Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          kVxS3uBqZ+s8AAK4eAxpjziaU30ORDLlmERqxeaDvdk=
Subject key identifier:   AD:59:23:F3:6E:65:DB:43:DE:9F:DB:93:7E:FA:B7:9F:79:9D:F2:26
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584733608DC5D0CC2649766EF840
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Fri 13 Sep 2024 13:00:41 +0000
ROA not before:           Fri 13 Sep 2024 13:00:41 +0000
ROA not after:            Thu 12 Dec 2024 14:00:41 +0000
asID:                     12097
IP address blocks:        24.140.24.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.40.0/21 maxlen: 21
                          24.140.48.0/20 maxlen: 20
                          24.140.64.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:33:60:8d:c5:d0:cc:26:49:76:6e:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Sep 13 13:00:41 2024 GMT
            Not After : Dec 12 14:00:41 2024 GMT
        Subject: CN=b8c2cd8e-f5a4-475f-986e-01f9e8b64f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:32:8b:b0:73:aa:bc:42:d7:81:5e:c7:4a:a4:
                    77:4e:4b:df:24:ee:45:d2:83:46:22:0e:6a:d1:57:
                    cc:c6:cc:e2:d0:f7:06:db:d9:ac:63:e0:d8:f5:df:
                    c7:7b:bd:3f:0a:01:80:15:2e:14:cc:eb:bb:de:95:
                    9e:8b:e9:1e:68:34:75:dd:5a:19:37:da:18:73:2a:
                    41:c2:95:d6:1e:bc:74:bb:82:21:d8:67:94:e3:6d:
                    22:18:cd:d0:23:6d:db:12:3c:47:65:cb:71:8b:8a:
                    2f:35:fc:08:b1:91:f8:98:72:59:12:07:af:c2:92:
                    43:f9:b6:9a:f0:5c:98:74:62:bf:b8:76:1f:e8:71:
                    0d:bc:b4:b9:13:91:c8:95:c8:39:52:02:51:80:85:
                    fb:da:1c:f5:58:b0:dc:03:d1:bf:47:32:26:74:5f:
                    02:20:9e:11:51:f5:c8:7b:12:dd:28:71:ea:ca:7e:
                    87:87:ed:0a:df:d4:5f:33:6d:22:1b:d6:b7:19:5e:
                    ed:5a:65:fd:85:67:79:b0:ff:29:cc:0f:be:8d:ec:
                    1e:2f:cf:8f:c9:1c:e9:fc:bb:8f:01:fd:8e:b3:f6:
                    24:2c:ba:b7:cb:4b:42:c9:c2:67:c7:38:88:37:4c:
                    a6:b4:df:5a:95:0a:8b:90:b8:64:80:10:2f:3c:41:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:59:23:F3:6E:65:DB:43:DE:9F:DB:93:7E:FA:B7:9F:79:9D:F2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.24.0-24.140.135.255
                  24.140.144.0/20
                  24.140.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ce:1d:fd:2e:62:a6:c0:70:1b:92:c9:e7:57:6b:f1:23:58:
         ac:8e:12:d8:a3:ca:05:5b:5e:b8:db:e5:83:18:ea:c5:f8:f9:
         84:d3:48:52:16:5c:86:d6:70:0b:af:7f:1d:f6:cb:71:04:6b:
         ed:38:89:15:1d:c8:44:48:b9:77:b9:b2:27:39:5a:1b:87:f5:
         ba:05:98:d1:2e:5c:7d:c6:ae:12:36:3c:1e:ff:a2:fe:30:19:
         bf:24:ed:3a:f3:83:91:9c:c6:88:de:4b:8b:64:4a:10:f2:9e:
         55:e0:ed:5f:c1:dc:ca:83:dd:e3:e6:04:8d:cf:10:0d:81:cd:
         db:cc:e9:dd:ef:db:dc:f7:10:74:a1:d4:43:82:9f:e1:31:ee:
         bf:51:99:3b:e9:8f:23:3c:6f:71:83:75:ec:50:62:12:18:99:
         30:b4:64:fa:d3:9d:b3:23:92:e6:0e:10:44:0d:37:19:7c:3f:
         54:69:b9:30:a8:5f:08:b5:b4:39:e5:02:bd:4c:3e:e3:f3:a1:
         ea:62:ac:5d:86:89:ed:a2:59:d0:fb:ff:a1:e0:dc:b0:94:0e:
         69:af:c8:a1:28:48:a3:6e:36:e6:a5:1c:d5:42:5f:c9:4f:91:
         43:95:21:7c:3c:7a:f4:64:f6:30:00:11:b3:bf:c1:3c:ca:0d:
         79:6f:4d:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:45:26 2024 by rpki-client on console-ams.rpki-client.org