Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
File:                     c238fd06-6a67-34b5-bec5-9385c7c12667.roa (raw, json)
Hash identifier:          R7tksSzl0nzsVh10dWAu/C4dr8T22W73aBbaDtB72a8=
Subject key identifier:   72:15:76:18:E3:8D:93:BC:62:D8:B8:D2:01:4C:8C:E6:45:5B:13:1E
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F43285847C3448AB2A050DE1EFC709480
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     2381
IP address blocks:        140.189.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8a:b2:a0:50:de:1e:fc:70:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=26d3c7a3-c331-4d5d-a268-4c76e6c2a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:30:d2:75:3b:c1:9d:0b:fc:62:06:6f:f9:
                    7f:be:a0:9a:da:b0:55:f6:95:e2:ea:6d:2c:1d:16:
                    c7:2c:6a:be:52:e8:bf:16:61:45:9b:13:41:12:12:
                    fd:1a:7b:20:9d:b2:15:55:09:5d:3a:ad:2e:a2:1e:
                    96:d0:89:51:72:46:a2:b0:32:31:bc:d6:ea:c6:19:
                    7c:c4:4b:c1:12:be:35:d3:c0:0a:da:35:db:3a:12:
                    1f:a2:1e:da:c0:c3:27:7b:45:97:70:e5:13:05:53:
                    f7:e4:f4:04:1e:03:57:1a:2d:eb:28:1f:c6:d8:e6:
                    82:f1:3d:b7:80:dc:ff:81:b8:94:b5:d3:e7:ee:57:
                    16:6d:51:be:4e:f7:1c:3c:f6:1a:32:6c:dd:d7:68:
                    a2:a6:d3:93:bc:f5:69:7a:bf:2d:73:f4:d3:97:23:
                    b2:67:34:cb:8b:0c:bf:92:e8:3f:07:da:df:fa:13:
                    c0:dc:18:66:5d:d1:6a:c4:6d:39:3b:9c:65:d0:f8:
                    56:e9:c4:a0:09:90:10:14:18:41:5d:10:df:7a:7d:
                    bf:2e:34:4d:43:d2:5d:11:c5:e0:11:95:a4:f4:3d:
                    69:7e:7a:73:b8:49:74:96:91:18:ca:59:88:41:cb:
                    44:a5:ca:f7:f0:6f:26:a0:a7:0b:f1:9d:61:ec:d8:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:76:18:E3:8D:93:BC:62:D8:B8:D2:01:4C:8C:E6:45:5B:13:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/c238fd06-6a67-34b5-bec5-9385c7c12667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.189.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:84:76:8d:ae:d1:a8:9c:44:a1:eb:d8:c9:ca:00:e0:51:47:
         70:a9:87:e7:ee:d4:93:82:25:59:82:04:cc:4f:17:7b:44:24:
         2d:67:32:9b:cb:45:c8:8d:cb:46:23:46:6a:02:6d:20:90:eb:
         df:9e:08:07:e7:62:28:14:4d:88:13:92:6a:f1:64:39:ed:9b:
         f8:77:e9:43:cc:d7:77:1d:bd:fc:c3:87:f3:17:43:80:2b:c3:
         52:78:ed:bd:91:26:7c:9f:a6:a4:e5:db:6c:f8:e0:8d:4a:e9:
         0b:2c:ec:84:e2:e8:e1:66:a2:e7:16:63:75:a5:b5:0e:d6:03:
         8b:e7:05:64:81:ca:58:d0:f0:88:ff:b7:34:0e:f9:d1:59:61:
         b1:b3:d1:e7:d7:3b:95:ac:32:bc:30:bd:34:8e:ac:5d:97:45:
         bc:98:3c:35:95:1a:bb:6d:f5:81:03:6d:ff:98:0e:cf:29:ad:
         4f:85:6b:85:4d:55:5c:df:49:ef:c2:a0:5d:1b:86:97:20:db:
         1d:8c:a6:8b:af:af:4e:a7:11:06:3e:1f:af:5e:d9:0d:3b:be:
         b7:37:0b:c3:45:6c:aa:5f:ea:25:ab:c3:8e:95:4b:dc:4a:1a:
         b3:35:13:55:a1:e2:e7:2c:9b:8f:e2:a7:87:7c:cb:60:04:04:
         ed:3e:1a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:48:03 2024 by rpki-client on console-ams.rpki-client.org