Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
File:                     6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa (raw, json)
Hash identifier:          xcJi1QW9I96maY6p6dkNfp+YTGo5ToN4gRRnAT/Y54w=
Subject key identifier:   15:B7:47:42:CC:8C:FC:2A:07:B8:3F:0B:ED:78:14:ED:8E:2B:94:1A
Certificate issuer:       /CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
Certificate serial:       010D0C9F432858477D58A2806D3823702819C640
Authority key identifier: 81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa
Signing time:             Thu 10 Oct 2024 00:54:35 +0000
ROA not before:           Thu 10 Oct 2024 00:54:35 +0000
ROA not after:            Wed 08 Jan 2025 01:54:35 +0000
asID:                     197867
IP address blocks:        140.235.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7d:58:a2:80:6d:38:23:70:28:19:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6cd83f-36e6-4be6-ab7c-53801cda4fef
        Validity
            Not Before: Oct 10 00:54:35 2024 GMT
            Not After : Jan  8 01:54:35 2025 GMT
        Subject: CN=41c3fa7f-4b55-4232-a28b-8f2d4f698eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:58:07:21:b0:eb:16:1a:43:9b:76:54:b5:1c:
                    0a:47:61:dc:a4:b2:c2:d2:6f:b7:c5:79:68:f0:52:
                    84:b5:53:5c:4b:4e:00:f4:64:cb:3e:1c:b8:7f:a4:
                    af:ea:31:ad:41:9f:94:1f:f1:00:72:d5:ad:66:8e:
                    fd:8d:ae:f7:94:bd:a4:31:62:09:69:da:64:bd:62:
                    bc:40:79:33:f7:bd:1a:af:b2:58:8a:37:57:9e:10:
                    12:f7:de:aa:04:6b:16:29:3e:dd:85:9c:ca:13:3f:
                    29:26:1f:d7:4f:3a:57:95:49:4c:61:36:e4:29:22:
                    78:8a:cd:5a:08:e8:03:7a:11:e1:6f:4f:d6:b2:b4:
                    3e:af:f7:2f:80:ac:50:3a:24:29:94:9e:9c:ec:dd:
                    a0:02:3e:d8:1e:91:d0:bc:6b:24:48:7f:45:d6:74:
                    62:bf:dc:40:e5:09:6d:0b:0f:ea:ad:6c:09:eb:0d:
                    74:ef:53:a5:47:94:90:e0:c5:62:18:7d:14:49:64:
                    33:f1:00:40:e8:56:43:bf:0b:a6:49:af:3f:b3:b2:
                    cf:ab:fe:74:f4:f9:a7:72:cf:4b:2d:2e:e9:1c:fd:
                    f9:f9:2a:96:e2:1c:f7:2e:1e:14:4a:87:40:05:b4:
                    9f:bd:0f:cf:bb:f1:b6:b5:1f:d2:7f:ef:28:05:54:
                    28:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B7:47:42:CC:8C:FC:2A:07:B8:3F:0B:ED:78:14:ED:8E:2B:94:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/6857a1a9-eb9d-36ad-ab7a-47fa82cc2f35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.crl

            X509v3 Authority Key Identifier:
                keyid:81:71:EA:33:12:1B:1C:A1:EC:E9:79:1D:B1:21:86:92:37:E2:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6cd83f-36e6-4be6-ab7c-53801cda4fef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e7:16:83:35:72:96:4f:4c:aa:ba:20:a0:1c:04:6e:7b:44:
         bc:f9:83:8d:ff:39:a7:58:f4:b0:88:e4:ce:00:5c:71:3c:c9:
         7a:ef:6c:bc:b7:ae:8d:e9:c3:af:b8:80:ec:a1:f6:51:4e:69:
         ee:57:be:d2:92:35:c9:49:4b:53:1c:98:9b:81:ed:23:fd:b1:
         cc:39:54:2e:3a:72:4c:ba:96:5c:c0:5a:62:6c:b8:5a:08:b8:
         f7:f6:e8:d9:3f:50:b2:73:98:e1:28:bb:e1:93:a2:fd:ff:50:
         44:03:51:02:31:a0:26:22:0e:15:86:6c:ab:9f:a6:bc:57:b1:
         0c:02:5c:5a:d8:a3:0a:95:37:17:fa:52:e3:68:4c:a6:ac:25:
         9f:72:cc:a8:b7:5f:e1:f0:4e:78:34:c8:d7:0a:9a:36:76:41:
         6d:fd:fb:39:b9:dd:cd:e7:cf:3e:1d:35:d7:f2:93:6f:6e:7d:
         cf:20:49:85:d6:37:b8:51:c6:c2:53:df:c2:be:cb:f7:53:a0:
         2a:15:29:47:66:88:1c:d3:23:59:e5:25:45:c0:94:ae:f5:f1:
         fb:56:bf:48:0b:c0:78:55:e7:75:89:30:43:a1:14:ad:bb:21:
         59:f4:a5:be:ef:7c:7a:13:7f:ee:03:48:6f:bd:5a:b3:a5:88:
         42:3d:e9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:37:19 2024 by rpki-client on console-fra.rpki-client.org