Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
File:                     ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa (raw, json)
Hash identifier:          yDBb3NDKuvhs1ejWX0byZCizL1c2zv89rja69lXJvo4=
Subject key identifier:   16:12:5F:19:4A:4A:47:F5:49:F9:D7:86:6D:B0:F0:92:7D:08:F6:AB
Certificate issuer:       /CN=e951b522-4f4b-4128-b8a6-8e3f69803993
Certificate serial:       010D0C9F43285847CD09FE2C37F322CBB25E6580
Authority key identifier: 76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa
Signing time:             Thu 07 Nov 2024 14:00:39 +0000
ROA not before:           Thu 07 Nov 2024 14:00:39 +0000
ROA not after:            Wed 05 Feb 2025 14:00:39 +0000
asID:                     26658
IP address blocks:        142.202.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cd:09:fe:2c:37:f3:22:cb:b2:5e:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e951b522-4f4b-4128-b8a6-8e3f69803993
        Validity
            Not Before: Nov  7 14:00:39 2024 GMT
            Not After : Feb  5 14:00:39 2025 GMT
        Subject: CN=b846347a-a80e-4fa8-88b2-eb2302223336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:03:cb:a8:52:a3:f3:da:a9:76:f4:ec:a7:
                    e5:d4:62:92:f7:73:9d:db:e9:a5:25:65:fe:c3:a2:
                    df:cb:39:d7:06:b7:c7:18:f6:b1:ca:77:15:90:12:
                    53:a2:3b:29:1f:c1:ea:29:93:40:32:15:be:59:b8:
                    5d:8f:09:a2:f3:24:82:71:bc:2d:0c:50:2d:c4:2c:
                    cc:29:1b:86:a1:b8:21:0b:94:21:a4:42:c5:d2:14:
                    c6:9e:6e:ba:58:30:1c:63:12:20:e8:8a:2a:6e:a8:
                    f7:72:07:78:10:de:5a:84:d1:40:01:8d:63:c0:41:
                    7e:71:c7:d4:6a:b2:7a:08:79:3c:5a:af:43:7a:1c:
                    d8:c5:a2:e1:b1:42:77:f9:53:16:f3:fe:3b:ab:49:
                    b6:52:d9:35:e5:b1:b1:3a:1f:ba:72:56:d2:a9:21:
                    a2:0f:97:1e:8e:ad:c0:2c:f3:75:76:c8:e7:57:dd:
                    d6:f6:fe:50:57:00:9f:85:d8:20:09:4d:a8:22:61:
                    44:b8:98:23:60:f2:4b:d9:18:15:65:1d:d1:ac:19:
                    a0:db:8a:1d:91:5a:8d:2e:0c:95:8d:cd:3e:fc:35:
                    6d:63:b7:10:4c:05:0f:f9:d1:90:6b:67:df:5b:77:
                    41:ca:53:3a:42:83:9f:89:18:8f:c8:7e:12:ed:c1:
                    38:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:12:5F:19:4A:4A:47:F5:49:F9:D7:86:6D:B0:F0:92:7D:08:F6:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/ecd43020-0d5e-37ef-84e8-4f27ae8e32f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993/e951b522-4f4b-4128-b8a6-8e3f69803993.crl

            X509v3 Authority Key Identifier:
                keyid:76:6B:E9:E2:30:D7:EC:3E:AD:78:6A:8F:64:27:95:99:DD:16:83:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e951b522-4f4b-4128-b8a6-8e3f69803993.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:4a:9c:e3:2d:2b:47:de:a2:b2:63:b4:96:28:d1:e1:1d:
         1d:4f:93:8e:84:99:7e:cc:9a:0f:ea:37:8a:df:87:be:41:25:
         8f:8c:5f:d4:d2:09:a5:88:6e:81:c3:36:50:b5:0a:e7:99:95:
         a7:f3:50:0f:41:3f:f5:b4:92:20:fb:6e:4d:e9:18:a2:6c:b7:
         f4:fd:86:6d:65:d7:ec:e4:67:2b:6d:c0:ba:ac:2c:00:2b:d3:
         4c:d9:17:8a:4f:9f:d8:76:82:95:96:86:e8:f9:b5:76:24:64:
         04:be:5b:9d:f7:97:b8:4d:18:8f:dc:80:55:7b:30:da:53:40:
         c6:e6:1c:36:11:82:16:92:ef:68:13:3f:17:91:fa:d3:fc:2e:
         21:1d:f4:3d:6c:8d:05:2b:23:7c:0e:84:28:2b:30:31:27:75:
         ca:fc:61:3b:a3:78:ae:2f:96:80:71:ba:ab:28:a8:5d:a4:6f:
         c8:cb:99:c7:3e:e6:f0:7a:ac:97:a2:3c:ff:c7:0f:9a:b6:34:
         39:8b:87:f6:ab:00:90:45:e4:0a:71:f4:53:27:64:cc:e4:23:
         8f:91:73:cf:a2:94:fa:89:3d:07:a1:a7:5d:f9:eb:4c:13:b8:
         28:a4:ef:b2:0c:36:bf:59:9e:ff:74:32:db:19:2b:ea:8c:95:
         9d:24:db:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:40:41 2024 by rpki-client on console-ams.rpki-client.org