Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa
File:                     1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa (raw, json)
Hash identifier:          WQZQ0SKML0XifYJvQfcc9v8uStRa2q4ZQsazKMt56hc=
Subject key identifier:   24:C1:B2:2B:EC:20:D1:32:BC:54:D7:DE:62:34:E4:CA:6F:44:D2:DC
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584770CB9B248D63256DA9278200
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa
Signing time:             Sat 05 Oct 2024 13:00:42 +0000
ROA not before:           Sat 05 Oct 2024 13:00:42 +0000
ROA not after:            Fri 03 Jan 2025 14:00:42 +0000
asID:                     395382
IP address blocks:        40.143.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:70:cb:9b:24:8d:63:25:6d:a9:27:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Oct  5 13:00:42 2024 GMT
            Not After : Jan  3 14:00:42 2025 GMT
        Subject: CN=be23530d-21ed-4998-9b0a-08b961f44393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:01:d9:ab:e6:89:16:67:fa:c4:f2:46:f6:aa:
                    03:07:ee:34:25:c8:0c:b8:56:39:18:04:2f:ee:34:
                    0c:30:0d:61:d7:f3:7a:5f:72:09:1b:a1:14:d3:a3:
                    1e:84:90:93:a2:f1:70:8c:32:9e:93:fa:1c:4a:dd:
                    51:3e:fe:eb:bb:b7:57:32:27:cb:cf:f3:e5:79:44:
                    de:db:c9:61:0e:2e:21:00:39:2e:dd:68:2b:ff:5b:
                    e8:f4:e0:c8:46:ad:3a:24:ce:36:6f:5b:25:e6:df:
                    13:2b:dc:1a:a8:94:96:af:65:f2:fb:8d:a8:ab:ab:
                    c3:56:5d:c5:30:a7:56:71:92:ae:75:35:1e:57:03:
                    41:4f:37:4d:8c:c8:fc:9c:71:93:b4:e3:93:93:a7:
                    14:f4:64:c2:2e:85:8a:49:ee:df:dd:89:ac:63:80:
                    b8:d9:cb:d9:99:7e:b0:5c:37:1d:3e:0f:36:29:7b:
                    19:c3:e5:8f:20:a3:6d:1a:b2:3b:31:d8:2d:b0:20:
                    80:d2:a7:cf:46:16:e0:64:26:df:1d:8b:68:b2:0d:
                    d4:af:6f:a4:20:42:2e:c8:d1:2b:f4:51:db:52:ca:
                    c0:52:9d:16:33:44:2c:32:67:4a:e2:25:5c:bb:7b:
                    65:1c:ee:0e:27:81:00:57:77:fb:9e:9b:35:91:b8:
                    74:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C1:B2:2B:EC:20:D1:32:BC:54:D7:DE:62:34:E4:CA:6F:44:D2:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1feefa8a-4add-31a3-bd45-dc09bc426bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.143.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:04:de:90:1d:08:e3:6d:38:98:7d:be:89:8f:29:95:c1:19:
         69:63:ac:0f:f0:75:61:a4:2e:e1:32:1b:e5:08:b6:8e:b4:11:
         7b:1d:80:36:0a:9f:c6:0c:83:74:74:37:a0:8a:3e:9f:0f:be:
         c8:28:8c:5f:cd:06:c5:cb:ef:2c:cb:f2:a3:93:ea:d8:cf:09:
         37:7e:07:be:27:75:2a:9f:af:e5:3a:d5:6f:1a:34:b0:e5:7e:
         06:d6:30:3a:34:4d:65:f7:ff:d8:04:24:a9:83:94:5a:c6:9d:
         d2:2b:eb:62:ec:6e:9d:71:a8:9f:a7:a6:99:c4:43:0f:be:9e:
         68:8b:8f:f5:59:44:34:d8:97:0e:79:76:57:59:43:c6:ff:4d:
         40:17:6e:b8:f3:4a:1e:84:6a:84:c5:b5:db:db:d3:41:7d:86:
         c0:3c:6f:f2:e4:1c:61:1e:03:fe:49:9f:8e:4a:25:e5:a0:23:
         23:23:ac:be:9b:3d:9c:ef:51:26:98:fb:c1:db:b8:50:ad:eb:
         2d:4f:e5:0c:e7:00:d8:7d:08:d9:ff:e6:b7:94:da:51:82:64:
         c8:2c:b7:95:ee:4a:eb:66:34:b6:5c:14:90:99:39:2e:7a:31:
         af:f9:01:d1:e8:c3:1d:fa:3c:d0:eb:0d:eb:1d:3e:17:b3:1e:
         cd:a4:f2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:10 2024 by rpki-client on console-ams.rpki-client.org