    41:be:44:5a:0f:24:3a:dd:1d:52:a4:c9:6e:b4:0b:
                    2f:05:18:55:50:07:00:b7:30:91:55:9b:65:8b:ef:
                    a6:61:65:67:84:4e:40:87:02:d4:0b:db:ce:95:12:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9D:C4:D7:70:8D:80:35:01:0F:45:D5:FD:9B:54:93:40:76:E3:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/e4c840a6-7c44-37cd-8d84-325c36434df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f/40d03225-c5b6-47c4-9f4e-7de1d16d554f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:34:61:85:6A:D3:D5:51:DB:84:65:DD:A0:CD:36:3E:3F:E2:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/40d03225-c5b6-47c4-9f4e-7de1d16d554f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:ca:c2:dc:38:ee:f4:b2:62:d1:1e:8f:bd:22:91:ca:d9:aa:
         20:67:6f:ae:7a:97:4b:a9:51:d6:76:ef:7c:37:16:22:4a:8f:
         a4:4d:37:d6:33:2d:2c:aa:8d:33:eb:a6:a9:18:ad:20:29:c0:
         3e:b4:9d:ee:b7:83:49:01:6d:ac:32:21:18:b4:87:5c:9d:fc:
         7d:7a:82:40:54:17:3b:9b:f8:8a:44:d6:9c:8e:55:ee:76:d7:
         3a:8b:0c:2f:4f:f9:73:4e:a2:32:8a:32:90:66:97:41:5c:16:
         89:42:79:59:7f:d1:a3:b9:16:da:7c:66:6a:5c:f2:96:00:70:
         15:d7:3d:8d:fd:3d:d1:5c:4c:0c:7f:20:fb:1f:07:db:28:70:
         5d:1f:ae:c1:a1:c0:e0:40:10:a4:16:7b:96:90:ba:f1:93:19:
         7c:56:5a:bd:b6:5f:46:82:c1:c5:4b:64:02:16:61:fb:82:df:
         ed:4f:55:4e:0d:1d:95:5a:ed:bd:82:27:6c:bb:f3:46:13:c3:
         d3:28:58:8b:74:df:e1:8e:fb:be:7d:c3:ad:6c:11:17:79:de:
         04:94:08:19:47:ae:38:63:22:0b:17:c2:d0:0f:f6:94:f2:fa:
         c0:be:ae:24:fb:38:5c:fd:8a:b3:60:43:a5:39:df:9a:53:8b:
         6c:94:c3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:37:27 2024 by rpki-client on console-ams.rpki-client.org