Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
File:                     fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa (raw, json)
Hash identifier:          Y3Yl2hYus5QuAic08tFapqzr2GA/1i8+KzUv+LW4vzQ=
Subject key identifier:   93:C2:FE:C8:17:D9:0C:AA:B7:5E:C4:26:79:2B:C9:A8:8F:CE:BA:2A
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584754E0DAD8B6AE2ABE5B1343C0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa
Signing time:             Wed 25 Sep 2024 13:00:41 +0000
ROA not before:           Wed 25 Sep 2024 13:00:41 +0000
ROA not after:            Tue 24 Dec 2024 14:00:41 +0000
asID:                     7018
IP address blocks:        141.140.65.0/24 maxlen: 24
                          141.140.68.0/24 maxlen: 24
                          141.140.71.0/24 maxlen: 24
                          141.140.74.0/24 maxlen: 24
                          141.140.77.0/24 maxlen: 24
                          141.140.80.0/24 maxlen: 24
                          141.140.83.0/24 maxlen: 24
                          141.140.86.0/24 maxlen: 24
                          141.140.89.0/24 maxlen: 24
                          141.140.92.0/24 maxlen: 24
                          141.140.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:54:e0:da:d8:b6:ae:2a:be:5b:13:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Sep 25 13:00:41 2024 GMT
            Not After : Dec 24 14:00:41 2024 GMT
        Subject: CN=9ebf3c37-e3c4-40f0-9762-2812cf8a7d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f0:9b:65:69:0c:7f:37:7a:68:fb:f5:53:96:
                    d2:88:db:7b:45:87:20:7f:1b:0d:43:27:f6:7e:65:
                    e1:7b:fe:fd:71:37:f4:9e:d7:72:9a:99:00:f6:66:
                    fc:31:4a:cd:1a:6b:32:03:11:ea:d0:0e:d9:de:b9:
                    56:da:38:fd:1c:78:c1:8a:16:a8:ec:c8:69:54:0b:
                    50:8d:12:71:c9:e3:6d:99:87:4a:64:0d:69:e0:e3:
                    87:d6:fc:43:00:2f:12:8a:68:f0:5f:da:9e:bc:b0:
                    f0:b4:ca:d3:2e:d3:2d:05:57:a5:ce:65:5f:66:df:
                    31:a3:41:35:c5:c8:8d:05:eb:69:28:fc:46:28:28:
                    62:8a:9c:73:4f:24:3d:63:0f:2e:37:96:b2:35:6a:
                    1e:c5:73:3b:c3:ba:91:93:c6:19:22:64:83:1c:6e:
                    18:56:76:35:d9:cb:57:83:e3:86:ae:3d:37:df:d9:
                    b6:b6:f8:96:b8:82:a8:c9:03:24:71:e1:0c:61:ce:
                    84:69:7b:ae:3f:68:69:3b:00:fc:a4:94:ec:b2:de:
                    81:bb:48:b4:6d:7a:5f:5e:33:8b:c2:54:fc:83:25:
                    a1:49:af:0b:75:1a:a6:b3:61:8d:83:b3:f6:19:95:
                    f8:a1:3a:af:2e:a2:a8:11:03:4f:75:ff:69:6a:83:
                    e7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:FE:C8:17:D9:0C:AA:B7:5E:C4:26:79:2B:C9:A8:8F:CE:BA:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/fabfdb2c-1bc1-3011-93df-f915b6ccdd91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.65.0/24
