Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa
File:                     6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa (raw, json)
Hash identifier:          7eqDZig5H157d0ZxPyiIgsYxcAr/IA+EFWlHdQQ/kII=
Subject key identifier:   05:3B:1C:C3:A1:B6:72:D2:03:61:24:64:F2:32:1C:B9:63:B9:E0:C9
Certificate issuer:       /CN=a9a8478d-2e70-4659-8d85-8edbac09d675
Certificate serial:       010D0C9F43285847EFEF8CE9CC40B9F3EF436040
Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     27370
IP address blocks:        140.241.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:8c:e9:cc:40:b9:f3:ef:43:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=662c9724-d935-445a-a296-89a1ca646693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:2b:40:04:a0:1a:54:d7:ab:2b:bd:8b:41:
                    30:34:31:57:14:e9:c4:8b:23:1d:ab:89:10:68:28:
                    77:36:f7:6e:e4:28:fd:4f:b0:be:bd:f9:13:82:82:
                    e9:67:ae:1b:65:c9:26:f3:1f:56:3f:2e:89:be:12:
                    44:1e:47:49:c4:ba:b3:76:d6:60:f2:f7:07:5b:f1:
                    6e:ba:85:d9:43:76:97:02:a0:b6:75:c6:f5:73:b1:
                    fc:6c:51:97:4c:11:d2:4d:51:22:5d:c6:75:80:f8:
                    73:61:2a:81:bb:9c:bf:41:fc:cf:15:98:3e:fd:e0:
                    41:35:aa:21:06:12:cd:b7:18:77:65:9a:34:9d:72:
                    36:6e:d3:97:08:d4:af:35:45:b1:e9:b8:fd:2c:ad:
                    8d:0c:75:8f:0d:68:99:aa:66:47:ca:6c:77:e1:0d:
                    4d:ab:55:12:f0:99:0b:8b:e7:0a:05:14:6a:04:72:
                    ce:01:30:7c:ee:6a:57:94:ff:aa:1e:42:70:84:f1:
                    08:ac:04:82:63:6c:9c:13:34:d0:12:07:cc:a6:65:
                    98:ca:4b:79:15:a0:35:92:8b:80:61:c8:b2:89:d2:
                    2a:66:db:28:1b:c1:8a:ed:93:69:fb:1c:14:82:21:
                    96:cc:ca:de:4d:98:52:6b:3f:7f:20:cf:d6:56:0b:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3B:1C:C3:A1:B6:72:D2:03:61:24:64:F2:32:1C:B9:63:B9:E0:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/6cf615a1-9f3b-35cb-9955-9a5984f89a59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl

            X509v3 Authority Key Identifier:
                keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.241.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:ae:51:01:86:8c:af:7a:be:a7:7b:3a:2a:84:79:0f:a2:05:
         08:9b:67:8f:70:02:b2:78:ef:09:4d:95:3a:a8:45:4c:97:07:
         da:8c:e3:25:29:eb:7e:d8:52:da:89:05:b5:32:ab:96:3a:79:
         c7:67:6b:f3:9a:da:75:ca:44:a8:f6:cf:df:eb:13:42:71:5f:
         70:2d:79:c1:6f:e7:66:ed:61:c6:25:17:27:a7:f7:0d:fb:db:
         7f:93:c1:75:fd:69:41:17:2c:ad:b9:3f:fc:ef:80:5f:09:c3:
         17:6a:ac:12:e0:41:e3:8b:07:a5:3a:35:21:24:89:8e:e5:04:
         49:6d:da:ff:fb:4d:5c:16:63:96:40:d9:24:2c:29:e6:9c:13:
         92:ed:92:4b:f8:24:e3:1a:3d:fe:98:fa:23:3f:a2:b9:46:f9:
         58:4a:81:56:77:80:74:5c:49:93:a7:60:c0:76:35:64:38:c2:
         3e:46:ab:20:9c:a0:8d:a8:af:44:cc:a8:74:4a:04:9b:1a:3e:
         ae:cf:d4:be:c5:64:1d:71:7b:86:58:b0:17:27:97:81:31:29:
         52:63:e2:06:1d:1a:ed:4f:1f:c9:e9:e3:df:0a:57:ef:98:d4:
         2b:5c:06:ec:fc:a3:a0:4c:ff:d8:29:a8:1f:52:1a:f6:d4:a0:
         94:c3:14:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfv74zpzEC58+9DYEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk
Njc1MB4XDTI0MTEyMDAyMDAzOVoXDTI1MDIxODAyMDAzOVowLzEtMCsGA1UEAxMk
NjYyYzk3MjQtZDkzNS00NDVhLWEyOTYtODlhMWNhNjQ2NjkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmUrQASgGlTXqyu9i0EwNDFXFOnEiyMdq4kQ
aCh3Nvdu5Cj9T7C+vfkTgoLpZ64bZckm8x9WPy6JvhJEHkdJxLqzdtZg8vcHW/Fu
uoXZQ3aXAqC2dcb1c7H8bFGXTBHSTVEiXcZ1gPhzYSqBu5y/QfzPFZg+/eBBNaoh
BhLNtxh3ZZo0nXI2btOXCNSvNUWx6bj9LK2NDHWPDWiZqmZHymx34Q1Nq1US8JkL
i+cKBRRqBHLOATB87mpXlP+qHkJwhPEIrASCY2ycEzTQEgfMpmWYykt5FaA1kouA
YciyidIqZtsoG8GK7ZNp+xwUgiGWzMreTZhSaz9/IM/WVgs3VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAU7HMOhtnLSA2EkZPIyHLljueDJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4
NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvNmNmNjE1YTEtOWYzYi0z
NWNiLTk5NTUtOWE1OTg0Zjg5YTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk
ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5
ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi
YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPH6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANquUQGGjK96vqd7OiqEeQ+iBQibZ49wArJ47wlNlTqoRUyXB9qM4yUp
637YUtqJBbUyq5Y6ecdna/Oa2nXKRKj2z9/rE0JxX3AtecFv52btYcYlFyen9w37
23+TwXX9aUEXLK25P/zvgF8JwxdqrBLgQeOLB6U6NSEkiY7lBElt2v/7TVwWY5ZA
2SQsKeacE5Ltkkv4JOMaPf6Y+iM/orlG+VhKgVZ3gHRcSZOnYMB2NWQ4wj5GqyCc
oI2or0TMqHRKBJsaPq7P1L7FZB1xe4ZYsBcnl4ExKVJj4gYdGu1PH8np498KV++Y
1CtcBuz8o6BM/9gpqB9SGvbUoJTDFBA=
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:04:44 2024 by rpki-client on console-fra.rpki-client.org