Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
File:                     5c55b5af-970c-3f95-a381-4d9948e52241.roa (raw, json)
Hash identifier:          oB5gkO32PxEF3napF32yDJHlEK1kchoKCTlvgxy/FYc=
Subject key identifier:   E1:DE:16:2A:FB:5C:15:05:D3:A3:0B:89:F8:92:E9:0D:01:23:A9:FE
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F43285845A6F36F6D2A2E6FCFEF954180
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa
Signing time:             Wed 24 Apr 2024 13:00:33 +0000
ROA not before:           Wed 24 Apr 2024 13:00:33 +0000
ROA not after:            Tue 23 Jul 2024 13:00:33 +0000
asID:                     399145
IP address blocks:        140.174.19.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 May 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:a6:f3:6f:6d:2a:2e:6f:cf:ef:95:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 24 13:00:33 2024 GMT
            Not After : Jul 23 13:00:33 2024 GMT
        Subject: CN=b34542d4-e06a-44a9-ace0-6db8eb30a621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:31:41:e8:5d:62:9c:a9:dc:6d:df:34:50:d9:
                    09:1c:7a:3f:35:8c:d2:79:db:97:c8:78:f6:2f:53:
                    b8:ba:61:6c:9e:85:0d:3d:b5:52:eb:05:b6:4c:36:
                    1b:9d:b9:67:e3:bc:42:0d:f8:65:a8:08:2c:f3:88:
                    66:f7:7c:c3:e2:24:b4:f7:51:2f:f3:22:85:4e:a3:
                    b3:6d:ae:1a:25:eb:39:45:e7:f9:bd:f6:31:af:10:
                    da:e7:0f:0a:91:0e:58:10:f8:04:0d:ed:a0:0d:1d:
                    b6:7f:1d:b8:49:bc:86:00:74:e2:34:ec:6b:cf:65:
                    eb:5d:b6:06:c2:6c:cd:42:ae:54:1f:e1:73:f6:0d:
                    e3:27:16:cc:82:4a:0c:8d:1e:fb:e3:05:0f:2c:82:
                    8c:06:ac:d9:cc:db:b5:a6:b6:46:2d:c5:93:31:62:
                    c5:79:50:3e:c5:70:35:07:19:3c:dc:4c:70:f8:37:
                    76:2d:65:bd:e3:13:19:59:20:6e:31:54:8a:7d:3b:
                    70:28:7b:07:e6:ec:0d:e6:fb:3d:f7:17:91:0c:9f:
                    47:2e:84:43:a0:ad:9c:6b:fa:04:1a:a9:a7:06:4f:
                    5d:0c:64:54:dc:e4:80:d8:d6:a7:55:7d:c9:cd:bd:
                    4d:fa:73:b6:3d:16:d8:8a:05:ab:60:a7:35:ca:a1:
                    3c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DE:16:2A:FB:5C:15:05:D3:A3:0B:89:F8:92:E9:0D:01:23:A9:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c55b5af-970c-3f95-a381-4d9948e52241.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.19.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:f3:87:a4:36:fe:72:01:3d:59:a4:4d:32:cf:53:84:75:8a:
         0e:e6:99:0d:32:6f:5a:5b:ec:e7:a7:fa:d0:18:0b:c4:64:e5:
         7e:07:3d:55:18:c3:38:c6:bc:fc:04:d7:ed:96:82:18:bc:96:
         51:11:4c:40:3f:40:52:37:c5:69:2c:b1:86:80:a8:eb:e1:ec:
         4f:67:26:14:f3:e6:a4:47:6c:0f:59:f9:89:2f:df:d7:9c:c7:
         5d:01:75:4e:0f:01:b7:98:21:3b:b0:d9:32:8b:c6:5c:18:da:
         96:44:98:c3:bb:54:96:98:13:84:ce:c7:1d:ff:a4:94:9e:a9:
         c3:60:28:8a:11:c8:0c:e8:b5:89:39:a8:70:87:4f:91:a3:50:
         28:e5:f4:3c:bc:e3:73:cd:d0:ab:be:18:6d:bf:18:78:b9:98:
         c4:39:7f:15:c1:64:f6:18:fe:cf:6b:d2:8d:50:58:5a:4d:c1:
         c7:3b:c7:84:37:c8:9e:fe:ef:00:29:77:df:81:ef:21:c1:55:
         2e:99:28:5d:49:1d:3d:0c:43:86:88:e0:15:e6:e2:aa:f7:3e:
         97:36:81:61:87:d0:09:07:03:55:e5:44:3e:fc:7b:19:3f:85:
         bf:29:c0:f9:fd:d4:12:66:6d:e5:02:bc:6b:ed:7b:df:4a:29:
         ec:ed:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 02:07:03 2024 by rpki-client on console-fra.rpki-client.org