Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa
File:                     d38b303a-920e-3f94-8e2a-efd3d1740358.roa (raw, json)
Hash identifier:          8XscDp3ShCc5OQBBGv2EqXHUFlUlPkJ5ezVbXg0yx7c=
Subject key identifier:   29:68:CC:B1:36:8F:7E:18:21:4F:0E:79:D1:0A:5A:9D:E3:FB:E5:20
Certificate issuer:       /CN=17e4ef75-3d46-4caf-8049-ad96976a0262
Certificate serial:       010D0C9F4328584776610213BF36195CD834EB00
Authority key identifier: 32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa
Signing time:             Mon 07 Oct 2024 13:00:40 +0000
ROA not before:           Mon 07 Oct 2024 13:00:40 +0000
ROA not after:            Sun 05 Jan 2025 14:00:40 +0000
asID:                     400062
IP address blocks:        165.140.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:76:61:02:13:bf:36:19:5c:d8:34:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e4ef75-3d46-4caf-8049-ad96976a0262
        Validity
            Not Before: Oct  7 13:00:40 2024 GMT
            Not After : Jan  5 14:00:40 2025 GMT
        Subject: CN=c7f5e471-9bd6-4fdb-84df-080f617fe209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1d:ea:87:9e:d5:1e:b7:f4:e5:ad:49:45:c2:
                    57:65:03:74:fb:70:01:8c:fd:4c:fd:ff:6c:02:83:
                    68:73:f0:41:a1:81:de:5c:2a:c9:c5:39:73:33:c8:
                    0b:19:85:fb:27:31:d8:e0:f8:ee:84:82:37:62:6f:
                    31:0f:c0:8a:03:10:fd:1d:02:0b:81:8f:06:cd:a3:
                    57:7a:9c:39:e4:af:24:f9:2f:00:69:60:77:29:47:
                    ff:99:58:0e:73:1c:21:01:1d:ce:3b:14:79:6e:31:
                    f7:ed:e3:32:b5:87:76:64:24:ce:6d:23:0a:6d:3e:
                    b2:24:b7:60:18:e6:5c:9c:f7:ee:c3:74:5c:75:8c:
                    3d:d9:cb:88:71:75:93:be:c3:fa:20:2b:d1:63:11:
                    53:e7:8e:15:c5:4a:79:7c:fb:8c:95:15:61:8d:92:
                    6e:69:b2:55:23:29:ca:59:3e:77:52:c2:fe:80:f1:
                    e9:33:fb:3d:74:ca:30:0f:e5:54:67:2b:7d:7f:ed:
                    e4:2f:8f:5d:ec:68:08:76:8d:9a:aa:1b:1a:6a:f8:
                    dd:12:99:c2:ff:26:52:fd:83:5d:c4:10:8b:14:6c:
                    cd:ad:67:20:dd:a5:18:7b:bc:a4:16:72:a4:9c:ee:
                    30:45:03:45:89:e7:7f:c1:17:fa:53:1a:5a:f7:5f:
                    69:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:68:CC:B1:36:8F:7E:18:21:4F:0E:79:D1:0A:5A:9D:E3:FB:E5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/d38b303a-920e-3f94-8e2a-efd3d1740358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262/17e4ef75-3d46-4caf-8049-ad96976a0262.crl

            X509v3 Authority Key Identifier:
                keyid:32:C4:FB:81:42:25:F1:FC:F9:36:0D:0A:80:E1:39:98:2F:BF:F1:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/17e4ef75-3d46-4caf-8049-ad96976a0262.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:47:91:b4:f7:6f:93:c9:bd:ea:9d:53:c7:ef:3a:8f:d1:92:
         3d:b4:9c:8f:0c:dd:58:eb:c0:47:86:72:66:a3:4f:61:3b:d0:
         38:21:d9:62:1d:6b:4f:55:8b:69:01:b9:ea:34:bc:22:d3:01:
         92:99:e7:2b:b6:55:6d:62:cf:a6:fe:5a:aa:32:46:36:27:72:
         ef:66:0c:52:58:f4:f7:ba:ed:58:f0:6a:69:02:4c:76:be:4a:
         2a:e4:9d:36:87:22:f9:8f:ee:7c:40:b8:e6:30:d6:37:bd:ab:
         49:c0:fd:88:94:2d:84:e1:39:46:b0:e7:d0:bf:8d:66:08:da:
         0f:f4:94:86:ff:eb:fe:2f:7f:d8:c7:6b:5d:56:fa:fe:27:00:
         aa:30:1f:6b:fc:80:58:86:85:58:ae:b8:59:0e:3f:a0:44:59:
         91:e1:35:82:be:1f:2f:d9:8e:61:df:4e:72:17:e7:26:c0:f4:
         13:eb:c1:9c:a7:7c:ed:3c:3a:35:38:2f:2c:72:6a:c6:e3:6e:
         b5:5c:ef:63:28:f0:86:93:02:25:fc:60:e9:ef:26:22:a3:87:
         38:e1:8d:e1:42:ce:04:96:56:99:21:9f:77:ef:a3:b2:58:a5:
         60:c8:53:da:55:4c:06:25:07:41:e6:ba:c8:02:e7:df:ba:43:
         1c:67:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:35:13 2024 by rpki-client on console-fra.rpki-client.org