Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa
File:                     6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa (raw, json)
Hash identifier:          bJ9Bu000ZjxeZs0WDjKf2mI31oKk/QGEyJOeFT+x0Pc=
Subject key identifier:   C0:79:79:7D:03:D3:86:81:3A:F3:16:19:B1:80:BC:DD:27:69:C3:22
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584788865457BAA88C362C60DC00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     7029
IP address blocks:        174.140.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:54:57:ba:a8:8c:36:2c:60:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=e4faa4e5-48f8-4b50-97a3-5321f261249b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:19:c1:d6:5c:af:84:0c:34:4b:e5:f7:ad:f6:
                    d3:9e:dd:5a:a5:57:a5:56:14:fe:c0:80:4e:be:55:
                    a6:59:92:8d:93:b1:3c:aa:9c:18:ca:9b:18:82:22:
                    67:65:71:f1:ba:70:4a:6c:9c:f0:32:78:bb:a9:26:
                    e5:41:1e:56:52:ae:d2:f5:55:12:89:ab:a3:dc:1f:
                    23:34:30:be:e2:52:6d:b3:e1:ef:3e:86:64:c2:e0:
                    57:ec:31:06:c5:8e:c9:e7:a3:da:e6:e2:cc:33:af:
                    37:92:a3:b6:93:12:f0:95:fc:67:b8:4b:c8:06:56:
                    9f:54:14:3b:01:5e:76:61:c6:da:7b:c2:3a:2f:fd:
                    43:2f:b3:0a:b6:88:e1:eb:fd:51:60:95:7e:c8:76:
                    8f:0d:d4:b9:4d:d3:81:d5:10:d0:64:b4:20:34:5a:
                    dc:49:b7:94:ec:79:3f:d5:de:b0:7b:cb:85:b6:62:
                    83:a4:a6:f7:b7:05:2e:4b:b6:c0:bb:18:24:e3:d1:
                    44:10:fe:49:02:79:ba:3e:6d:44:60:09:16:af:fe:
                    98:08:d6:20:d9:e6:af:20:55:31:df:15:77:02:9e:
                    0b:06:f2:1d:f4:91:86:bb:50:6f:51:1a:f5:61:2e:
                    e7:46:a6:a6:15:74:2f:29:04:c6:74:50:82:c4:7d:
                    6e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:79:79:7D:03:D3:86:81:3A:F3:16:19:B1:80:BC:DD:27:69:C3:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/6baf6a96-91ee-390c-bb00-213b5e27e1f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:0a:f4:6e:31:e1:7f:87:cd:e0:b0:89:bb:70:d5:6b:57:f1:
         08:a0:32:39:14:cc:dd:81:7b:b6:9f:09:a2:fb:7d:8f:76:ba:
         2f:de:e5:5b:89:47:a4:d0:bc:3e:76:c6:c8:ed:53:7c:9c:93:
         6f:f5:23:62:7a:96:78:02:67:e1:b6:41:9a:f3:9a:4c:fc:1c:
         89:70:b8:51:90:a3:dc:70:12:d7:8b:5f:e1:11:a8:3b:e8:ab:
         11:a2:1a:40:ac:59:6c:d2:a8:26:c0:60:8e:c2:ad:c1:d9:d3:
         8f:e8:5a:e3:95:91:92:68:e8:8a:b7:64:43:e7:6d:ef:20:e7:
         65:7f:54:12:75:20:26:21:45:09:92:4f:91:14:ba:b7:11:7a:
         d9:ce:1c:fc:9c:d8:7e:fa:de:5c:dc:27:29:97:e6:df:48:9e:
         85:d2:b6:ca:d0:63:09:10:49:f5:70:22:fb:a2:53:bd:8a:16:
         68:2d:15:9f:01:b7:4d:2c:75:75:d3:64:2a:94:a5:63:d1:96:
         b4:4f:d2:da:74:33:9e:9e:96:e9:58:e2:2f:02:db:a9:b6:3f:
         48:cd:1d:1c:2c:d3:fe:ee:7c:c2:32:d5:cc:59:fc:02:24:3e:
         38:da:48:6c:23:99:49:79:da:56:4e:ef:a9:8d:c9:71:bf:66:
         27:2e:0b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:29 2024 by rpki-client on console-fra.rpki-client.org