Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1d903-15c2-3c1c-9f16-df4a7c3cee28.roa
File:                     64a1d903-15c2-3c1c-9f16-df4a7c3cee28.roa (raw, json)
Hash identifier:          vhlVoYu36ikwciysk94/XQlUbe0xlepLo8BblOI2fag=
Subject key identifier:   BF:91:AE:17:9D:65:36:54:5D:6E:3A:AC:42:AB:BF:6D:B1:53:78:B1
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285847CA3F781C0C87C7442D6C5320
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1d903-15c2-3c1c-9f16-df4a7c3cee28.roa
Signing time:             Wed 06 Nov 2024 14:00:41 +0000
ROA not before:           Wed 06 Nov 2024 14:00:41 +0000
ROA not after:            Tue 04 Feb 2025 14:00:41 +0000
asID:                     14340
IP address blocks:        140.190.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ca:3f:78:1c:0c:87:c7:44:2d:6c:53:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Nov  6 14:00:41 2024 GMT
            Not After : Feb  4 14:00:41 2025 GMT
        Subject: CN=b3948150-1889-4281-ae45-a2c73f8f730c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:de:97:55:cd:26:ed:1c:79:74:84:cd:a7:
                    fd:ed:7f:07:f9:0c:bd:57:ce:38:b0:fc:83:5e:63:
                    38:55:87:ca:80:f8:aa:e7:81:b0:57:41:9c:96:5f:
                    81:9a:c4:7d:08:c1:be:1a:6a:bb:d0:24:a5:93:c6:
                    a2:94:bf:7e:f1:86:d4:0e:12:f2:a1:ec:4e:4a:c3:
                    5b:c2:e7:a1:20:5c:6c:db:2a:9b:ba:b8:3c:31:a3:
                    54:fe:27:c2:a9:24:7d:2b:82:7e:63:a4:77:45:d2:
                    9b:f1:72:30:d8:1b:34:02:71:23:f3:db:1c:0a:cc:
                    ec:83:79:fa:fb:4c:b2:88:7d:5e:4b:83:10:26:24:
                    97:a0:4e:53:a7:2e:08:d7:1a:a3:e7:47:a8:dc:a0:
                    d6:b5:aa:16:76:02:da:dc:67:97:a5:95:45:f8:12:
                    30:66:d9:33:61:d7:91:7c:c6:a6:00:b7:c8:87:ac:
                    22:01:f0:84:24:b0:c3:02:a8:71:3a:01:8b:52:9a:
                    76:83:4e:12:bd:d8:8a:50:67:44:cc:31:71:3e:14:
                    5c:2f:2d:fb:7a:fc:9e:00:87:94:29:a3:c7:72:0e:
                    49:e3:b2:77:7c:4f:a4:2e:a8:c1:cc:10:4d:43:a1:
                    6e:64:ed:bd:60:15:2d:3e:c9:18:19:77:92:2f:de:
                    ea:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:AE:17:9D:65:36:54:5D:6E:3A:AC:42:AB:BF:6D:B1:53:78:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/64a1d903-15c2-3c1c-9f16-df4a7c3cee28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.190.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:03:16:8f:b8:e2:a2:11:89:c3:47:e1:c5:8b:fd:2d:13:21:
         04:27:e3:d4:fc:79:da:0f:3a:7d:b1:34:c5:34:6c:1a:c1:d7:
         1e:4a:73:aa:c5:29:c8:a2:e0:e1:0e:fd:9a:04:89:de:1c:7f:
         72:ca:30:01:4c:db:73:cd:22:f5:89:5e:ed:e8:06:fb:ae:6e:
         3b:f6:75:17:54:91:8c:75:9d:a4:85:b4:c4:d0:23:44:bb:ee:
         50:99:44:9a:05:75:f7:55:83:c4:8d:ad:5a:06:d9:31:c3:e4:
         44:21:e8:b0:ec:d6:8a:50:9d:da:ae:82:c9:e4:db:70:bc:9a:
         92:6e:67:bc:5b:7f:b4:f2:16:10:74:6b:03:b3:9c:3d:76:9f:
         25:48:6f:9d:88:91:18:ba:e1:00:9e:79:b3:ed:60:43:c4:76:
         75:56:02:2f:5a:12:14:ce:77:88:91:f8:d0:d6:53:4c:86:8a:
         99:e4:2d:ad:11:f7:ca:10:9b:47:6e:cb:85:e3:d3:20:23:53:
         88:b0:28:45:ec:95:50:52:cf:9a:76:c3:49:89:87:7e:d0:d6:
         61:2b:8a:74:4f:8d:d0:a1:c3:fc:48:29:b7:c0:de:be:9f:d4:
         3b:13:55:a7:0d:96:d0:35:1c:83:1e:f6:67:bd:6a:73:c7:3d:
         33:83:d8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:20:50 2024 by rpki-client on console-fra.rpki-client.org