Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
File:                     128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa (raw, json)
Hash identifier:          JLd24HJfPqNy1nyHweGdKIWUE33AliMcNsC67etX2lo=
Subject key identifier:   BD:49:61:7A:5F:45:D6:B4:6E:F8:D6:21:CA:B5:07:DE:62:9B:75:AB
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12FFF2E07F25C58DB4C80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.220.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2f:ff:2e:07:f2:5c:58:db:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=ed4db0da-3c8c-4ffb-a0d0-5e597cb46cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c9:b9:aa:d8:85:00:6f:fb:46:5a:07:96:e2:
                    22:71:78:3d:f2:5a:9a:01:72:03:1b:c3:23:33:dc:
                    35:c8:95:68:f4:81:dc:1e:25:51:d3:89:d6:b2:6a:
                    65:bb:c4:1a:cd:fe:07:ae:db:dd:67:a1:be:5f:39:
                    7f:93:b3:29:99:85:38:a8:38:af:91:8b:23:b2:f4:
                    69:09:10:47:fc:9c:e7:89:ae:6b:9d:91:ae:b4:f8:
                    2a:d0:5e:23:1d:56:4a:18:54:e0:82:54:58:bc:95:
                    a0:74:e9:56:5c:f4:58:fb:b7:d2:00:ee:ba:2c:82:
                    57:cc:82:92:83:b6:d9:a1:0d:3e:27:e4:1e:9f:06:
                    c1:72:3c:c2:40:50:89:14:57:92:18:44:6f:be:ee:
                    3c:f4:95:43:91:30:e0:1c:48:0f:3c:5a:ca:94:a0:
                    3c:3f:f8:d3:70:eb:7c:56:0b:cb:73:63:f3:3a:3b:
                    ba:2b:89:14:c0:bd:fb:29:4d:be:96:f7:02:09:ae:
                    8e:8e:2d:b9:0c:85:35:c8:20:a8:cc:39:92:83:b7:
                    68:ab:1c:fb:43:d3:81:bf:27:0d:4c:1b:bf:39:38:
                    68:24:d6:37:da:77:56:cd:15:b0:b8:69:99:03:dd:
                    06:4d:f4:aa:5c:4d:f4:6b:5a:07:84:cb:aa:f4:6e:
                    3c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:49:61:7A:5F:45:D6:B4:6E:F8:D6:21:CA:B5:07:DE:62:9B:75:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/128c9924-d5e5-3a45-97db-6c4d06fa5bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.128/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:0a:b1:b9:39:74:b0:97:5c:e0:17:13:a2:79:06:17:04:
         4f:47:7b:84:58:15:cd:40:f9:b8:a4:b3:4f:da:04:f5:3e:0f:
         61:0a:38:0e:69:70:c0:46:fa:ee:ca:57:ab:8b:2d:d1:7c:f4:
         09:0c:14:25:d1:dd:8c:7c:37:fa:e4:e9:3c:12:8e:e5:b8:99:
         5a:b7:3a:e2:c1:1a:39:a8:7d:64:e6:3b:f9:9e:1f:95:30:d7:
         62:0b:2a:5c:99:0c:95:97:a2:d4:32:27:a6:4c:62:79:c3:63:
         73:15:a7:2d:ca:9d:d4:e1:b5:de:98:75:8c:b4:b7:d7:11:8d:
         d1:50:58:eb:63:26:aa:4d:2d:d3:01:a5:1b:ac:58:88:b0:e9:
         69:bf:c2:a9:c9:07:22:dc:7d:54:7c:28:26:e5:9d:bf:a4:aa:
         0e:81:97:b2:3b:3b:74:02:22:21:fe:79:f2:28:5f:0a:2c:fd:
         00:e0:95:9b:e6:7e:c1:b6:b7:4e:14:7b:9b:7e:46:18:5f:8e:
         ce:e2:b1:7e:9c:ae:ee:78:31:5a:56:1d:e8:eb:c2:e1:32:10:
         2d:5c:55:98:5c:73:9c:c8:0d:b1:45:87:01:04:ff:2d:04:2f:
         95:21:54:7e:7d:4b:9a:7a:ce:e4:20:f5:91:41:82:3a:c0:4c:
         c2:8a:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:28 2024 by rpki-client on console-ams.rpki-client.org