Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8467c74f-8a48-3985-aa08-bc580b07c082.roa
File:                     8467c74f-8a48-3985-aa08-bc580b07c082.roa (raw, json)
Hash identifier:          s49IbBpPooKALQw7+DhOWLQCqaL6uSnmkvZTBvBKB4c=
Subject key identifier:   25:58:23:6A:6D:A7:FD:03:79:8A:5E:24:49:63:FD:DC:61:9E:FC:88
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858477BF6665A9EE10CF7DC002500
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8467c74f-8a48-3985-aa08-bc580b07c082.roa
Signing time:             Wed 09 Oct 2024 13:00:42 +0000
ROA not before:           Wed 09 Oct 2024 13:00:42 +0000
ROA not after:            Tue 07 Jan 2025 14:00:42 +0000
asID:                     174
IP address blocks:        140.228.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:7b:f6:66:5a:9e:e1:0c:f7:dc:00:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  9 13:00:42 2024 GMT
            Not After : Jan  7 14:00:42 2025 GMT
        Subject: CN=6b32394d-bb3a-4836-9ad1-7ee7cd85efce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:bb:dd:a2:b7:22:82:de:b4:fd:33:6b:5b:
                    e0:c0:9e:38:6b:0f:97:41:fd:8d:84:32:cf:47:33:
                    3e:de:bf:8d:ee:9e:31:fc:37:b3:d8:20:64:35:af:
                    42:2c:6d:75:b9:9d:48:bf:58:eb:c3:a1:e8:1a:11:
                    a8:a4:ba:63:7c:23:0b:fc:b6:de:34:8d:7c:1b:3f:
                    3d:28:2a:85:bf:2a:99:0c:a7:95:4f:6b:c6:c0:61:
                    f2:df:e5:93:01:bd:71:29:bf:38:5f:02:17:e6:3a:
                    fb:73:d6:06:ea:2c:d9:3f:07:f6:c7:fa:23:2a:07:
                    ff:ba:09:b5:45:98:9f:6a:00:c9:bd:e2:12:5f:50:
                    51:55:f6:db:ae:a1:3a:d7:41:a4:4d:3a:dd:2c:5e:
                    ce:10:c9:0b:de:b9:e9:76:3c:66:6e:aa:33:42:c3:
                    ab:5b:9b:b8:39:72:a1:f7:22:70:f4:36:d0:af:7b:
                    26:f1:f8:67:27:79:49:ff:58:d4:8c:e7:3a:16:2f:
                    c4:68:2f:a7:d7:8d:e3:ce:fa:ae:34:f5:51:23:4b:
                    46:78:95:a6:a6:bf:42:92:8e:91:01:8f:f7:0e:0d:
                    e8:32:c8:be:24:d0:eb:73:00:2b:96:a0:fc:ab:c7:
                    15:94:de:5d:6e:5c:cc:a3:92:bf:74:52:ee:69:bd:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:58:23:6A:6D:A7:FD:03:79:8A:5E:24:49:63:FD:DC:61:9E:FC:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/8467c74f-8a48-3985-aa08-bc580b07c082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e4:dc:8c:9a:4b:13:31:4d:ea:55:43:4d:1c:dd:e5:9d:3f:
         a4:f0:9b:6b:c5:43:63:4b:d7:6f:b3:85:82:5f:6a:b1:61:a1:
         53:25:7a:ce:1c:5a:49:5c:8e:11:dc:ea:36:67:8c:ea:b5:9c:
         94:68:77:f5:09:7a:ea:30:d2:23:9d:06:8c:b8:fe:c8:81:c5:
         7b:de:6f:c7:a1:e5:7e:f4:27:6a:c1:55:3c:ba:22:9d:e4:7b:
         23:14:e1:3c:be:c1:d9:3a:89:5a:3a:72:5a:d1:06:06:0a:d2:
         4b:45:a3:c5:3d:d6:1b:c0:5d:fa:6d:81:8d:a8:1f:9f:2b:d3:
         eb:3b:98:94:cb:a4:9a:1e:c3:0c:52:c8:73:60:bd:92:2c:fc:
         06:23:19:cf:d9:4d:e6:38:9b:13:21:83:24:3d:dc:ad:85:55:
         72:24:2d:48:81:61:23:25:42:8f:14:e0:ae:d3:7f:b1:49:a8:
         16:b8:e7:31:d6:10:be:98:9c:29:a7:a0:4d:43:5e:91:ea:96:
         b2:df:06:25:e8:50:f8:09:a3:66:18:2a:0f:13:0e:f1:6e:58:
         33:63:f9:79:b4:4e:cf:36:88:a3:df:10:d2:a1:4c:56:0f:a2:
         c2:1b:b7:76:d6:3e:ef:16:cb:e0:89:bb:7d:a0:05:66:62:73:
         4c:13:8c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:22:34 2024 by rpki-client on console-fra.rpki-client.org