Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2096e6bf-308d-3465-8056-2a503fa67e10.roa
File:                     2096e6bf-308d-3465-8056-2a503fa67e10.roa (raw, json)
Hash identifier:          W2gbanvVq3uq5ubG/uQn1c7C8u3HKmuBChsSlY+eNGk=
Subject key identifier:   6F:4C:A7:AD:0C:28:33:66:3E:C8:76:EA:DE:88:C3:6A:F9:46:E0:62
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B13414E17A6C5109E86320
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2096e6bf-308d-3465-8056-2a503fa67e10.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.215.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:34:14:e1:7a:6c:51:09:e8:63:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=21079c28-bab1-4ad2-b648-d5b348b831d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:99:b6:02:40:a0:32:0c:4c:42:ad:da:ee:
                    ab:37:8c:66:7d:34:d4:01:a9:47:88:ff:a6:5f:4d:
                    1f:49:03:93:43:ae:65:17:f3:d3:1c:b7:fa:df:1a:
                    44:d5:9c:57:be:75:50:ba:be:c2:a8:bd:64:26:ff:
                    e8:4c:3f:12:56:c7:4d:66:bb:0c:7a:e4:53:40:b7:
                    91:48:94:53:59:72:3a:88:fc:63:80:2a:4a:1d:d4:
                    e8:21:fc:af:29:9b:9a:04:35:87:58:06:9d:a3:06:
                    bb:77:1f:16:60:8a:12:5a:81:a3:9c:28:56:16:b3:
                    3b:a6:c1:84:83:0b:38:7e:6d:c4:84:97:ac:11:04:
                    6f:0b:8e:10:32:ff:00:25:c4:0a:79:cd:31:f7:3f:
                    dd:4c:82:f0:29:b6:f9:80:6f:03:4a:2d:cf:fa:5a:
                    e6:4a:e9:b7:b6:0c:ac:22:b4:a0:c6:f4:db:64:62:
                    f6:c1:e2:58:31:41:53:d0:f9:96:be:99:d3:de:fe:
                    cf:dd:d7:7f:09:28:9b:06:ba:08:c7:06:a1:ee:10:
                    ac:d4:20:d2:73:2a:f1:9e:b8:25:b8:73:39:bc:95:
                    08:55:72:ab:cb:f5:70:82:ce:55:68:86:31:de:20:
                    ac:a5:b4:46:37:84:18:2f:e0:15:5d:74:4d:a6:85:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4C:A7:AD:0C:28:33:66:3E:C8:76:EA:DE:88:C3:6A:F9:46:E0:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2096e6bf-308d-3465-8056-2a503fa67e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.215.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:d4:51:60:53:65:1d:8b:b9:bc:af:1c:00:f1:87:27:39:
         85:d5:96:ab:28:66:c4:5e:0c:5a:34:e5:1f:9d:4b:58:1c:60:
         96:b9:8c:e3:29:84:cc:98:4c:cf:0d:ad:99:1a:6e:6e:1d:75:
         63:e2:2a:7d:d9:ba:38:1d:82:75:29:7e:d1:c1:0b:f2:67:8f:
         b0:08:2b:99:da:cb:11:62:44:fb:c6:f8:27:d9:fd:d1:bb:26:
         48:47:c5:8e:11:5f:70:6a:18:1b:a3:a1:f1:f0:bc:5c:d7:fe:
         05:31:a1:3d:68:f8:d5:f6:89:bb:e4:37:cf:5f:e2:21:f7:bd:
         9e:29:3f:da:d3:52:ff:c4:bc:02:b3:12:e4:e2:c4:1c:dc:94:
         61:2f:a2:59:41:98:d7:3f:48:92:f5:12:9b:5e:67:de:9f:a9:
         17:c3:3c:9d:8e:6b:28:ca:84:79:8a:2f:50:cc:d2:19:f1:fb:
         1e:3c:4a:2f:a9:d2:15:4e:7a:70:e9:f7:8b:d2:4e:3a:6c:9f:
         29:01:b7:2c:e7:3a:fc:72:97:d7:d3:2a:52:6c:7c:d4:38:8f:
         cf:2c:5b:48:2d:cd:bc:7e:21:4a:a9:b9:c5:74:85:2a:2c:e6:
         f4:9c:7b:9a:63:4c:20:52:b1:61:92:1d:ce:e3:d1:86:c2:7b:
         ea:f6:25:8b
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEeTsTQU4XpsUQnoYyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTAxODAxMDAzMVoXDTI1MDExNjAyMDAzMVowLzEtMCsGA1UEAxMk
MjEwNzljMjgtYmFiMS00YWQyLWI2NDgtZDViMzQ4YjgzMWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEKZtgJAoDIMTEKt2u6rN4xmfTTUAalHiP+m
X00fSQOTQ65lF/PTHLf63xpE1ZxXvnVQur7CqL1kJv/oTD8SVsdNZrsMeuRTQLeR
SJRTWXI6iPxjgCpKHdToIfyvKZuaBDWHWAadowa7dx8WYIoSWoGjnChWFrM7psGE
gws4fm3EhJesEQRvC44QMv8AJcQKec0x9z/dTILwKbb5gG8DSi3P+lrmSum3tgys
IrSgxvTbZGL2weJYMUFT0PmWvpnT3v7P3dd/CSibBroIxwah7hCs1CDScyrxnrgl
uHM5vJUIVXKry/Vwgs5VaIYx3iCspbRGN4QYL+AVXXRNpoW++wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFG9Mp60MKDNmPsh26t6Iw2r5RuBiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjA5NmU2YmYtMzA4ZC0z
NDY1LTgwNTYtMmE1MDNmYTY3ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjXgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCmgdRRYFNlHYu5vK8cAPGHJzmF1ZarKGbEXgxaNOUfnUtYHGCWuYzj
KYTMmEzPDa2ZGm5uHXVj4ip92bo4HYJ1KX7RwQvyZ4+wCCuZ2ssRYkT7xvgn2f3R
uyZIR8WOEV9wahgbo6Hx8Lxc1/4FMaE9aPjV9om75DfPX+Ih972eKT/a01L/xLwC
sxLk4sQc3JRhL6JZQZjXP0iS9RKbXmfen6kXwzydjmsoyoR5ii9QzNIZ8fsePEov
qdIVTnpw6feL0k46bJ8pAbcs5zr8cpfX0ypSbHzUOI/PLFtILc28fiFKqbnFdIUq
LOb0nHuaY0wgUrFhkh3O49GGwnvq9iWL
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:32 2024 by rpki-client on console-fra.rpki-client.org