Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aed842c-4d93-3974-bba8-692821f71453.roa
File:                     3aed842c-4d93-3974-bba8-692821f71453.roa (raw, json)
Hash identifier:          HJq+Jd6wLXC2H/OTW6j7F7MbkhbNab6Gjck10EVygo8=
Subject key identifier:   36:22:2B:F2:67:70:5B:6C:5D:E5:FB:EF:03:08:64:A7:0C:92:3E:0E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1315F8A35505C5D720A00
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aed842c-4d93-3974-bba8-692821f71453.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.254.192/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:31:5f:8a:35:50:5c:5d:72:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=0c698326-c98d-4a06-8c86-534e24aa19ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:95:4a:84:8b:a9:cd:29:b0:ea:15:d9:22:d1:
                    2f:c4:af:1c:06:bf:9b:aa:c9:40:2e:77:8e:44:a9:
                    40:ae:e4:e9:2c:13:58:44:8b:47:5b:9f:21:d3:f5:
                    15:cf:33:9c:d7:5e:8c:33:a9:31:fc:50:72:ed:d0:
                    ef:58:eb:df:84:29:10:90:17:09:ed:42:34:44:95:
                    78:3d:bb:98:ad:3e:5d:49:b7:f4:17:2f:6b:c2:0c:
                    23:ec:b9:c6:fe:47:6e:17:19:bb:99:4f:dc:c3:50:
                    96:38:81:3f:5e:7c:30:3a:5f:a5:00:ed:86:d8:aa:
                    02:1c:af:da:20:9f:bb:e1:2f:c4:19:36:9e:ef:f4:
                    bc:a8:f3:fe:18:d7:ec:cc:7d:03:3b:e2:0e:75:ca:
                    d3:8f:47:ad:69:65:90:62:6b:31:9c:ac:49:c7:ec:
                    50:c8:9d:e8:ae:8b:67:91:59:28:37:b7:a8:73:c4:
                    03:c4:44:21:c7:b0:4a:fb:2f:34:9e:bf:8c:fb:31:
                    01:c5:7a:4f:fd:0c:f9:75:45:41:76:02:8f:8b:21:
                    54:48:45:09:54:bb:e2:0e:da:51:dc:0f:89:95:db:
                    fb:ce:aa:a3:8d:c0:08:73:e8:f5:09:cc:d2:0f:8c:
                    30:a9:32:91:cb:82:d6:d4:ca:ac:f2:88:c3:f1:96:
                    72:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:2B:F2:67:70:5B:6C:5D:E5:FB:EF:03:08:64:A7:0C:92:3E:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aed842c-4d93-3974-bba8-692821f71453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.254.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:43:4c:f9:ad:4e:d0:92:ce:03:0c:ae:c8:79:6d:ec:2e:02:
         79:d0:fa:6b:20:3c:e6:48:a3:a9:d6:4b:1a:57:2e:85:f9:9a:
         19:7f:af:46:fd:ec:e7:05:64:1f:c3:1f:51:12:a6:ea:c6:3e:
         d9:de:35:76:e1:8f:30:b9:80:2d:52:31:ff:22:a9:fb:63:cd:
         ce:e5:31:15:ce:3e:df:21:c2:d4:fc:26:4d:d2:82:0c:65:d0:
         ac:da:7b:22:a8:f9:9a:32:6d:03:5e:8f:cd:12:f5:2a:a9:18:
         60:7c:d3:7f:03:3b:a9:d6:fe:77:be:d3:53:8c:f1:52:f8:05:
         0d:30:04:75:4c:da:9a:61:a8:88:80:8a:39:18:c5:a3:90:7b:
         01:e3:7b:7a:ae:4a:b4:e6:e4:85:37:12:9f:97:7a:73:23:ca:
         2f:59:d0:e9:6e:6a:8c:46:07:ce:26:9a:7b:04:f6:e4:7d:c2:
         b8:d7:c9:1a:70:7b:0e:70:fb:37:2c:ba:6b:5d:1d:c1:e6:2c:
         9b:12:19:93:8b:c6:87:fd:a8:7a:72:84:32:d8:d3:95:df:15:
         e9:35:89:91:19:be:2d:dd:0e:3c:af:48:23:80:fa:fa:45:d3:
         11:e8:bd:b7:1c:8d:fb:17:e8:c9:c8:51:3a:40:76:42:c3:d0:
         3d:95:d6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:29 2024 by rpki-client on console-ams.rpki-client.org