Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa
File:                     c1c1cf93-92dc-36ab-b18d-2025357a206f.roa (raw, json)
Hash identifier:          SX5jNMzoIJ2qRWdJIMGngtmF1Isetg1pjKChEyAkIgI=
Subject key identifier:   09:21:D1:4D:4E:64:5B:6C:8A:AC:9C:DA:79:06:27:BD:21:E7:AC:3B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584797E13F8E973EC118056C4074
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa
Signing time:             Sat 19 Oct 2024 13:00:42 +0000
ROA not before:           Sat 19 Oct 2024 13:00:42 +0000
ROA not after:            Fri 17 Jan 2025 14:00:42 +0000
asID:                     212384
IP address blocks:        140.228.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:97:e1:3f:8e:97:3e:c1:18:05:6c:40:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct 19 13:00:42 2024 GMT
            Not After : Jan 17 14:00:42 2025 GMT
        Subject: CN=e41d6474-6e9c-4d6b-a79a-62a1e1b58e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:23:28:e7:46:51:ba:76:0c:77:2f:cf:3b:
                    99:23:a3:58:3a:03:f5:0c:85:97:d8:d0:81:d1:21:
                    8c:e1:b6:ec:2c:20:26:d8:58:01:93:cb:32:62:8d:
                    05:13:57:3d:6e:00:93:39:b5:e3:e9:20:23:a0:8b:
                    b6:3f:4c:d6:44:97:4e:00:0d:7a:d4:cf:86:e8:7a:
                    57:7d:44:01:33:cd:9f:f0:93:ea:ee:63:4d:8d:83:
                    8a:b8:58:80:80:68:0e:d7:e5:60:40:9f:9c:3e:d5:
                    37:10:f6:64:e8:17:9d:80:ee:64:ca:69:1c:b5:af:
                    f4:f4:c7:b6:8b:65:f7:af:22:cf:7e:3e:18:e6:a3:
                    1f:7d:0f:77:d8:f8:c5:8d:64:70:d6:3f:f6:c2:b0:
                    e5:79:f4:b1:2b:d9:6d:8b:92:31:79:68:9d:88:d3:
                    b9:7f:db:f5:e3:8c:c1:9e:61:87:48:9c:d7:dd:87:
                    f0:fe:07:d0:24:51:4e:46:6a:f0:ea:3e:28:37:73:
                    ee:8c:2a:5a:c0:01:f8:7c:51:8d:17:c6:33:d3:52:
                    7f:2a:b9:84:d9:d4:05:f0:d8:e8:35:70:20:07:5d:
                    10:17:fc:1e:fb:0a:f5:77:04:05:9c:54:9c:65:3b:
                    6e:b7:71:21:4b:a8:78:bc:0a:be:8a:d5:25:e4:9a:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:D1:4D:4E:64:5B:6C:8A:AC:9C:DA:79:06:27:BD:21:E7:AC:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/c1c1cf93-92dc-36ab-b18d-2025357a206f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:5f:ad:3a:6e:f9:03:94:db:e2:5d:f6:fc:f7:57:04:60:55:
         2d:a4:7e:77:05:92:61:3e:e4:6c:8d:7e:45:59:3c:f3:08:4a:
         6b:44:67:84:46:f3:3d:ab:e0:1c:08:02:cc:9c:7c:88:22:e0:
         be:6c:f5:e3:ed:f7:12:9c:6e:69:4c:19:62:3b:b3:6c:0c:e6:
         81:ec:2c:6a:c3:7e:46:b4:5c:94:3f:9c:a4:c4:6e:c1:c0:8c:
         01:f7:f4:5a:eb:6a:db:72:fe:d1:67:92:4f:87:93:7c:ea:41:
         55:76:24:c3:af:6e:57:a9:b8:f7:9c:14:a4:63:34:15:74:5a:
         ee:1b:b8:2b:ce:a1:7b:5d:8c:52:a7:67:f6:18:87:c4:76:f6:
         87:96:79:4d:28:7a:ce:27:5c:10:c1:97:d7:84:32:f0:06:35:
         48:74:d2:0a:10:36:c2:24:ff:bd:93:cf:c0:53:33:52:57:92:
         a4:da:14:8e:56:87:8c:47:43:85:b3:1f:b6:59:4d:bf:5e:6f:
         fc:3d:0b:e8:e2:16:ed:5a:98:63:56:5a:c7:19:b6:0f:c8:76:
         ea:67:3c:5f:2b:30:f4:96:11:73:df:55:a3:bc:7d:c1:00:d7:
         68:96:ef:f3:f8:76:98:be:84:a0:bd:d5:b9:c5:c8:87:1d:84:
         61:64:c5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:18 2024 by rpki-client on console-fra.rpki-client.org