Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa
File:                     a062cebc-a238-36aa-8aa8-34b54f092b15.roa (raw, json)
Hash identifier:          8RNqyYnR+XyWSAVcRJZ4m3Mucd07uCdrugp81NdLX74=
Subject key identifier:   4F:69:AC:B2:DF:7D:B4:3B:56:91:FA:E6:AE:A4:5A:B4:B3:28:7C:1F
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12FB5748BF862213B2580
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.216.192/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2f:b5:74:8b:f8:62:21:3b:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=094ef7bf-9ec5-4421-8fa5-d7499fd12ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:32:1a:ca:fd:87:cf:9f:7b:53:17:6a:08:
                    87:e5:0e:d9:30:00:09:1d:4a:2d:09:44:98:11:06:
                    37:90:22:25:85:b3:d6:8b:a2:a6:ee:0f:16:50:ae:
                    06:c4:99:22:90:ef:01:0d:11:34:27:c0:56:0b:d4:
                    0d:fd:e1:3a:2f:1d:81:24:cd:27:65:fc:eb:92:56:
                    88:73:a6:04:d9:81:9e:fa:92:fb:9f:7f:df:9b:19:
                    04:49:51:59:89:f4:98:0d:26:80:24:1f:2e:90:f7:
                    dc:d5:f5:cc:92:3a:09:a6:a6:23:bf:ad:5c:66:b0:
                    14:c5:30:15:ae:74:ad:43:70:6f:45:8f:e6:5f:6c:
                    13:e5:07:1e:b9:8b:11:ac:27:56:1f:1a:fa:8c:20:
                    66:98:88:fe:2b:3d:a1:ce:cf:f8:69:88:a5:eb:20:
                    f6:70:70:20:c1:a5:ab:a0:b4:c2:cf:20:0a:10:05:
                    4e:ef:1d:49:75:19:64:ac:d1:0f:52:6c:c4:f7:03:
                    62:98:c8:bd:27:9c:fa:3c:01:20:b3:86:35:00:1e:
                    32:62:23:6e:80:72:fe:29:5f:82:14:9c:69:dc:d3:
                    92:f2:3e:7b:33:6f:11:f7:82:17:a7:ff:fa:64:3d:
                    f8:64:6a:c4:bb:31:bc:a7:10:d5:22:0a:98:14:f5:
                    aa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:69:AC:B2:DF:7D:B4:3B:56:91:FA:E6:AE:A4:5A:B4:B3:28:7C:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a062cebc-a238-36aa-8aa8-34b54f092b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.216.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:5f:50:dd:29:4e:bc:6e:97:9f:5d:84:52:62:be:f3:58:b0:
         07:0f:1f:93:53:9f:65:dd:01:b3:a7:d7:e4:ed:09:15:45:c1:
         33:d3:6a:27:87:2c:ca:67:0c:01:6a:54:47:2c:ad:60:17:26:
         34:a1:0a:61:94:b8:e5:1a:26:a4:84:13:14:6d:2b:b1:ec:96:
         07:07:fe:ce:d2:62:f3:72:56:5d:99:57:d5:2c:8c:7d:a7:9a:
         5e:7e:96:c3:f8:5e:7f:aa:06:73:58:32:01:84:33:2c:d5:d9:
         e6:c7:74:65:e0:df:01:4d:b0:89:93:d9:fa:cb:6d:3d:15:70:
         aa:c5:5a:d3:8f:5c:df:51:43:d3:f9:bb:30:f4:06:d7:be:ca:
         d7:03:62:70:44:68:5b:1f:13:8c:a8:7a:52:63:0f:90:af:84:
         cc:d9:3d:74:2f:ff:17:4d:9a:87:76:25:87:63:bd:97:3a:57:
         ad:d3:0c:84:a6:74:8f:01:27:09:e9:ba:fc:70:a4:9c:6c:fc:
         23:71:1c:ae:86:7f:28:c3:8a:39:52:48:b9:d9:e5:44:1a:36:
         d6:4d:0d:f1:48:1a:59:90:5f:85:ae:5d:80:ed:f4:17:b6:10:
         fd:43:45:ad:cd:d4:c3:37:f8:00:2b:8c:66:33:05:7f:a2:5b:
         d4:78:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org