Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa
File:                     882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa (raw, json)
Hash identifier:          +9MnJg5rH1AlXlXssrm6k4cGPJwuqLQHAyb53JWPZZ4=
Subject key identifier:   9E:B7:32:1E:8B:3B:AD:80:53:6E:C6:4B:21:E5:5D:DD:59:79:98:2F
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F432858476F663078128BC365272AED80
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     1742
IP address blocks:        140.247.174.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:30:78:12:8b:c3:65:27:2a:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=1286f4f8-a2ca-4d09-b651-1259b7d40d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ab:dd:3a:be:d6:0a:78:fd:1a:7d:48:5f:b0:
                    dc:fb:05:35:f3:08:08:83:1e:dc:a6:8d:86:3e:83:
                    99:b3:e0:f4:51:f7:80:2b:b3:bd:d7:b5:70:e5:4f:
                    80:17:aa:77:b0:87:c8:8a:09:9a:41:59:97:7a:af:
                    87:20:b0:f3:fe:bf:30:81:74:c6:4d:1f:23:86:03:
                    68:2c:05:66:9b:eb:9d:7d:2a:b6:f9:ea:e0:2c:71:
                    e6:7c:2f:5f:79:10:2c:dc:5f:1b:b3:3b:07:81:30:
                    53:3b:53:b8:23:3a:f3:38:ae:db:84:33:93:f7:30:
                    c4:35:04:fa:13:c7:d4:4d:d1:7e:24:e3:31:10:8c:
                    8c:f0:8d:44:d3:58:46:68:b2:53:65:d5:0e:8b:b5:
                    d6:0a:ec:f0:07:f5:53:e9:09:29:b8:5b:ae:a1:f0:
                    97:45:3f:48:87:05:0f:54:de:f9:a7:c3:e5:13:29:
                    0d:9f:7a:34:11:a3:52:77:aa:94:65:82:eb:f6:29:
                    35:b5:ef:99:bc:4b:f7:53:f6:5c:d9:37:32:c9:e7:
                    a5:93:0a:db:87:48:97:e3:89:aa:0e:32:b1:18:ad:
                    a9:a3:3d:fb:6e:3d:1d:7f:cd:7d:81:a4:a1:fe:70:
                    36:95:1e:33:9d:3f:6a:35:17:0f:11:6e:a1:0c:ad:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B7:32:1E:8B:3B:AD:80:53:6E:C6:4B:21:E5:5D:DD:59:79:98:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/882e8e3c-8679-3ea9-bdd0-003f01fc5b39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.247.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d0:be:f8:9f:48:1a:a9:08:7d:7a:81:f4:c6:56:d7:a8:70:
         78:41:64:61:84:97:4f:f7:ad:c7:fd:dc:2f:92:e7:c4:7f:71:
         a3:e8:45:8d:93:51:4a:31:40:f0:12:ed:6f:3f:19:1a:6a:04:
         27:d3:0e:db:80:bc:e1:82:90:3a:68:a5:de:ef:14:c2:87:cc:
         43:47:0d:2c:bf:43:7a:26:8d:1e:e5:04:b4:42:96:5e:e0:cf:
         c2:fc:9c:ea:ab:91:31:c9:95:03:91:33:4b:e9:4b:b0:74:53:
         92:42:d0:a7:46:75:7d:80:2d:6f:fb:31:a1:0f:e4:36:0a:ac:
         c2:e4:ba:58:b9:5c:54:81:91:92:b7:4e:a2:3f:34:b7:60:3d:
         ff:78:86:ba:37:34:54:fc:b7:8d:0e:b3:d3:f5:e9:87:c7:32:
         6b:de:98:67:6e:15:be:1d:0b:38:1b:22:06:80:5e:90:a4:19:
         45:5e:7e:a3:3d:f3:e2:09:ce:24:6b:1c:a1:23:c0:40:3b:45:
         06:6f:46:51:fd:48:da:ca:a8:d2:e1:ab:a8:5e:16:0c:5e:0d:
         1a:c1:8b:95:66:82:4a:d0:f5:8d:2f:f3:ee:e1:43:34:36:c0:
         77:f2:8d:e6:6c:3c:13:6a:af:1e:bd:af:39:bb:60:2b:71:28:
         54:e1:42:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:18 2024 by rpki-client on console-ams.rpki-client.org