Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
File:                     b4f0d40c-cad4-3a54-befa-79bac5244c89.roa (raw, json)
Hash identifier:          WOSi9FmHGI43vttJSW4fpxzRnkhNJhn3r/raqfMZmqg=
Subject key identifier:   78:FF:AB:9F:33:DB:0B:42:35:EB:57:95:2E:08:12:A4:0A:E4:FC:A2
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584500F564DAEDDE8FF9EDED4380
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa
Signing time:             Sun 25 Feb 2024 02:00:26 +0000
ROA not before:           Sun 25 Feb 2024 02:00:26 +0000
ROA not after:            Sat 25 May 2024 01:00:26 +0000
asID:                     4181
IP address blocks:        134.140.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:00:f5:64:da:ed:de:8f:f9:ed:ed:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 25 02:00:26 2024 GMT
            Not After : May 25 01:00:26 2024 GMT
        Subject: CN=3cf27baa-9dbf-44fd-a569-27621b948f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3f:5c:2c:b3:9d:cb:17:2e:56:18:35:c1:d1:
                    b4:6a:3a:43:92:99:ef:11:7c:84:14:0e:a9:c3:27:
                    1d:a4:86:74:26:41:d3:51:00:c6:71:f5:52:04:b5:
                    fa:84:e2:cf:de:bd:e3:7c:50:6b:e0:50:1f:e7:57:
                    6e:4f:6c:69:c8:02:66:1d:6c:2d:c1:27:47:63:66:
                    6c:23:24:55:d1:36:52:66:f7:b6:c0:bc:d4:2a:22:
                    eb:9b:98:01:dc:1d:42:89:cd:55:65:d5:26:ed:0f:
                    ac:c6:26:46:16:0b:27:6e:2a:6f:58:d6:27:cf:bc:
                    ba:da:3e:79:9d:9f:16:cb:6b:b9:63:3a:08:4b:a9:
                    a4:c9:7e:34:94:10:8b:54:48:1b:7d:ae:ea:76:45:
                    1a:4f:c8:da:f3:0f:e6:63:dc:50:8d:af:78:d1:c1:
                    9a:e2:9b:85:38:aa:d2:95:a6:e4:61:1c:f9:c8:a7:
                    dd:0e:09:fd:f7:82:aa:10:0c:91:ee:c2:1e:72:36:
                    e7:af:3b:ac:02:dc:24:b0:ab:4f:5c:f0:10:23:26:
                    eb:e5:da:40:38:3d:da:25:a1:bb:e3:b4:60:76:c8:
                    84:f3:da:5a:c4:d2:af:ed:10:e3:25:29:c0:a3:93:
                    1f:f7:24:66:06:17:32:07:43:fe:47:12:17:90:f1:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FF:AB:9F:33:DB:0B:42:35:EB:57:95:2E:08:12:A4:0A:E4:FC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/b4f0d40c-cad4-3a54-befa-79bac5244c89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.140.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a7:3e:55:b7:a0:2a:83:2a:2e:03:5e:88:75:33:3e:24:57:
         7f:c0:8e:5a:ac:e5:e2:c3:22:a6:a6:b2:62:52:a8:d9:9e:c3:
         28:e9:29:06:ef:7a:bc:f2:35:72:7f:21:1e:4d:49:f7:c1:70:
         ad:2e:48:1f:3c:58:b3:e5:24:1c:34:ff:02:f0:3c:8f:9d:c5:
         c1:30:67:00:9c:f0:a6:59:be:1a:54:b6:1c:9a:45:33:3a:76:
         73:38:0d:e1:2a:4a:67:c3:6e:60:12:8c:37:eb:b1:69:c1:b4:
         92:13:52:9b:ee:d8:26:bb:0b:c2:97:2b:90:d7:4f:0e:1f:7f:
         71:bd:d5:93:43:bd:02:6e:c7:9f:56:04:fb:a1:99:c1:ac:a5:
         60:06:19:5b:62:c8:fb:0f:e8:b6:8e:ef:03:b3:48:80:97:44:
         dd:45:4e:0a:d8:6f:4d:10:f4:49:39:df:52:8c:4b:72:97:74:
         b6:91:8c:13:7e:5b:26:1d:d0:c5:0d:37:3c:95:59:b7:50:dc:
         f1:a6:cd:fa:8b:5f:2d:1e:ed:bd:de:3e:ee:be:aa:14:d1:2b:
         79:e1:a2:33:6b:c4:c3:a9:09:73:08:de:9d:fe:82:b2:b4:2a:
         30:14:6e:7c:06:49:ef:27:b0:f9:77:4d:bf:cc:0f:87:95:8e:
         73:94:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 15:24:08 2024 by rpki-client on console-ams.rpki-client.org