Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/13e96025-3a86-39a2-bca2-66b149d8ca98.roa
File:                     13e96025-3a86-39a2-bca2-66b149d8ca98.roa (raw, json)
Hash identifier:          yYe1d+IjaK7chFEpklNmJoc+ddeFsfn2QNY7VJ8oEMQ=
Subject key identifier:   C4:A6:7F:94:66:03:49:C8:57:57:05:12:FC:21:78:AA:DA:DA:69:30
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F43285847BFA8C2C54ED56D32A6D22100
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/13e96025-3a86-39a2-bca2-66b149d8ca98.roa
Signing time:             Sat 02 Nov 2024 18:59:23 +0000
ROA not before:           Sat 02 Nov 2024 18:59:23 +0000
ROA not after:            Fri 31 Jan 2025 19:59:23 +0000
asID:                     23470
IP address blocks:        140.235.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bf:a8:c2:c5:4e:d5:6d:32:a6:d2:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Nov  2 18:59:23 2024 GMT
            Not After : Jan 31 19:59:23 2025 GMT
        Subject: CN=20b91db2-e5fa-4a7a-8884-8d66e5ec2e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:49:f1:b0:3b:9c:2b:75:45:ef:09:30:f0:
                    16:ab:ff:c0:75:a6:10:3f:96:55:7f:a6:2c:06:9a:
                    22:4d:6b:87:16:74:dc:91:eb:c9:7b:5a:df:3e:49:
                    85:b6:51:75:67:be:ef:d3:13:ee:12:fe:cb:34:9d:
                    44:88:14:44:fe:a8:67:06:07:53:2e:6e:56:a7:a9:
                    c7:b2:98:d4:5f:7a:cb:04:89:cc:55:29:a4:2c:57:
                    fe:87:5c:cf:ed:bb:70:90:16:ba:56:ae:36:28:88:
                    d8:e0:f4:4f:16:2d:ef:84:9d:c0:df:c0:dd:15:1b:
                    b7:7d:33:fe:a1:05:2b:42:5c:11:24:05:e6:3c:25:
                    b2:30:2b:d2:d9:80:72:ea:28:c5:bf:bd:12:fe:d9:
                    84:fc:4d:23:ba:36:53:d0:88:26:01:a3:f1:52:dd:
                    12:c9:d5:e6:5a:41:cf:17:5b:0c:7a:d4:7d:5b:e1:
                    ca:34:8d:3a:69:b3:e5:86:71:62:ff:a0:87:29:04:
                    63:b0:74:8a:3c:b2:40:2e:1d:f1:9f:dd:06:21:e6:
                    5c:2e:91:4a:b7:18:aa:b9:83:80:26:12:8c:6b:56:
                    a6:f9:d9:2c:d7:fa:f2:f6:2f:57:5c:e0:f9:fc:1c:
                    64:04:1f:cd:51:70:de:22:73:af:99:aa:6d:d0:cc:
                    53:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:7F:94:66:03:49:C8:57:57:05:12:FC:21:78:AA:DA:DA:69:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/13e96025-3a86-39a2-bca2-66b149d8ca98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:60:ab:17:63:ce:94:65:0b:ce:ba:ce:3f:fe:f1:ad:5c:ec:
         5d:00:13:f7:73:c2:25:fb:ce:a8:13:63:a0:32:52:e3:fa:89:
         66:60:c0:a6:d6:2b:56:78:c5:80:63:90:be:9b:36:fb:6e:8b:
         dd:cd:d1:b2:c0:f5:4a:35:8e:d5:31:27:e1:35:c5:c3:db:e1:
         88:b3:a9:c6:c7:3a:20:38:f6:31:59:b4:c4:be:1a:db:82:8b:
         90:09:4a:e8:47:6c:67:7f:a7:cc:23:4d:00:56:2a:e1:34:7c:
         86:0e:ce:42:af:38:ee:86:3f:e0:a3:04:6c:47:30:18:8a:f6:
         10:87:ba:4b:00:ae:f7:84:a1:c9:76:e0:de:87:52:f7:18:85:
         ed:ad:c8:db:d9:4e:2e:c8:cf:7c:3a:d2:58:c5:64:42:48:e8:
         e3:c2:91:f8:21:1a:5d:d2:8c:1a:e3:e5:bc:f0:99:ac:d0:4c:
         c0:d2:f7:1a:82:7c:bf:6e:75:0f:78:a9:01:f3:20:ef:61:4e:
         ea:ed:7b:61:79:ff:48:12:87:c6:a0:83:b4:6f:8b:fc:6c:b0:
         59:62:77:72:0f:9a:3e:1b:d9:96:bd:38:1f:10:98:92:49:6b:
         e1:0d:8b:99:64:82:19:d0:83:06:04:d5:50:02:aa:c4:74:13:
         27:a8:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:46:00 2024 by rpki-client on console-ams.rpki-client.org