Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/d8e2f121-ac47-38e1-9e66-5c93c49ba9ee.roa
File:                     d8e2f121-ac47-38e1-9e66-5c93c49ba9ee.roa (raw, json)
Hash identifier:          5h3VnIOtpM/wwkEvR46x3UjTdH3dxvcRA1bAy7cydxo=
Subject key identifier:   37:A5:E3:C8:26:D4:2C:38:A6:F6:B7:75:46:AB:25:14:C4:CF:16:86
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858478718F4CD6D960057E2F77180
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/d8e2f121-ac47-38e1-9e66-5c93c49ba9ee.roa
Signing time:             Sun 13 Oct 2024 12:44:22 +0000
ROA not before:           Sun 13 Oct 2024 12:44:22 +0000
ROA not after:            Sat 11 Jan 2025 13:44:22 +0000
asID:                     400384
IP address blocks:        140.235.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:18:f4:cd:6d:96:00:57:e2:f7:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Oct 13 12:44:22 2024 GMT
            Not After : Jan 11 13:44:22 2025 GMT
        Subject: CN=9bff4ab0-9597-411f-b15d-c622fedd7376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5c:97:95:05:a5:59:db:f6:49:68:20:b8:32:
                    cd:6f:2d:3b:79:1e:7d:fc:13:0c:74:60:3e:c2:1a:
                    05:d3:34:1a:95:d5:43:72:9c:7c:6f:7a:e0:3e:cf:
                    b7:32:5d:86:0c:e5:65:af:f9:16:b4:ac:b1:8b:f3:
                    ee:c9:20:b0:ba:ba:fe:29:73:09:fc:2d:dc:b6:78:
                    66:8e:fe:5d:85:f7:d3:49:ea:61:79:b4:b2:90:71:
                    42:4a:29:d7:97:02:1d:67:60:2d:93:8b:3b:ac:db:
                    50:c7:53:73:f2:ee:2c:e4:36:9b:48:3c:64:b6:11:
                    55:8d:cc:cf:b4:9f:07:d7:ea:67:11:c4:57:93:be:
                    7c:ec:f7:77:1a:fa:9a:66:e9:a3:9a:3f:b0:1e:a3:
                    35:34:60:9e:b9:47:f6:2f:6e:d4:bc:7c:bc:97:39:
                    12:9c:ab:b1:57:76:a6:62:42:b6:89:20:78:68:3c:
                    d9:d6:d1:65:1f:87:1b:d8:ac:3b:6f:2e:30:3b:c0:
                    67:81:48:8c:b8:b6:09:64:27:63:d9:2c:cb:f7:19:
                    2e:ed:1b:12:42:80:21:d3:bc:cb:6c:73:9f:61:44:
                    05:1e:c2:cd:98:63:2c:a8:ee:94:c9:62:47:7c:b2:
                    f4:e4:e5:8e:1b:5c:6b:c5:97:60:55:4c:8c:1f:5b:
                    6b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A5:E3:C8:26:D4:2C:38:A6:F6:B7:75:46:AB:25:14:C4:CF:16:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/d8e2f121-ac47-38e1-9e66-5c93c49ba9ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:76:bf:b6:cc:8c:b2:e0:0d:b3:1f:9a:e6:bf:68:14:57:7e:
         92:1e:4b:90:13:24:a3:6f:a1:f1:06:a5:01:5f:37:cc:ad:2e:
         0e:dd:d6:ab:4e:15:40:bf:ca:04:90:2a:4e:c7:e5:00:20:03:
         e8:14:b6:c2:2f:4b:ba:1e:1a:66:25:21:26:21:9c:19:5d:bc:
         41:e4:21:a8:d4:d8:14:28:3c:01:ef:eb:ee:a4:c1:88:b1:94:
         11:96:10:88:f8:e1:3f:36:84:ad:06:cd:32:c2:6b:a5:4d:3c:
         aa:76:c5:20:37:c0:8c:38:77:ce:45:7a:b1:eb:51:cb:b1:3b:
         41:44:24:81:5a:ac:d3:5f:2f:44:09:cc:62:33:4b:8e:86:3b:
         33:10:74:12:d5:00:c9:44:91:3b:c1:7f:fa:c0:26:38:ec:6a:
         6c:66:a9:0a:ff:95:11:b6:53:49:9c:f3:7b:36:cf:33:57:b7:
         e3:34:71:61:4e:3a:6a:23:8b:de:c9:01:36:ed:68:aa:70:a7:
         8d:77:be:58:3d:6e:01:ff:3f:1d:c5:6a:34:31:3c:f8:7d:02:
         5a:9c:d7:a9:21:13:37:4e:d8:4b:bd:e6:7f:65:eb:c6:b1:2e:
         7d:02:12:10:30:af:8f:b2:12:e2:cb:43:9b:58:d7:09:eb:54:
         70:49:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:07:40 2024 by rpki-client on console-fra.rpki-client.org