Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa
File:                     9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa (raw, json)
Hash identifier:          Y9DXF0/FYREAeaJ/vAhx/Sj5HrSaqmJJrBkyFDedMJk=
Subject key identifier:   08:69:82:22:31:3D:A3:2D:BA:C0:0C:9F:70:74:46:12:F3:B4:9D:AF
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847DF2F59BEB84E32546575F980
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa
Signing time:             Thu 14 Nov 2024 02:00:27 +0000
ROA not before:           Thu 14 Nov 2024 02:00:27 +0000
ROA not after:            Wed 12 Feb 2025 02:00:27 +0000
asID:                     54113
IP address blocks:        140.248.237.0/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:df:2f:59:be:b8:4e:32:54:65:75:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Nov 14 02:00:27 2024 GMT
            Not After : Feb 12 02:00:27 2025 GMT
        Subject: CN=506c0be4-4aec-4b0e-8792-79ff305fe394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:7c:bd:0e:21:83:0a:e1:83:3d:26:0b:ba:
                    02:21:bd:a2:bb:8b:bc:9e:e8:f8:a6:7a:8d:0f:27:
                    68:25:65:83:05:76:88:ee:08:ad:a3:ad:85:82:ea:
                    86:ce:2c:ac:91:63:03:06:a1:ac:67:8b:0f:62:76:
                    9a:3a:49:14:cb:35:97:87:24:71:f7:53:d9:23:d0:
                    a4:14:fd:79:f5:d4:6c:c9:0c:1d:8e:da:a2:32:d1:
                    b0:7f:7a:4f:2e:59:78:e1:16:b0:f9:ad:0a:4a:72:
                    cb:4e:da:62:c0:7e:58:a1:c7:3a:5d:82:d2:ea:68:
                    d2:b0:57:dc:c8:a5:25:42:f2:f3:2b:a3:bf:67:00:
                    1f:80:5e:87:e6:83:3f:d8:1a:4a:5d:64:ed:1a:64:
                    62:56:3b:20:d9:b2:14:27:b2:f5:12:87:a7:ff:d5:
                    56:d2:a8:a0:3d:1a:a0:7b:aa:9d:1a:55:94:3e:8c:
                    90:87:05:d8:fd:b6:b3:10:e1:b6:3e:14:d0:6e:4a:
                    c3:bb:9e:a8:cd:0b:9c:7f:f0:27:18:27:4b:a0:b0:
                    45:cf:7d:9b:43:a7:2d:b8:27:4c:d1:44:94:04:e8:
                    bd:95:1c:1c:18:d5:c9:7c:4a:2f:9d:6c:63:00:fd:
                    93:63:41:38:6b:5f:f9:92:08:d3:46:11:63:8a:f1:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:69:82:22:31:3D:A3:2D:BA:C0:0C:9F:70:74:46:12:F3:B4:9D:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/9cb432c7-d0e9-3d30-afa0-a3923ad87f74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.237.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:16:9a:7f:71:21:6d:ed:17:6c:ec:1f:8c:11:69:30:38:bd:
         12:73:a4:19:3d:f7:4a:ea:d4:24:9f:89:c7:f0:52:0a:ef:93:
         3c:4b:6d:42:52:1a:e6:a0:17:32:1d:f3:53:1b:95:b9:35:bf:
         b2:a9:35:98:a8:cf:1e:52:d1:4d:9e:fb:6c:6e:36:e6:b4:ee:
         54:82:b8:aa:d5:b6:3c:35:96:7f:7b:6e:09:1b:ae:b8:51:7d:
         9e:1c:05:da:ed:c6:76:32:42:94:8b:f1:01:ef:9e:dd:5c:88:
         47:9c:82:8a:da:64:53:72:87:fc:93:e9:b1:59:23:3d:4b:f3:
         dc:ad:d0:cd:3a:70:10:b3:bc:7b:1e:26:1c:4f:86:e8:7a:37:
         cf:50:03:23:9b:4c:cf:af:92:e0:e9:78:84:ee:00:a5:44:6f:
         81:05:99:f8:e9:f2:fc:7a:49:74:c0:63:74:d8:27:3e:70:28:
         ad:2e:73:26:4c:f5:12:c5:67:31:88:ee:4e:0c:8f:a6:c7:3d:
         c5:f4:b7:4f:29:8d:55:52:a9:ae:93:c4:9c:b0:3d:e3:15:86:
         f4:17:86:22:b1:e2:32:2d:ca:15:f3:fc:b2:eb:c7:a7:ba:f2:
         bc:2c:39:58:74:28:fc:50:eb:27:4e:dd:18:b3:c9:02:50:f0:
         66:19:11:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org