Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9621083c-e698-3e95-beda-3a8ac0962f3b.roa
File:                     9621083c-e698-3e95-beda-3a8ac0962f3b.roa (raw, json)
Hash identifier:          o0rD6gN7Mq2tx8DNRhifpTDeUHtGoNoUYIENXwdD1mE=
Subject key identifier:   4B:4C:81:A8:AC:62:E0:89:00:ED:D6:FC:D8:AA:8B:93:AC:D5:F2:EC
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1443FD2609F3A0AD730E0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9621083c-e698-3e95-beda-3a8ac0962f3b.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.4.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:44:3f:d2:60:9f:3a:0a:d7:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=9b83721a-3d0d-400e-83b4-4d3d74253eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:71:ec:f0:37:f0:de:0c:ef:5e:2e:a3:0c:
                    82:d2:4b:24:55:13:b6:6e:3c:fc:aa:74:f8:41:71:
                    70:36:98:30:56:aa:1e:8f:07:6b:81:a2:45:86:72:
                    b5:bc:74:6d:9a:90:ba:4b:bc:26:f9:ed:ee:0f:d9:
                    17:b1:b8:99:a5:32:53:2b:3b:1c:06:41:52:11:65:
                    9e:0d:85:34:fa:63:d1:6b:c9:ff:76:ad:e1:24:aa:
                    cc:97:fd:42:ce:0e:73:d8:41:b0:24:51:9d:43:4b:
                    50:48:6b:df:c6:4c:a3:64:ad:6d:5a:b9:c4:87:aa:
                    41:fc:d2:c5:26:f3:24:ad:0b:a0:54:32:03:d8:52:
                    47:be:b7:d2:9d:61:c0:37:5f:64:c5:fd:f0:66:52:
                    16:9f:56:bf:d7:32:dc:61:ad:82:3c:eb:e4:cf:16:
                    f7:b3:1b:8e:9b:8b:e9:60:d1:3b:1f:e7:ce:cc:06:
                    4b:4b:5e:29:41:6c:b0:9a:a8:fc:52:fd:77:ad:0b:
                    ff:e7:c7:aa:1e:95:f1:3a:03:35:0b:a5:5f:1c:49:
                    44:fe:48:49:0e:e7:9b:e7:0f:65:dd:4d:78:13:91:
                    9b:db:0c:d3:a2:a9:c3:9f:5b:17:d7:b1:28:17:b4:
                    1d:f5:ef:f7:42:65:38:8d:c3:15:e0:d0:ee:db:a0:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4C:81:A8:AC:62:E0:89:00:ED:D6:FC:D8:AA:8B:93:AC:D5:F2:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9621083c-e698-3e95-beda-3a8ac0962f3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:69:25:ee:fb:18:8f:bb:c7:1a:87:f3:15:76:70:26:d7:15:
         4e:f0:b5:e9:3d:c4:94:76:68:75:a2:70:75:52:ea:c2:38:db:
         25:4b:b2:be:9a:5b:0d:89:c7:b3:d5:11:2b:0e:62:6e:67:88:
         62:0e:7d:f6:e1:ea:fd:29:de:21:55:87:61:86:cd:fc:83:28:
         57:db:a4:25:3d:c1:db:d6:b9:0f:85:67:76:50:a3:38:ce:5c:
         fd:f8:76:cf:a3:d1:fa:44:7f:06:9c:57:b2:5a:2a:c8:cf:c5:
         8a:34:5c:69:d9:36:69:b2:36:7e:bc:cf:fd:4c:ad:b2:e1:e7:
         b8:32:d6:46:d2:6e:5a:2f:49:b9:0f:ec:37:0c:21:3d:e9:9e:
         f1:e9:8c:29:a2:08:b1:63:42:60:58:61:a9:fe:99:22:b9:73:
         2e:97:3a:e0:66:6f:86:96:77:6d:21:a5:77:3a:a0:79:a4:31:
         24:df:17:b4:67:f7:fa:c3:a9:56:53:f4:0e:b0:6f:15:88:ee:
         ab:f1:2d:bb:4f:a5:24:28:04:60:57:b3:e0:0d:c6:cd:a5:fb:
         71:67:e5:9e:00:a4:1f:b8:b6:a9:22:1c:d7:77:df:e5:f5:66:
         62:75:4d:9d:5d:b2:e7:f4:1c:27:72:eb:2a:f8:f1:9c:26:58:
         23:d5:8e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:31 2024 by rpki-client on console-ams.rpki-client.org