Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
File:                     1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa (raw, json)
Hash identifier:          DYnCC+Ngb1lWKMDtBwl6iPhkvpG03rsC7MN4DDfixCY=
Subject key identifier:   50:8E:40:A2:30:9E:C1:16:96:16:93:CF:0E:45:B7:E1:07:5A:9A:47
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B13386DB4EADF3F84D2240
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.208.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:33:86:db:4e:ad:f3:f8:4d:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=799e2b90-4ead-4c3d-89ff-95a2330b0468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:aa:89:97:da:9b:a2:2d:6f:0d:c6:3e:50:
                    24:e4:64:56:fc:40:2f:5d:9b:52:ca:8d:41:81:7a:
                    a8:84:78:64:b5:80:57:d9:32:7a:57:3d:a8:34:67:
                    79:32:fe:87:dd:ee:1a:2c:b5:eb:82:cb:aa:3b:89:
                    7a:de:f0:6d:c1:1d:60:ae:75:c5:f7:df:93:07:9b:
                    c3:a6:66:94:16:33:bf:6b:d9:9f:c9:05:e6:84:5f:
                    73:9c:58:19:13:68:e3:26:da:17:79:cd:d8:c8:34:
                    34:42:3d:9a:08:a5:46:04:0b:8e:fd:bf:aa:81:26:
                    84:94:5d:e9:e2:dc:ae:36:48:f7:66:d5:80:31:b3:
                    25:d6:0f:51:bf:5e:9f:c5:da:8e:fc:d8:89:97:c7:
                    af:09:86:02:8d:d9:70:f0:6c:44:d8:ff:cc:90:01:
                    9d:20:b8:d4:b1:ca:ff:36:4f:94:da:87:54:9d:c9:
                    85:54:f9:db:85:f7:c5:16:f0:ea:64:5d:ba:71:e4:
                    cd:34:53:10:8a:8e:0e:96:5b:ec:47:64:19:71:73:
                    2b:40:70:90:00:af:24:e6:d5:fe:42:ef:a3:da:81:
                    b5:ed:c6:1c:d4:9b:7e:26:56:c7:6a:8d:86:14:b5:
                    d3:17:bc:91:11:cf:d0:05:57:be:7e:39:59:be:6b:
                    7e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:40:A2:30:9E:C1:16:96:16:93:CF:0E:45:B7:E1:07:5A:9A:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1cdbd68b-6c52-3f16-b643-c3f5646a95b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.208.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:65:7b:84:e4:a2:3e:c7:b6:66:47:2d:30:ea:d1:2b:c5:0c:
         d4:69:65:ab:33:86:e7:5b:c9:79:1c:54:48:78:f2:21:4d:a1:
         4e:1b:2c:12:81:ce:27:ad:03:90:ac:fa:bf:11:db:18:fa:db:
         ba:4c:3e:a5:08:a7:ea:f8:1f:54:2e:1a:c8:9c:58:32:83:38:
         42:ef:95:ce:6d:25:3a:4f:17:42:3d:69:ea:3f:3f:1e:1c:3e:
         83:b1:49:53:9b:5e:86:b0:31:42:af:aa:4e:af:07:2e:b8:8a:
         cb:9d:89:b6:5e:1a:95:e9:03:4b:21:b6:43:a8:10:62:ee:88:
         5b:da:6d:26:dd:92:c9:31:95:61:5b:72:6e:ea:c8:cd:ab:68:
         1b:b3:2c:a6:02:27:b5:d4:12:5e:60:e7:51:46:9d:48:0d:d0:
         ed:7f:a5:94:dd:99:b0:80:6c:fb:3d:74:a8:d5:ac:f0:bb:5a:
         f2:46:2f:01:c4:6d:9e:93:4a:ae:42:ca:5c:62:74:a4:b0:96:
         cc:ca:16:37:9a:da:90:19:b8:25:52:7c:2a:b5:05:22:d1:31:
         e6:24:ed:4c:f2:6a:1d:f0:45:66:97:f4:da:53:37:65:ad:ce:
         d1:02:89:8b:e5:c2:5f:03:c7:09:2a:66:7e:1f:d8:9f:7b:08:
         46:65:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:32 2024 by rpki-client on console-fra.rpki-client.org