Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5509be36-59c7-30af-af8a-0da83bc0095d.roa
File:                     5509be36-59c7-30af-af8a-0da83bc0095d.roa (raw, json)
Hash identifier:          jESo9cZpUmhQlPr34pgvEI5YFMUZ7sCpXBJM8H/8xeo=
Subject key identifier:   AE:68:F8:AC:45:FC:E2:31:2E:FB:C8:8F:AF:01:4D:5C:ED:52:3F:B3
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B13B04433B21AF7CB2C1A0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5509be36-59c7-30af-af8a-0da83bc0095d.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:3b:04:43:3b:21:af:7c:b2:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=3c8c2ffa-b8e0-4fc6-b22b-080676e0d001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:a9:73:ba:34:1e:dc:a4:b5:da:3b:77:ca:
                    b6:7f:f9:21:3f:1d:ad:01:8e:8d:fe:d9:18:78:92:
                    78:69:41:32:cb:21:4d:da:a2:f4:cc:8d:8d:1e:26:
                    e5:77:a2:27:3e:4e:ab:f0:7f:b9:e5:77:b0:bd:24:
                    c0:b3:3d:4c:99:9d:53:ff:30:a6:e0:cf:59:9d:a4:
                    b0:ef:a0:a0:41:bb:e8:fe:ca:cd:c0:5d:6e:1d:de:
                    1b:3a:bf:35:df:b9:42:56:3d:93:80:29:40:5e:d3:
                    31:dd:51:ba:17:c7:4d:2b:4e:80:5b:23:d0:a1:dc:
                    8a:8c:0d:67:25:72:cd:13:6d:3e:7b:77:dc:0a:f6:
                    f1:4e:22:68:45:0d:46:6f:ea:f6:ae:da:53:9f:41:
                    2c:dc:c3:3f:9a:0e:2b:64:69:63:7f:4f:3e:ed:16:
                    7c:03:c1:c4:dc:28:07:69:80:cd:a6:99:39:2b:4f:
                    3a:17:ef:95:6b:40:a9:9f:d9:3e:f0:88:b7:bf:b2:
                    e8:a7:d7:30:9c:cb:54:85:68:a8:e0:b4:5b:80:ca:
                    e5:6f:6c:16:52:42:7c:8e:fa:f1:51:db:53:ec:91:
                    70:84:3a:8d:d9:70:a3:ff:d0:76:c7:b6:d1:3f:51:
                    d9:88:7a:15:4b:46:d5:a8:3d:74:57:70:39:fc:1d:
                    bc:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:68:F8:AC:45:FC:E2:31:2E:FB:C8:8F:AF:01:4D:5C:ED:52:3F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/5509be36-59c7-30af-af8a-0da83bc0095d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:b5:19:fb:65:a7:43:67:d1:a9:03:b4:56:7d:15:0e:0b:
         2a:96:f3:c7:be:00:75:fb:cd:25:31:37:34:19:43:f2:8f:d9:
         67:d5:59:83:e7:61:db:57:df:43:61:5e:2f:8a:e6:b3:a9:64:
         b4:1b:e0:62:a2:ca:f5:5a:3a:ae:1c:64:2a:b5:7d:68:13:00:
         25:0f:d6:ee:90:99:b7:f7:71:c0:d7:1f:57:ce:06:37:60:00:
         c7:90:03:b0:5d:8b:f9:9b:f8:41:38:28:b1:38:f0:b7:df:e6:
         82:91:44:fb:be:2e:fb:b7:8a:ed:95:22:17:5e:61:3e:44:7a:
         19:4e:fd:23:87:2e:36:ca:84:2f:9e:b1:4f:80:af:df:e3:ce:
         79:b5:65:cd:73:04:14:09:58:eb:59:24:ab:64:ff:a7:fa:9e:
         a4:4d:54:b0:09:f1:20:6c:c5:13:7c:bf:95:53:99:fa:7e:e4:
         bf:e5:25:96:a8:cd:af:9c:56:25:63:99:04:82:c7:cf:ac:a8:
         b1:20:19:ae:ff:29:40:80:f9:4f:ca:c9:ec:e9:80:24:2a:4a:
         e0:ed:db:98:41:cc:14:ae:26:4b:a9:58:e7:80:4b:af:fd:b2:
         8c:b8:6f:76:2c:c5:4c:24:66:1d:65:40:51:56:6d:cc:cb:ef:
         eb:8d:15:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:29 2024 by rpki-client on console-ams.rpki-client.org