                  141.140.68.0/24
                  141.140.71.0/24
                  141.140.74.0/24
                  141.140.77.0/24
                  141.140.80.0/24
                  141.140.83.0/24
                  141.140.86.0/24
                  141.140.89.0/24
                  141.140.92.0/24
                  141.140.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:51:f0:f2:6d:77:3f:1d:2c:1c:0e:9d:13:fc:97:5d:4e:
         1b:96:af:82:6f:71:ff:c8:35:3f:51:c6:8f:2b:54:70:32:03:
         b8:e6:d6:64:73:94:aa:cc:b8:c2:a3:ab:06:af:76:f5:63:ed:
         37:f1:b9:49:79:3c:03:7a:f2:e4:09:63:c9:9c:0e:0b:55:85:
         bc:a2:a5:bc:d0:29:d2:e7:ea:6b:eb:5e:34:48:2f:4d:cd:02:
         cc:13:04:3e:d5:c9:d8:61:a8:2b:37:3d:d7:7e:73:73:51:89:
         bc:c4:8b:bd:1b:29:5a:ee:69:2f:cf:63:95:c2:fb:12:8a:85:
         75:b9:28:1e:9c:9f:f2:07:fe:7c:7b:1e:dd:e5:65:9a:5f:64:
         7c:9c:83:16:b8:2f:21:e1:ad:19:a0:f5:f4:60:e0:d6:90:82:
         75:3c:cf:08:7d:88:da:ff:86:22:0f:70:d4:34:e8:e6:8c:d0:
         b3:70:94:91:fe:bc:a9:9a:59:f2:46:bf:76:88:38:e8:93:fc:
         40:dd:3d:94:bd:8f:83:f5:dd:b4:2c:42:1a:58:5c:73:2a:2a:
         81:85:55:11:d3:b7:fb:2f:78:a0:c3:f5:95:b0:f8:f0:ab:33:
         b7:7c:63:5d:53:37:72:eb:39:d0:8d:94:00:aa:31:a7:fa:50:
         63:ec:ac:dc
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEdU4NrYtq4qvlsTQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI0MDkyNTEzMDA0MVoXDTI0MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk
OWViZjNjMzctZTNjNC00MGYwLTk3NjItMjgxMmNmOGE3ZDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPCbZWkMfzd6aPv1U5bSiNt7RYcgfxsNQyf2
fmXhe/79cTf0ntdympkA9mb8MUrNGmsyAxHq0A7Z3rlW2jj9HHjBihao7MhpVAtQ
jRJxyeNtmYdKZA1p4OOH1vxDAC8SimjwX9qevLDwtMrTLtMtBVelzmVfZt8xo0E1
xciNBetpKPxGKChiipxzTyQ9Yw8uN5ayNWoexXM7w7qRk8YZImSDHG4YVnY12ctX
g+OGrj0339m2tviWuIKoyQMkceEMYc6EaXuuP2hpOwD8pJTsst6Bu0i0bXpfXjOL
wlT8gyWhSa8LdRqms2GNg7P2GZX4oTqvLqKoEQNPdf9paoPn4wIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFJPC/sgX2Qyqt17EJnkryaiPzroqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZmFiZmRiMmMtMWJjMS0z
MDExLTkzZGYtZjkxNWI2Y2NkZDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxBAwQA
jYxEAwQAjYxHAwQAjYxKAwQAjYxNAwQAjYxQAwQAjYxTAwQAjYxWAwQAjYxZAwQA
jYxcAwQAjYxfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGUaUfDybXc/HSwcDp0T/JddThuWr4Jvcf/INT9R
xo8rVHAyA7jm1mRzlKrMuMKjqwavdvVj7TfxuUl5PAN68uQJY8mcDgtVhbyipbzQ
KdLn6mvrXjRIL03NAswTBD7VydhhqCs3Pdd+c3NRibzEi70bKVruaS/PY5XC+xKK
hXW5KB6cn/IH/nx7Ht3lZZpfZHycgxa4LyHhrRmg9fRg4NaQgnU8zwh9iNr/hiIP
cNQ06OaM0LNwlJH+vKmaWfJGv3aIOOiT/EDdPZS9j4P13bQsQhpYXHMqKoGFVRHT
t/sveKDD9ZWw+PCrM7d8Y11TN3LrOdCNlACqMaf6UGPsrNw=
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:58:51 2024 by rpki-client on console-fra.rpki-client.org