Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa
File:                     2cf973ac-9292-3942-9252-f179184447a4.roa (raw, json)
Hash identifier:          u2Gi6ZGdZyQsDth1Fu0swleH5F0V1nEoE1VH6VGc+04=
Subject key identifier:   E4:DF:F1:C2:6B:0D:DF:1E:1E:76:57:34:47:B6:C7:76:5D:FA:7A:AD
Certificate issuer:       /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
Certificate serial:       010D0C9F43285847D0D92AF81C305655D0DA52B0
Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa
Signing time:             Fri 08 Nov 2024 22:45:39 +0000
ROA not before:           Fri 08 Nov 2024 22:45:39 +0000
ROA not after:            Thu 06 Feb 2025 22:45:39 +0000
asID:                     1002
IP address blocks:        165.140.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d0:d9:2a:f8:1c:30:56:55:d0:da:52:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50
        Validity
            Not Before: Nov  8 22:45:39 2024 GMT
            Not After : Feb  6 22:45:39 2025 GMT
        Subject: CN=66447123-c18a-4dfd-b563-315109bac0db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:38:a4:17:a8:b3:55:75:de:6e:0d:d1:b1:
                    da:eb:dd:11:72:15:68:e3:7b:1b:df:66:9a:1c:d6:
                    79:7f:cf:ae:fa:e4:23:5b:14:d9:53:22:61:f1:bd:
                    e1:58:47:48:af:57:c7:c8:07:01:b4:26:88:24:ff:
                    39:8a:c0:ab:7b:79:1b:5b:82:3b:f5:63:b7:82:80:
                    0b:61:e1:80:55:d3:f9:84:f9:76:14:ca:9b:6d:3a:
                    94:f0:0e:52:1e:81:ed:13:e3:04:87:9e:9f:b0:38:
                    ac:00:3c:bf:ed:0f:a9:d1:49:68:08:5e:10:2a:82:
                    a8:8c:fc:56:16:24:db:6a:3a:88:05:ed:bc:82:8f:
                    ee:c6:b6:75:55:e2:33:e4:a4:62:a7:5a:a6:de:db:
                    28:79:b9:07:74:15:d8:95:9b:2c:7d:48:4d:ae:b4:
                    2d:cb:80:93:97:5e:16:a9:c7:48:30:0e:dd:89:c0:
                    9f:59:ad:f9:85:fa:1c:c1:57:39:3d:a3:1d:17:12:
                    a5:8b:35:e3:98:cc:4d:96:b3:05:ac:5e:cc:95:32:
                    c8:fe:e5:bc:6d:f6:9e:f2:0c:be:b7:c4:ae:83:40:
                    bf:8e:67:dd:8b:a6:36:43:14:86:1b:96:1c:b7:4b:
                    81:4c:2f:63:99:15:42:d3:3f:94:df:ec:80:3b:04:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DF:F1:C2:6B:0D:DF:1E:1E:76:57:34:47:B6:C7:76:5D:FA:7A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl

            X509v3 Authority Key Identifier:
                keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:10:8f:9a:9e:8b:45:03:35:eb:e4:63:d6:c5:db:0d:07:f9:
         c9:30:c2:9f:c3:93:36:53:fd:87:ae:69:49:cf:2b:07:93:3d:
         97:53:fe:73:1b:cd:6f:52:b2:fd:2f:1f:b9:7f:4f:3c:13:76:
         2b:49:eb:7c:4a:9b:3d:07:f6:fe:35:78:0a:de:b6:88:18:4c:
         48:99:10:96:0f:f4:79:ca:a1:18:e8:48:2b:d8:79:82:2b:b6:
         c2:69:e5:3f:0d:61:0f:f4:16:e8:fa:7f:e3:65:57:79:e0:d8:
         bd:91:f7:4e:19:bf:77:24:4e:dd:9f:08:15:b3:cd:dc:26:5b:
         4c:bb:d5:76:c4:ca:48:87:64:f4:bc:d5:78:45:2e:31:56:8e:
         95:6e:df:b1:d9:cf:81:a8:80:e1:40:ac:c3:84:77:bc:75:85:
         db:ef:4d:05:a1:c0:c9:3f:5f:4c:54:fe:23:52:de:d5:15:51:
         e1:14:ec:9f:3a:74:97:c1:80:3c:72:4d:1e:95:70:94:ce:bd:
         bd:6f:21:d0:15:1f:98:90:61:84:d4:dc:df:e3:57:3e:96:f8:
         10:b2:f9:98:d6:65:6b:bb:34:92:15:19:1c:39:10:ed:18:9d:
         5e:c0:db:a8:2c:d2:23:1d:17:44:b6:8c:e1:90:51:44:84:a2:
         88:50:6e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:00:45 2024 by rpki-client on console-fra.rpki-client.org