Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/7cdf5536-189f-308d-89bf-41b8462c9a49.roa
File:                     7cdf5536-189f-308d-89bf-41b8462c9a49.roa (raw, json)
Hash identifier:          OvQsOSwU6fsWvXk1quqAvhLsaHJPFrkBTiusGDMyOpU=
Subject key identifier:   FB:C2:FD:5C:D0:D6:71:07:4D:7A:9D:1B:B6:5A:9B:E9:8D:85:64:E0
Certificate issuer:       /CN=5c644008-56e0-45e0-a9ef-9dc182e137c0
Certificate serial:       010D0C9F432858476C09D30684DC83EECA528980
Authority key identifier: 6D:0A:A9:EC:65:D5:A0:D9:F0:0E:B1:28:42:B0:11:93:13:20:11:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/7cdf5536-189f-308d-89bf-41b8462c9a49.roa
Signing time:             Thu 03 Oct 2024 20:07:03 +0000
ROA not before:           Thu 03 Oct 2024 20:07:03 +0000
ROA not after:            Wed 01 Jan 2025 21:07:03 +0000
asID:                     62809
IP address blocks:        140.235.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:6c:09:d3:06:84:dc:83:ee:ca:52:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c644008-56e0-45e0-a9ef-9dc182e137c0
        Validity
            Not Before: Oct  3 20:07:03 2024 GMT
            Not After : Jan  1 21:07:03 2025 GMT
        Subject: CN=2954308b-f263-4645-8513-3530f0b98e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:3b:e7:22:47:a3:df:94:81:59:8c:1a:25:
                    09:94:42:90:0c:f1:e9:d9:d7:6e:e2:0b:e7:40:53:
                    ab:da:e8:e9:18:d5:d9:03:4b:de:ba:60:6c:ec:2e:
                    03:cf:2e:a0:78:d8:d7:c9:9e:3e:b4:1a:7a:35:78:
                    c7:92:34:b5:5c:43:7a:63:55:19:cc:1b:54:1a:0c:
                    cc:7a:ed:7a:3c:30:94:4c:fe:50:0a:de:91:78:d3:
                    c2:36:92:c8:4c:62:4a:0b:07:ca:d8:7f:b4:1b:f5:
                    09:26:67:69:93:35:df:6a:50:c5:15:91:6f:26:74:
                    81:34:28:1a:a2:66:c0:5a:d1:72:b6:b3:72:5c:45:
                    78:4e:c3:8d:a5:d6:e4:c3:67:15:7c:f2:9e:48:96:
                    49:88:5a:43:2a:e4:85:5e:5b:81:d5:f8:ef:82:52:
                    bc:a5:a4:a5:de:74:df:5f:12:aa:9e:d7:35:7c:78:
                    8f:70:b3:84:b3:e1:29:68:90:ad:66:6d:ab:64:ba:
                    92:33:83:2e:79:67:e7:28:1f:7d:60:ec:72:53:65:
                    0a:16:1f:a7:84:a6:22:2a:c9:ca:f1:02:cc:36:23:
                    22:db:97:ce:c9:16:aa:31:02:c6:e2:8f:d1:9a:c2:
                    64:13:4a:d1:93:f3:59:47:82:ce:25:b1:70:9b:29:
                    3b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C2:FD:5C:D0:D6:71:07:4D:7A:9D:1B:B6:5A:9B:E9:8D:85:64:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/7cdf5536-189f-308d-89bf-41b8462c9a49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0/5c644008-56e0-45e0-a9ef-9dc182e137c0.crl

            X509v3 Authority Key Identifier:
                keyid:6D:0A:A9:EC:65:D5:A0:D9:F0:0E:B1:28:42:B0:11:93:13:20:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5c644008-56e0-45e0-a9ef-9dc182e137c0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:22:b6:2e:ca:61:d6:a7:6c:43:84:44:d5:a9:03:60:f8:
         29:9c:a4:78:62:46:8e:e3:99:20:01:0e:66:c8:1c:d6:96:b7:
         8d:b2:7f:b4:1b:1d:19:d7:e6:5d:3c:91:86:bf:2b:f3:7b:8f:
         ab:52:7d:c9:a6:b6:9a:34:92:22:97:2d:60:5b:1a:39:e5:8c:
         c4:91:c0:66:3a:36:aa:6a:fa:ad:98:0e:a6:78:2a:f7:15:09:
         90:f5:d5:ec:85:d4:af:db:c7:b9:83:04:51:29:7d:41:33:29:
         85:e4:79:23:74:65:71:5f:3a:cd:ef:13:b8:76:c9:0b:73:aa:
         53:7f:d0:2f:05:76:4f:43:be:c9:8f:99:c7:a9:d1:4d:ee:ff:
         2e:75:93:26:1d:02:13:19:91:0b:a3:11:11:3f:ab:a3:19:d4:
         da:7a:a2:7b:c0:09:86:d4:f7:9d:63:92:ac:99:b6:71:33:b0:
         0d:77:77:99:b6:6a:5b:64:02:73:31:97:03:f5:20:a5:27:70:
         d8:a2:4c:56:1e:24:09:94:66:1f:e3:34:cd:31:32:68:f5:53:
         1f:5e:34:a1:70:1b:e9:64:ad:9d:3d:2d:60:ad:62:fd:95:b8:
         19:0e:b8:cd:08:77:f4:fe:d8:c4:65:6f:26:14:61:89:fd:d3:
         d6:a0:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:50 2024 by rpki-client on console-fra.rpki-client.org