Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa
File:                     5259d6e8-587f-3939-8be3-016d945818ce.roa (raw, json)
Hash identifier:          BNvER6w1yIveP5J8OG/v4GAP8XsycL8rEu+wg61hUOU=
Subject key identifier:   82:E0:BB:13:02:D9:6A:FC:9A:58:92:48:72:8E:15:EA:39:37:E8:DD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584742BB564C95F3CEDF811C2100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     27630
IP address blocks:        140.174.128.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:56:4c:95:f3:ce:df:81:1c:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=02ff7c4c-6e7b-4416-b5c4-78907e49afad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:91:40:8e:11:d5:8d:05:ae:51:37:d1:d2:
                    e7:d4:9f:e2:cd:3b:de:73:ef:e4:8e:4c:e8:02:dc:
                    df:73:32:3b:03:87:8c:26:cf:47:ce:ba:c1:6e:f6:
                    25:98:69:8b:41:1e:ae:64:c9:e7:59:28:b9:d0:a7:
                    7a:e6:25:75:03:95:ca:dd:75:5b:ac:7a:ce:86:64:
                    96:0d:0b:a0:eb:66:be:ea:d5:ca:f2:8c:36:c0:3d:
                    bf:e4:03:0d:c2:14:18:5e:8b:56:2b:6f:b4:77:27:
                    2f:a7:54:26:dc:c1:49:26:73:7b:71:2d:b9:9c:1f:
                    b0:36:d9:73:6c:fb:61:45:66:0f:0c:59:d9:08:1b:
                    c2:e9:b4:38:e1:16:31:b8:bf:2b:e0:11:23:9c:8f:
                    e2:1e:30:00:83:60:e0:c3:63:03:17:0c:25:48:6a:
                    10:f2:d7:05:73:d8:3c:cb:f9:00:81:cc:92:66:b4:
                    74:e3:55:5d:94:e5:c4:31:57:d2:bb:bb:eb:5a:3c:
                    63:3b:06:53:ca:c1:a5:e1:63:1e:0b:d6:6a:37:ba:
                    8e:05:fb:f3:6e:c0:0d:b5:83:ab:7c:95:fd:2f:c1:
                    98:24:f6:93:00:e3:73:dd:af:e1:2b:d5:4b:2c:0c:
                    9a:94:ca:d1:f9:c1:43:71:41:41:05:92:72:a2:76:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E0:BB:13:02:D9:6A:FC:9A:58:92:48:72:8E:15:EA:39:37:E8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5259d6e8-587f-3939-8be3-016d945818ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:53:77:02:66:d6:32:40:96:d3:3f:5f:e0:5b:c1:42:8b:3d:
         40:fd:ef:df:61:48:1f:31:f0:21:40:e2:3c:d6:e2:37:39:b1:
         bf:59:4a:3f:56:30:0a:f5:e2:7a:05:50:f4:fd:a8:a2:bd:a1:
         9a:4a:3d:1c:cc:d1:4f:bb:82:de:7b:fa:2a:5a:d7:dc:84:0c:
         43:56:75:0d:12:f6:af:51:f4:77:c7:81:28:d9:da:81:2d:56:
         c1:dd:6f:5d:ac:fa:98:0b:ce:db:4d:7d:82:10:67:da:42:81:
         17:e6:83:88:fe:8d:ac:ac:8d:18:1e:2b:7d:3a:51:b6:30:31:
         75:2b:77:1f:4a:22:c3:fb:81:61:4d:8a:1a:41:f9:4d:d7:0d:
         f4:4b:89:47:c3:7a:66:74:34:3d:4f:f7:41:fa:a9:02:ae:36:
         9a:65:29:8c:c6:81:34:f6:4a:31:b8:d3:8a:2f:07:cd:49:be:
         62:71:d4:de:fa:2c:a1:0f:ae:3a:1f:df:a7:82:f2:c0:9f:27:
         d8:57:6a:37:18:46:b2:ac:d9:9b:b3:8b:19:ae:87:e9:b4:7c:
         7e:63:4c:86:a9:43:5c:60:20:0a:f1:12:c8:ef:a0:22:cb:42:
         1b:a6:9a:1d:92:0b:42:22:0c:e9:3d:ee:14:61:80:cc:d2:aa:
         2f:01:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:11 2024 by rpki-client on console-ams.rpki-client.org