Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
File:                     08ff9662-4609-3d2e-af6f-7a8538b797b9.roa (raw, json)
Hash identifier:          UyE+ZHwIZue5BVjwGpHsZ/CxuL+JtjfwEXESRIyG/1o=
Subject key identifier:   96:3F:5A:E8:25:BD:04:D2:CD:41:DC:8C:0E:0D:27:41:F5:A8:39:EF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B13426C317C2DA9C85D818
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.217.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:34:26:c3:17:c2:da:9c:85:d8:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=0dc016df-65b9-441a-8a24-169379674bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6e:63:28:62:f5:35:7d:72:9d:d8:81:53:38:
                    69:58:af:ab:02:db:cd:85:aa:b1:62:bf:7c:8c:81:
                    1c:f9:81:86:63:e5:14:48:5d:e5:77:ce:33:f8:74:
                    61:9b:c3:ac:1f:d8:15:9e:6d:90:71:1c:57:4e:a4:
                    0e:41:90:f4:d8:bb:e3:7f:52:6a:d5:6f:b1:ef:48:
                    06:2c:46:ba:3b:79:7b:e3:2e:3a:77:92:5b:6f:48:
                    e0:e4:d2:a9:df:a6:ea:b0:58:f3:da:df:6b:23:9d:
                    36:3e:6c:75:88:fb:d8:58:e6:01:d1:e7:35:87:31:
                    7c:5f:b8:01:8e:9d:8b:e6:8f:08:e6:11:be:36:5b:
                    c7:fc:e5:e6:61:53:81:89:e7:76:4d:7c:ab:fd:ea:
                    50:0c:63:11:f6:22:a8:d0:7a:7b:3a:18:39:43:e0:
                    a8:02:f9:4d:f1:30:25:9d:26:ed:a6:8a:27:86:e1:
                    7b:10:af:38:89:49:f4:ea:35:b7:35:0c:ef:13:f6:
                    6d:34:14:6b:93:49:75:df:4f:f4:05:6b:87:5c:6f:
                    6f:61:0c:09:a6:fd:5b:76:ed:7a:f3:f6:c8:2a:9c:
                    49:90:5d:a2:8a:e8:e6:d5:82:d1:f1:e3:96:42:20:
                    cc:3d:b2:01:61:4b:c9:71:49:99:2c:89:f5:71:c1:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3F:5A:E8:25:BD:04:D2:CD:41:DC:8C:0E:0D:27:41:F5:A8:39:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/08ff9662-4609-3d2e-af6f-7a8538b797b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.217.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:1d:ec:64:97:1f:c2:19:b3:cb:30:3c:57:2d:8f:8c:34:ce:
         c1:c6:b0:3e:d1:31:f4:cf:77:82:d4:3b:33:86:38:2b:99:d8:
         e7:69:9e:93:71:e1:4a:da:dd:f7:fa:ea:24:d2:79:2d:0d:e1:
         61:43:40:1b:0a:28:26:1e:49:2c:ff:b8:73:cc:b9:71:a0:fc:
         69:c0:bd:15:c1:25:ed:47:05:e7:aa:42:db:0c:64:31:41:2b:
         1d:40:66:e6:33:f3:20:d2:48:2f:00:08:0a:b8:c9:bb:82:cf:
         d4:7a:13:c7:b9:7d:a5:fe:8e:3f:cb:d0:aa:85:7b:e0:fa:11:
         a3:1c:dd:3b:8c:c2:38:e6:51:33:2a:08:66:13:2a:78:33:0a:
         34:02:c8:70:51:5e:0f:0f:06:a9:e9:56:14:b0:2c:20:97:3f:
         ef:c3:d4:61:ef:cf:19:e2:f9:60:9e:6c:78:ea:71:ba:55:9a:
         cf:51:77:57:34:77:55:cd:e9:0c:0b:23:f3:37:30:b7:29:5a:
         9d:2c:e4:d2:75:64:3a:b5:43:d5:d5:22:89:34:e9:5b:69:8a:
         38:62:2d:77:8c:de:0b:d0:b1:3f:ce:d4:e9:c0:ef:f8:b5:b8:
         93:73:e1:3f:ba:99:c1:06:e8:0b:5d:db:7a:20:b7:07:d0:82:
         9b:22:98:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:28 2024 by rpki-client on console-ams.rpki-client.org