Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa
File:                     a875ea6f-39a1-317d-a177-865f8b0ed48a.roa (raw, json)
Hash identifier:          Io/+e9YT/t005vDQb4dxx96F53pQrwQofoajsMSSvi4=
Subject key identifier:   B1:F2:8A:E5:AB:59:E5:FE:B1:2D:88:B8:DF:6B:DC:98:A5:19:E8:21
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858477794A0883E6CC977E1D7AEA0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa
Signing time:             Mon 07 Oct 2024 23:20:37 +0000
ROA not before:           Mon 07 Oct 2024 23:20:37 +0000
ROA not after:            Mon 06 Jan 2025 00:20:37 +0000
asID:                     215595
IP address blocks:        140.174.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:77:94:a0:88:3e:6c:c9:77:e1:d7:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  7 23:20:37 2024 GMT
            Not After : Jan  6 00:20:37 2025 GMT
        Subject: CN=e68267f8-50fd-4f28-8423-2bd72641bfb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a6:fb:16:33:49:56:3d:64:c1:6d:76:23:fb:
                    83:59:10:cb:36:90:2f:a0:97:72:7f:df:cf:36:e1:
                    41:26:17:7a:e3:37:9c:fe:b9:97:2d:71:db:13:2c:
                    62:f6:81:dd:f0:e9:30:af:62:e6:6c:20:36:e3:89:
                    23:8f:7a:1e:54:6b:49:a8:65:6f:7e:23:48:6b:c7:
                    9a:34:dd:1b:db:bf:97:d4:fd:bf:6c:fd:15:18:4f:
                    92:c2:81:fd:87:82:b2:91:3a:a7:74:6f:df:1b:65:
                    94:93:bc:70:46:60:36:dc:fa:b4:b4:86:71:7f:52:
                    4c:8f:18:61:ed:42:0a:f3:d8:c1:01:20:21:6a:d2:
                    4b:d2:c8:f3:af:ae:4d:29:af:de:dd:cd:0a:99:0f:
                    89:f4:99:52:e5:d3:dc:8d:3b:ae:d5:09:15:84:f2:
                    1a:5d:82:d7:31:f0:df:a4:da:3e:90:6d:51:ef:43:
                    27:e5:65:26:d1:8f:ef:da:7f:04:a5:fe:b4:fd:3f:
                    ee:b2:6f:a4:e0:f8:7f:29:da:d0:47:62:fe:5d:53:
                    f8:16:52:3c:be:4d:a3:af:6d:f3:1f:84:c8:d1:2a:
                    e0:e8:10:81:72:be:14:a2:8b:4a:67:50:66:75:08:
                    aa:3f:53:47:84:29:59:80:19:be:db:a2:00:e1:44:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F2:8A:E5:AB:59:E5:FE:B1:2D:88:B8:DF:6B:DC:98:A5:19:E8:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:9d:0a:df:e3:80:f7:3c:f3:c9:20:ad:3e:5f:6a:2a:b1:
         9e:63:54:a9:b7:17:21:1a:1d:d6:0b:31:fe:b2:ab:8f:40:c0:
         68:70:ce:02:7b:3d:f7:5c:1f:08:a9:5b:92:02:ee:e2:68:47:
         93:53:b0:c0:8c:70:93:fd:aa:35:f4:fb:29:04:14:75:e8:85:
         c3:d9:82:b4:f9:32:d6:f5:96:f5:71:26:6f:a0:d6:21:fa:bb:
         07:1d:06:f5:fc:36:36:73:62:ab:1e:0c:52:a1:de:26:f6:59:
         39:65:58:f6:70:fa:28:5d:a9:65:df:54:82:18:a7:60:64:da:
         26:11:3b:a3:49:ad:66:55:97:ed:e4:87:77:d2:6a:38:1b:49:
         58:e9:49:6c:a9:90:53:f4:07:99:b7:46:2b:32:af:4c:52:d0:
         83:9b:fc:8f:93:c5:57:96:81:53:19:fb:0b:fd:29:6a:7a:b6:
         35:f7:04:c5:6c:b0:5b:cd:18:b5:8a:63:66:f9:48:36:f5:c2:
         39:62:19:bd:9a:a0:6c:c4:e8:a8:bb:77:e8:e0:fc:b3:fa:02:
         ae:34:a2:68:4b:6e:ec:5b:4d:43:85:78:48:f0:3b:08:cd:84:
         8c:aa:ff:23:f9:ab:ed:c8:e4:c1:e1:ce:60:4b:9c:d4:80:82:
         a9:07:85:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:29:05 2024 by rpki-client on console-fra.rpki-client.org