Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa
File:                     b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa (raw, json)
Hash identifier:          CJFwlTeoq/s9+M4R5yHN9LFsowxzRl8vMVpYIbYTBUo=
Subject key identifier:   EF:A2:E1:C0:9F:04:2A:1C:3D:E1:81:F9:58:68:58:34:A4:2F:24:85
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F432858477230F5EE2A32034957DD8100
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa
Signing time:             Sun 06 Oct 2024 01:00:31 +0000
ROA not before:           Sun 06 Oct 2024 01:00:31 +0000
ROA not after:            Sat 04 Jan 2025 02:00:31 +0000
asID:                     40676
IP address blocks:        140.174.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:72:30:f5:ee:2a:32:03:49:57:dd:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct  6 01:00:31 2024 GMT
            Not After : Jan  4 02:00:31 2025 GMT
        Subject: CN=190a7c81-24fd-4d68-b248-8723d988bc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:03:08:dc:45:41:6c:07:aa:ae:3e:d6:79:91:
                    5d:09:08:3b:08:25:d0:c6:a4:eb:b5:dd:14:3c:90:
                    10:5a:02:63:aa:fa:14:29:bd:78:19:4f:d9:28:97:
                    0a:90:e9:7d:aa:c7:46:ed:1f:cd:79:86:44:95:16:
                    b0:38:00:16:4d:08:a0:9b:ef:5e:f5:03:9f:c0:21:
                    68:13:f2:44:e6:5b:bf:91:9c:ba:07:0f:cc:da:52:
                    1d:e2:75:98:99:d1:d5:ae:e3:a8:f4:a3:b6:dd:0a:
                    bb:49:c7:71:ed:56:74:4b:3d:f3:0b:56:28:20:9b:
                    5a:d4:ac:40:85:72:41:89:ae:ca:89:39:05:ce:82:
                    6e:85:f6:7f:68:59:87:5e:ef:d9:c8:96:04:19:e7:
                    94:81:a9:7f:0e:7f:c1:12:fe:6b:91:29:9b:07:9a:
                    45:e6:02:a1:75:c0:9d:0b:cd:0e:76:1a:c5:51:2a:
                    dd:b5:36:3f:e3:ee:fc:61:b0:84:05:88:d3:d5:01:
                    6e:ca:21:b6:eb:32:b6:2e:81:64:eb:2d:fe:c1:91:
                    2b:af:59:df:1b:9d:d8:62:e6:08:53:a0:70:cc:0c:
                    71:0d:d3:35:4b:7a:bb:8b:33:63:f0:d5:74:03:72:
                    54:00:7e:f0:99:00:0f:13:b6:27:12:4c:bc:0e:c4:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:E1:C0:9F:04:2A:1C:3D:E1:81:F9:58:68:58:34:A4:2F:24:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b8ccb161-2f17-3ef5-92fe-69d158992fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.174.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:f4:5d:b1:c0:a3:d1:c1:c0:94:5f:b8:0a:6f:c2:72:3b:e1:
         94:b7:7e:54:2d:eb:76:8c:2b:a4:68:5c:d5:dd:a3:23:37:00:
         f5:5e:be:8e:77:49:97:84:0f:cf:c4:3c:fd:5d:7e:af:a1:eb:
         9a:e9:46:60:5b:c6:65:c5:34:17:0c:bd:6c:da:2b:36:03:48:
         09:2c:86:e5:73:bc:7e:e9:9e:db:bc:9e:9a:07:6a:9c:fa:e9:
         e7:36:3f:84:91:a3:2b:97:c2:2f:a9:f1:8e:7b:db:9e:92:46:
         75:76:80:31:51:21:4a:b4:fe:77:b1:ae:32:ed:87:e9:df:4b:
         4f:e4:38:22:ff:64:1f:ce:44:42:8b:ee:7c:34:ed:9a:7e:3a:
         66:0f:1a:0e:bf:f9:78:86:e0:ae:59:c0:13:0b:59:97:04:ac:
         94:1a:5d:f5:4e:ca:ee:68:1d:43:d8:30:2b:73:a5:b6:05:4e:
         02:ef:f0:42:59:ca:c1:cb:d2:b5:4b:f3:3b:d9:d4:70:ec:7d:
         0a:6b:4c:42:83:c6:50:08:4c:28:81:45:87:18:ee:9d:3f:2b:
         5e:52:0e:f6:97:8d:5c:cf:eb:7a:22:05:1a:ab:3e:83:de:5f:
         0d:9d:34:bc:a0:94:72:7d:55:bb:d9:5f:90:1c:a8:6b:9a:f0:
         a9:74:df:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:15:17 2024 by rpki-client on console-ams.rpki-client.org