Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/23f444ce-bd41-32a0-ba81-bec3661df9cf.roa
File:                     23f444ce-bd41-32a0-ba81-bec3661df9cf.roa (raw, json)
Hash identifier:          N4zK5P1h8FAOnNY2mjBm0exb3Iem0BqmDmkvSe3vpZo=
Subject key identifier:   41:E6:10:78:53:34:D4:79:71:16:27:81:BC:96:AC:F3:F7:71:F7:78
Certificate issuer:       /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial:       010D0C9F432858478CB692D3088214C3A3F53C00
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/23f444ce-bd41-32a0-ba81-bec3661df9cf.roa
Signing time:             Tue 15 Oct 2024 13:00:47 +0000
ROA not before:           Tue 15 Oct 2024 13:00:47 +0000
ROA not after:            Mon 13 Jan 2025 14:00:47 +0000
asID:                     399494
IP address blocks:        165.140.44.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8c:b6:92:d3:08:82:14:c3:a3:f5:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Validity
            Not Before: Oct 15 13:00:47 2024 GMT
            Not After : Jan 13 14:00:47 2025 GMT
        Subject: CN=778fbf93-d42f-4511-a7ae-75f9aefc1a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9a:41:4f:62:61:6b:f3:fe:74:aa:9d:6a:74:
                    29:d5:11:2c:c7:ac:55:88:2c:37:4f:3f:ce:ea:47:
                    a4:0d:13:4e:b0:7e:86:13:35:1a:5c:c0:01:1e:5d:
                    09:a5:2b:6b:57:f2:5d:84:b5:d8:00:32:ba:e5:00:
                    c5:be:7b:a4:78:59:07:5a:13:70:31:ae:88:7d:0c:
                    25:4c:10:81:e4:86:57:60:2b:67:42:1e:b3:19:74:
                    84:a1:cc:32:e9:cc:d4:a1:04:69:e1:d2:36:df:20:
                    92:99:39:f2:b2:90:c4:d5:b9:c4:4f:0f:4a:74:1c:
                    a0:e4:75:ca:b3:47:20:07:af:45:33:70:78:ae:a4:
                    13:12:9d:7e:44:68:6e:42:80:60:f9:1e:fd:fb:4d:
                    97:c8:1f:dc:aa:41:96:2e:b6:09:15:5b:05:00:3a:
                    60:b5:fb:1b:a1:f0:60:63:b5:f2:20:08:eb:bf:85:
                    27:8c:cd:0d:18:c5:d8:18:3b:72:a3:77:7c:9d:19:
                    ed:67:ae:39:29:a1:31:4c:b3:5c:19:1f:0a:21:24:
                    9b:b9:5d:6f:da:21:7b:e2:43:08:15:b8:9f:11:bf:
                    9c:39:f4:45:90:cc:15:f8:32:18:26:c3:85:31:51:
                    ca:34:a8:d8:8f:9f:71:37:d8:d6:a2:ee:2f:61:9c:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E6:10:78:53:34:D4:79:71:16:27:81:BC:96:AC:F3:F7:71:F7:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/23f444ce-bd41-32a0-ba81-bec3661df9cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl

            X509v3 Authority Key Identifier:
                keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:ee:82:17:0b:16:5d:d6:c5:e2:b7:3f:22:d5:05:19:82:
         4c:9a:db:a7:30:2e:7b:89:84:f1:42:e4:b1:86:b7:71:f7:4c:
         02:59:15:24:ed:32:73:52:a4:9a:1d:4e:43:c0:1e:9d:12:2d:
         40:09:9f:34:7f:50:2c:16:f8:12:1b:0e:7c:97:74:94:93:33:
         f2:67:62:a9:89:4c:be:1e:3e:0e:8f:42:10:3f:76:87:e9:00:
         8d:b5:bb:28:90:cd:3c:70:b7:a9:a0:b6:21:eb:6a:35:53:9d:
         b0:64:73:5e:5d:d9:2c:0e:56:8d:36:d5:23:3f:7d:11:93:4b:
         ea:32:7d:bc:c6:c9:f7:23:39:ae:52:65:02:5a:6a:f2:9e:7c:
         0d:ee:07:96:8e:01:2e:41:9a:b6:71:8b:30:eb:85:70:11:33:
         53:f6:48:aa:88:dc:12:3a:63:87:28:6b:8c:66:fb:41:ce:34:
         67:20:ab:d0:58:43:94:73:93:82:50:38:c1:91:ad:45:4b:9e:
         7d:54:2d:fd:67:5a:5a:26:b0:1d:72:52:30:81:81:d6:c2:7c:
         f4:62:df:6c:dc:a4:11:48:c5:4d:66:2b:8c:12:90:1b:04:14:
         50:2d:fa:a7:c2:77:05:54:11:2e:56:04:63:7f:24:c2:bf:14:
         9b:4e:93:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:19 2024 by rpki-client on console-ams.rpki-client.org