Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa
File:                     4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa (raw, json)
Hash identifier:          I4sJTzkVAPOsRRRDj0YjlrU5igB/Dz55pjdUiILY4hM=
Subject key identifier:   98:D3:EC:9F:DB:6B:44:BF:45:AD:D0:D0:FF:7D:6D:6B:22:50:30:87
Certificate issuer:       /CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee
Certificate serial:       010D0C9F432858478834124D93C35F41BB8772E0
Authority key identifier: 7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa
Signing time:             Sun 13 Oct 2024 22:14:48 +0000
ROA not before:           Sun 13 Oct 2024 22:14:48 +0000
ROA not after:            Sat 11 Jan 2025 23:14:48 +0000
asID:                     400167
IP address blocks:        165.140.62.0/23 maxlen: 24
                          2606:9240::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:34:12:4d:93:c3:5f:41:bb:87:72:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b96212e2-1faa-48b4-83e9-6deeec8b4bee
        Validity
            Not Before: Oct 13 22:14:48 2024 GMT
            Not After : Jan 11 23:14:48 2025 GMT
        Subject: CN=eecd9fe7-ebe8-4f2b-850f-a367dcec2e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b6:55:36:cc:72:e5:98:6f:ba:e1:02:5c:76:
                    b8:14:90:21:9c:43:57:41:43:55:cf:63:e4:08:2a:
                    ce:13:c7:38:53:53:29:66:ea:38:ec:75:43:bf:c1:
                    1b:30:45:c4:31:2c:2f:1b:1f:3d:67:c2:d5:e2:46:
                    3f:33:99:18:10:d8:65:c3:e1:5a:1f:b0:18:40:b6:
                    8b:3d:ba:da:47:14:aa:69:6f:ba:b1:63:7d:2c:f7:
                    c0:c5:d4:42:bb:c3:82:05:8f:db:ab:11:62:fc:17:
                    61:a7:e1:f0:ab:7e:5a:4e:4c:cb:44:58:63:d0:bc:
                    8c:98:cd:a8:a0:06:d5:a1:c3:95:b0:59:73:d2:45:
                    15:9a:be:ae:bb:0d:a6:4c:b9:65:36:be:7e:7b:1f:
                    6f:2f:5d:3d:ac:8f:f6:39:90:ca:ef:3b:95:8d:c4:
                    f3:08:ba:51:fe:c6:4d:10:e0:37:ba:30:10:74:ff:
                    ee:ef:7d:87:b0:02:5e:e5:4e:37:eb:29:1a:2f:a4:
                    0b:36:a0:81:4d:9a:81:70:3b:4d:90:3b:77:ca:cb:
                    88:08:b4:d6:9e:e4:a8:3d:8a:62:e4:b0:9d:88:0a:
                    6d:82:73:c6:ac:29:73:13:28:a6:02:7f:ae:11:f7:
                    81:ab:f8:e7:e5:69:87:7a:bf:31:ac:9a:7f:3b:59:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D3:EC:9F:DB:6B:44:BF:45:AD:D0:D0:FF:7D:6D:6B:22:50:30:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/4d7c4394-925b-3195-a2a1-d8feb268ac8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee/b96212e2-1faa-48b4-83e9-6deeec8b4bee.crl

            X509v3 Authority Key Identifier:
                keyid:7E:11:D0:CF:E7:87:A5:2E:B4:B6:6B:38:19:06:BE:6B:92:14:CE:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b96212e2-1faa-48b4-83e9-6deeec8b4bee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.62.0/23
                IPv6:
                  2606:9240::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:94:42:95:99:40:1f:5e:15:59:d0:a3:42:30:59:6c:e2:a3:
         c5:41:0a:c9:20:00:2f:8c:94:70:2f:b2:ee:ab:ad:e1:8c:b7:
         d7:ce:5c:67:cc:bf:c4:2b:8c:cf:c3:d6:64:e7:13:48:fc:77:
         90:cc:ff:0a:56:d0:9f:ea:f3:93:07:c9:3e:e3:51:f4:98:38:
         72:03:3c:55:61:fd:d5:bb:b0:b0:51:4c:2b:5a:46:bb:8c:8e:
         08:77:18:15:0d:b2:b1:49:12:57:2d:e9:f4:46:35:2d:98:77:
         53:73:cf:9c:13:5d:ef:66:bc:8b:31:84:88:89:29:a6:e8:10:
         e6:22:54:62:ec:07:26:77:42:dd:38:1c:d0:a8:4b:50:4c:52:
         5d:c6:c4:8e:c0:c4:21:69:d3:17:8d:f3:2a:e2:3b:eb:be:2c:
         17:1e:8b:18:cf:97:e0:1a:43:82:c5:a8:0d:5f:8d:42:ea:02:
         b6:87:28:67:1b:df:e2:bc:4a:6d:e9:4e:f0:c8:cb:38:25:dc:
         eb:48:6e:2f:dc:1a:e9:a0:57:cb:d7:e3:88:fd:ba:17:63:a2:
         58:95:47:a1:3e:38:1e:5b:54:05:b3:24:a6:01:e7:8f:42:94:
         10:c8:1d:44:82:57:6d:e6:da:ad:a0:ef:f6:64:02:e8:b7:37:
         f3:ad:1c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:02 2024 by rpki-client on console-fra.rpki-client.org