Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa
File:                     bdd32a89-f2da-3329-94b2-d5f74405a82d.roa (raw, json)
Hash identifier:          kUMjpvRRjtrul82p/xkZJ3h81opCkC2Mmzi2AnmG/rA=
Subject key identifier:   7B:AB:98:C2:09:21:27:7F:A5:90:39:57:4A:B7:1C:07:01:78:45:85
Certificate issuer:       /CN=618659a6-e7a9-4c1f-9818-42770f2b224e
Certificate serial:       010D0C9F43285847A6A4DA5D554A6B47A1F83640
Authority key identifier: A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa
Signing time:             Thu 24 Oct 2024 19:56:18 +0000
ROA not before:           Thu 24 Oct 2024 19:56:18 +0000
ROA not after:            Wed 22 Jan 2025 20:56:18 +0000
asID:                     33622
IP address blocks:        140.235.24.0/24 maxlen: 24
                          140.235.25.0/24 maxlen: 24
                          140.235.26.0/24 maxlen: 24
                          140.235.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:a6:a4:da:5d:55:4a:6b:47:a1:f8:36:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618659a6-e7a9-4c1f-9818-42770f2b224e
        Validity
            Not Before: Oct 24 19:56:18 2024 GMT
            Not After : Jan 22 20:56:18 2025 GMT
        Subject: CN=c01e98c7-0d04-4959-b4dc-cd668aa69927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:76:78:c8:bf:63:93:7e:0a:2c:0d:81:bf:
                    3f:9f:c0:aa:b9:f1:9a:36:7c:89:e4:5b:22:d1:84:
                    71:72:8a:eb:ab:8d:2b:15:1c:4a:ec:77:97:22:84:
                    a0:fd:01:51:f8:f4:4d:74:2e:59:59:6b:94:97:4a:
                    ec:67:89:e2:21:d2:6c:19:ae:26:b1:00:ef:54:10:
                    f9:fb:6a:17:f3:00:57:67:10:62:aa:01:34:7c:10:
                    cd:c0:dd:df:ec:30:b4:a2:32:0e:58:45:e2:cb:45:
                    89:64:20:57:3d:10:46:22:93:c0:47:3c:6e:4f:cc:
                    db:14:8e:0a:fb:8b:a6:c3:f5:5a:9a:18:ec:75:8c:
                    2e:82:73:9e:d8:82:32:46:d9:ca:56:0d:2a:36:8d:
                    c9:e1:19:f4:6b:d1:c0:bf:4f:1b:55:65:3b:18:36:
                    8a:46:cf:7f:65:c8:c0:0c:3d:d6:57:6c:4d:a3:16:
                    77:e8:d0:fc:41:f1:5a:65:db:1c:89:bb:9c:71:88:
                    08:f2:2a:99:60:be:36:bf:69:76:e5:64:a0:cc:77:
                    57:0b:d0:72:f0:e2:8e:80:27:1c:34:27:72:70:fe:
                    ed:38:89:2b:11:8e:a2:79:cd:2a:71:5e:75:b1:12:
                    f3:df:77:b2:e7:c8:28:88:01:50:09:cf:10:6e:e6:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AB:98:C2:09:21:27:7F:A5:90:39:57:4A:B7:1C:07:01:78:45:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/bdd32a89-f2da-3329-94b2-d5f74405a82d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e/618659a6-e7a9-4c1f-9818-42770f2b224e.crl

            X509v3 Authority Key Identifier:
                keyid:A7:82:87:80:EB:D8:74:26:32:E3:C2:22:C8:6C:D4:DD:4D:E4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/618659a6-e7a9-4c1f-9818-42770f2b224e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:2a:85:96:15:88:04:dd:94:ae:02:50:f2:f8:cd:55:f8:d2:
         75:64:c4:2a:09:96:bc:01:8b:04:38:8f:70:97:1b:9f:ca:59:
         23:f7:f0:d2:3a:cd:b4:32:b2:71:99:e7:da:79:ab:20:b8:26:
         3f:ca:3e:d5:29:d4:fe:fa:02:28:20:3c:17:99:f6:9f:ec:d0:
         5c:0c:0d:0a:6f:39:07:f2:8f:48:a0:44:1e:80:4f:36:cb:ba:
         79:ab:43:de:79:18:1e:4b:63:0b:42:ff:51:00:d0:e8:09:4d:
         3b:f3:65:c0:67:31:61:f7:a1:b3:ba:51:f9:87:9d:91:01:20:
         99:21:c6:49:3e:bb:3a:da:26:b2:ae:f8:2f:48:cb:de:d3:ad:
         c9:f1:2e:0c:46:f1:ad:93:87:39:ac:43:28:91:0e:42:1b:5d:
         99:30:b8:27:d0:e9:ac:55:6c:58:b4:1b:0f:9b:6e:79:fc:bf:
         27:1a:09:6a:e3:a0:2d:e3:3a:a8:c3:25:6d:65:23:14:21:9b:
         4e:08:2b:4c:8d:44:6e:f5:9c:c1:bb:03:37:dc:6d:69:f4:be:
         45:59:c7:84:c7:3c:d8:eb:8d:43:e3:5b:93:77:1e:73:3e:c4:
         6e:a1:20:de:c8:12:cc:20:62:6c:85:4a:f2:c3:ad:b6:34:00:
         ee:40:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:22 2024 by rpki-client on console-ams.rpki-client.org