Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
File:                     e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json)
Hash identifier:          zna9x1dCIVcQ485g7K8+Bc02FFHyzOYM5psiGquJ5xQ=
Subject key identifier:   34:75:16:1F:27:B2:4D:CD:27:B4:37:62:31:D3:7E:A5:22:A7:38:2B
Certificate issuer:       /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
Certificate serial:       010D0C9F432858476F662B1DA84C08D6B1327A80
Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa
Signing time:             Sat 05 Oct 2024 01:00:31 +0000
ROA not before:           Sat 05 Oct 2024 01:00:31 +0000
ROA not after:            Fri 03 Jan 2025 02:00:31 +0000
asID:                     399293
IP address blocks:        192.140.4.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6f:66:2b:1d:a8:4c:08:d6:b1:32:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40
        Validity
            Not Before: Oct  5 01:00:31 2024 GMT
            Not After : Jan  3 02:00:31 2025 GMT
        Subject: CN=41968721-5222-485c-b1d9-75a08f8f8789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bb:cd:16:fd:82:58:0a:0d:6f:43:ac:47:5c:
                    f1:c7:db:89:aa:3f:5a:02:4c:f1:22:77:8e:78:e3:
                    40:e7:19:e1:b0:70:00:ae:20:50:f4:a2:c1:2f:35:
                    98:a3:ab:4a:1e:89:38:6b:10:89:6c:7e:4e:d2:b3:
                    ff:7a:27:ff:d2:a4:50:60:07:06:ec:9e:b0:63:59:
                    ca:01:c6:d1:0c:ed:aa:62:fc:55:6f:8d:7d:aa:b3:
                    cf:31:e2:97:a8:f1:1b:19:24:87:00:0d:0b:52:bb:
                    28:c3:1e:48:39:2d:a0:2f:95:bc:4a:51:71:84:21:
                    c5:dc:f1:1c:09:99:1f:a9:6f:7a:7c:26:4c:58:24:
                    13:af:08:15:ef:39:19:06:e6:08:6d:71:fa:f2:7f:
                    5d:58:9e:d4:2c:56:87:79:01:d7:ae:02:47:c4:f1:
                    31:9a:cc:6d:7e:1e:83:49:eb:69:d8:68:ee:f1:cd:
                    2e:b3:8b:43:98:b3:b8:8c:c8:28:6d:34:8a:fe:4a:
                    d7:7d:98:d4:61:f6:61:b8:71:30:9e:b6:fc:9c:41:
                    f2:57:a5:46:bf:b1:04:3a:3c:09:08:1c:d3:3a:9e:
                    f4:83:be:ad:be:79:d0:7f:dd:b5:b0:de:a4:3c:2a:
                    b6:0e:78:0d:d1:4f:b0:54:fa:5b:c5:84:f8:00:e9:
                    8e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:16:1F:27:B2:4D:CD:27:B4:37:62:31:D3:7E:A5:22:A7:38:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl

            X509v3 Authority Key Identifier:
                keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a2:80:a3:a4:83:31:5a:b8:f0:e1:f8:14:93:6f:76:d8:4a:
         d6:98:83:c2:0b:68:51:eb:91:b9:84:11:78:f0:78:70:9b:32:
         52:c1:53:ce:9f:21:93:8d:9c:d3:69:df:5b:19:bb:e1:1e:e7:
         24:23:50:44:9f:d2:22:de:79:f2:0b:ca:af:c3:e0:f8:c4:4c:
         85:7a:40:39:9e:f2:35:3d:d4:96:f9:91:d9:87:18:fe:72:d2:
         00:75:07:a3:c0:24:1d:12:90:c5:95:f4:ec:b1:62:f2:48:ee:
         65:ba:c0:13:06:92:36:57:e7:6a:96:ec:10:ec:4b:29:7f:b1:
         a8:48:31:a6:ac:2c:79:93:ff:0a:2f:5b:c0:b3:46:8d:b5:ee:
         e2:cc:b1:1f:61:61:25:c2:8f:2f:f1:7e:03:75:b7:e9:f0:dc:
         cb:76:27:3c:5b:ff:d5:1a:be:d0:a8:5e:2f:6a:82:c1:fb:4e:
         29:fc:6f:1b:d1:0f:3c:af:4e:c8:19:0a:b3:b2:89:85:b8:77:
         2e:3b:11:82:fc:b0:e2:fe:c3:8b:8a:c7:d3:d6:cc:52:69:81:
         59:3f:e2:a2:65:fa:e2:25:55:94:7b:a9:7b:01:38:8d:2a:ab:
         de:73:84:40:01:1b:dd:cb:df:6d:52:a4:64:b0:23:86:dc:2c:
         37:5f:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:36:42 2024 by rpki-client on console-fra.rpki-client.org