Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8f0f8992-d48c-305f-bf89-78ec33c78f77.roa
File:                     8f0f8992-d48c-305f-bf89-78ec33c78f77.roa (raw, json)
Hash identifier:          0MhOk3XpmUfXiiAYNWbo7NS3CR6UZALlkRKGBrGYYFM=
Subject key identifier:   87:61:83:AE:88:B2:5F:84:BD:19:DC:B5:AC:C8:DD:E5:FF:D7:D3:85
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12FC9835A10F8BED85B80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8f0f8992-d48c-305f-bf89-78ec33c78f77.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.218.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2f:c9:83:5a:10:f8:be:d8:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=72c71a03-298b-4a41-b8db-8b9952cdfbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:df:aa:46:af:7e:64:76:f3:94:10:0f:cf:50:
                    83:fb:aa:2c:67:77:83:01:93:c9:75:fc:cc:c3:7c:
                    f6:a0:72:df:b1:60:d1:bc:81:4c:e6:f3:eb:46:65:
                    25:dd:01:b7:f8:ef:dc:df:82:51:a7:00:63:12:be:
                    0a:6e:7f:d5:c6:0d:c5:ba:45:3c:4c:2d:a9:cd:b4:
                    67:85:da:4d:6f:7f:74:06:a3:b0:9f:09:42:1b:14:
                    a9:40:75:51:a0:1a:6d:9d:86:1c:cd:8c:af:97:60:
                    b2:78:66:67:05:ae:79:a2:cb:15:37:ab:09:da:4b:
                    54:e3:d3:bd:fe:98:64:e1:78:3c:b0:9c:77:b7:f7:
                    2d:17:27:a0:cc:fc:29:74:ea:8f:be:56:66:a3:98:
                    e3:50:96:26:ba:b0:ae:a7:dc:8b:f7:e5:d0:c0:fc:
                    f2:67:2f:fe:aa:f5:7d:95:cd:57:10:12:22:04:53:
                    4a:63:f8:50:a8:2e:11:76:bf:cd:cb:1d:2f:ba:3f:
                    36:eb:9d:c0:37:31:18:b7:5d:a1:54:de:2a:74:c9:
                    54:10:9e:31:76:13:3c:d7:94:24:7a:87:f6:0a:a2:
                    5c:30:3a:21:8b:84:50:d3:c7:9e:89:27:c9:9b:a0:
                    44:b1:1d:62:21:ad:64:00:fc:eb:69:f3:52:07:5c:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:61:83:AE:88:B2:5F:84:BD:19:DC:B5:AC:C8:DD:E5:FF:D7:D3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8f0f8992-d48c-305f-bf89-78ec33c78f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.218.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5c:8c:85:c4:04:6c:68:d8:2f:11:ed:8b:5e:48:d7:00:16:
         fc:a7:60:56:ab:69:ba:3c:dd:47:37:f8:75:90:75:4d:81:41:
         e4:dd:73:be:77:20:1b:38:bb:02:3a:4b:23:ed:f4:c2:47:8d:
         46:55:b5:97:ac:31:8d:44:ba:24:9b:d0:1e:b5:f0:8f:8c:79:
         16:d6:8b:fe:1d:59:c3:c0:49:dd:dc:af:4f:b3:5b:e7:b7:b7:
         14:8e:b2:f6:c5:83:5d:aa:1f:b5:9d:81:68:29:af:23:23:d7:
         c1:d1:b4:e3:49:c7:50:b0:f7:d0:51:4b:47:be:13:dd:b3:f1:
         e8:29:71:bf:80:72:8b:6a:c6:a4:ca:1d:c7:b1:ea:cf:01:5e:
         93:62:17:76:cb:78:4e:bd:45:99:a3:1f:88:65:76:ac:18:ed:
         8b:af:01:d0:49:6c:b2:87:5a:b8:10:1d:16:a6:41:ab:66:0a:
         8c:57:9b:73:e9:2e:24:1f:eb:70:53:51:40:91:1a:32:27:ea:
         93:cb:8c:dd:57:80:f3:70:6a:ac:0f:c3:87:20:a6:ac:94:9e:
         23:c8:75:34:59:9c:87:e5:78:99:cf:bd:ad:11:c2:bb:9a:3b:
         19:2e:1b:9b:7f:22:7b:e6:f9:ec:8f:a4:fd:23:d4:fd:cc:5c:
         fe:29:ef:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org