Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1d8a119-b974-3122-81b6-ac6923075eac.roa
File:                     b1d8a119-b974-3122-81b6-ac6923075eac.roa (raw, json)
Hash identifier:          q7+SJTKSTmnm0dZUF+0My9ilW/ycPYaX0gW2OBnB79c=
Subject key identifier:   B8:C1:07:98:0C:2E:26:61:4F:9E:B1:5C:A1:25:22:10:3A:7B:DF:A8
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858417797BEFE4F51055BF2136C00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1d8a119-b974-3122-81b6-ac6923075eac.roa
Signing time:             Tue 10 Apr 2018 11:26:02 +0000
ROA not before:           Tue 10 Apr 2018 11:26:02 +0000
ROA not after:            Sun 09 Apr 2028 04:00:00 +0000
asID:                     40675
IP address blocks:        140.174.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:77:97:be:fe:4f:51:05:5b:f2:13:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Apr 10 11:26:02 2018 GMT
            Not After : Apr  9 04:00:00 2028 GMT
        Subject: CN=3a77270a-eeb9-4ac1-868b-db02fe09b1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:21:5f:86:ca:ed:81:ce:78:58:b8:fd:3f:
                    34:1c:e6:ad:6e:38:73:76:67:11:71:ef:ea:83:34:
                    6e:d4:fb:49:ba:e9:c8:97:8f:83:5b:3e:25:bd:8a:
                    a6:22:ba:1f:e4:d9:10:89:41:44:98:b8:b1:4e:87:
                    69:79:28:ac:1d:b6:91:f6:64:de:b2:95:34:e3:a4:
                    9e:a4:42:70:96:b2:7b:90:9e:68:8f:b7:11:1d:51:
                    a5:4a:5b:4f:cd:02:15:21:0f:11:12:d4:e4:98:fd:
                    3a:50:ef:4d:fe:ae:fa:3b:17:70:27:13:9b:58:1b:
                    a8:52:af:5a:19:3f:ff:cb:d9:da:16:ba:d9:68:83:
                    cc:61:c3:70:ec:12:ec:45:f0:ad:8e:b4:42:d5:a4:
                    6e:7d:0c:8c:9e:77:b9:56:ca:88:34:bb:15:44:d1:
                    fd:e1:6e:6e:10:94:9a:a8:15:58:2b:be:aa:e4:31:
                    c7:e9:64:37:45:57:2a:76:0c:3f:18:40:3a:02:c7:
                    95:5a:36:c3:e6:f8:60:7d:11:14:cc:9b:82:ed:cb:
                    b3:f5:34:f0:52:86:a0:0e:47:49:2a:18:9c:74:96:
                    55:1b:7c:b4:ae:46:1b:43:18:af:fa:b5:b0:b1:9b:
                    9f:37:b0:35:81:d7:ab:4f:91:0b:b2:cf:52:bf:bc:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C1:07:98:0C:2E:26:61:4F:9E:B1:5C:A1:25:22:10:3A:7B:DF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b1d8a119-b974-3122-81b6-ac6923075eac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:f1:e1:b3:92:c2:64:bf:cd:e3:c3:25:03:ac:f8:17:85:
         47:8c:cf:6f:cc:e7:5b:a7:e7:ed:02:8c:95:4d:10:4b:95:8b:
         ff:82:64:55:e6:a5:ca:f1:00:5f:46:07:09:52:35:1a:34:d7:
         55:23:15:fa:31:7f:79:3a:a1:24:75:83:8c:35:94:6e:ee:30:
         77:16:50:98:ce:41:09:d0:26:8d:18:bd:ab:0b:97:d2:80:4b:
         98:4a:12:dd:58:f8:09:c8:bc:8e:13:0f:7f:a7:8b:4e:44:38:
         38:a6:03:4b:76:61:74:18:53:d5:3c:83:00:bc:51:0b:52:cc:
         21:18:f5:a5:39:a3:98:f1:79:28:1b:fc:42:18:3b:3c:59:44:
         08:91:ee:16:32:01:d8:c7:ea:af:d4:b9:0c:61:2d:8c:a7:97:
         92:de:e2:6b:ac:73:26:be:13:5c:7a:a1:4a:32:2f:29:e2:00:
         39:80:e0:af:4d:01:85:03:2f:a7:43:89:3d:d6:e8:31:d7:96:
         2b:5a:05:40:ed:4e:af:25:13:1e:21:09:12:78:fa:40:21:c0:
         c0:aa:56:6b:07:f0:62:c3:8a:5c:48:2d:11:f7:9a:65:d2:56:
         62:6a:27:44:67:35:d2:81:5b:1a:b0:51:fc:e4:e1:fb:49:ac:
         be:95:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 02:47:22 2024 by rpki-client on console-ams.rpki-client.org