Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
File:                     ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa (raw, json)
Hash identifier:          vMv9StdubM8NPTGIDLDnaoK1guxEC65lIQT/9O9zAU0=
Subject key identifier:   C5:B6:D8:A1:ED:F1:33:D3:54:66:C3:1F:87:00:5B:2D:53:64:7C:11
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847CE6F4A32555E9522BDD9C500
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa
Signing time:             Fri 08 Nov 2024 02:00:27 +0000
ROA not before:           Fri 08 Nov 2024 02:00:27 +0000
ROA not after:            Thu 06 Feb 2025 02:00:27 +0000
asID:                     54113
IP address blocks:        140.248.86.224/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ce:6f:4a:32:55:5e:95:22:bd:d9:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Nov  8 02:00:27 2024 GMT
            Not After : Feb  6 02:00:27 2025 GMT
        Subject: CN=7041c40f-8f17-4296-a289-fd92f62b1a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ef:f7:e9:75:10:84:42:6d:10:33:6d:92:fd:
                    25:aa:f1:67:89:84:d6:4d:42:74:2a:9b:55:ce:7d:
                    15:30:3a:3c:47:cd:18:d5:33:33:8b:d1:7c:f4:a5:
                    a8:39:c7:46:ec:5a:08:37:3a:b5:48:d3:15:58:d2:
                    4a:83:e9:66:4e:14:53:23:e6:20:03:71:45:b6:cc:
                    bf:41:61:6f:5a:78:cb:b6:37:69:da:d2:92:3b:0d:
                    e3:a1:1d:5e:5d:d5:1c:2e:75:8d:ce:1c:ea:33:e8:
                    4f:07:3e:fb:14:e3:2c:12:77:50:7a:23:20:90:28:
                    8d:0d:1a:ec:0a:b7:d6:dc:f1:92:65:0e:74:ee:ae:
                    e2:cc:26:2f:29:cb:f7:aa:7b:d1:3e:57:f6:2a:d5:
                    43:1b:0f:c7:c7:bb:aa:b3:24:b4:bf:8d:7f:8b:d1:
                    5e:5b:c4:b8:b4:fe:1e:82:0a:2f:6d:4d:5b:34:4a:
                    2c:92:28:12:0d:77:37:57:1e:ff:c2:88:7e:02:22:
                    99:ed:cb:26:0c:cb:de:5d:87:5b:fa:52:b6:ef:50:
                    7d:81:2f:36:f3:f0:c6:65:71:11:55:ec:dd:cd:af:
                    7a:32:ab:1e:eb:b0:54:c5:b4:4d:c9:a7:f5:51:f7:
                    5f:da:06:5d:b0:4a:fe:ef:47:83:91:68:f8:c8:f9:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:D8:A1:ED:F1:33:D3:54:66:C3:1F:87:00:5B:2D:53:64:7C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ad8b3a33-5d11-3a8d-930d-dba5952c65a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.86.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:0b:59:b0:67:7e:d7:66:83:1c:51:0d:9e:c2:4a:ab:00:26:
         e6:d0:f0:49:08:1d:cb:5a:a1:44:b3:75:5d:f0:8f:86:a3:e6:
         52:45:1c:a5:f2:fe:9d:3c:27:7e:31:e3:83:db:7a:32:10:b7:
         a6:42:4a:ad:c6:4e:c1:f4:0b:af:43:1f:86:ac:37:e4:48:9f:
         46:6b:e6:4c:57:b8:4c:da:88:19:4d:26:cd:5b:ba:74:56:d3:
         ee:a8:e0:a2:ac:06:15:f9:93:24:cc:bd:af:5e:8f:3e:a9:13:
         94:58:e3:7c:00:b3:39:36:09:95:ef:89:15:ed:0a:5d:23:3c:
         40:a8:ff:e6:bd:a2:c9:70:a5:3f:79:30:b9:5c:48:70:88:2e:
         49:7f:35:c9:e1:bc:b6:7b:ea:a0:e3:49:6f:48:6b:2c:f1:8b:
         7d:29:14:c3:68:13:7b:a6:ed:45:05:65:c5:d8:5a:8e:94:a8:
         4b:2d:d2:75:05:f1:d6:94:5f:e6:0b:0e:66:6c:3e:fd:de:96:
         a7:0f:49:49:60:a8:a3:2b:70:ef:74:a8:98:f0:23:87:d0:a6:
         0c:3d:e6:32:e4:be:4b:03:df:27:3e:96:be:66:42:c1:1f:8e:
         ca:e0:0f:bb:33:45:d5:bc:e8:53:42:9c:91:1d:b3:94:63:70:
         45:3f:e4:b6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEfOb0oyVV6VIr3ZxQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI0MTEwODAyMDAyN1oXDTI1MDIwNjAyMDAyN1owLzEtMCsGA1UEAxMk
NzA0MWM0MGYtOGYxNy00Mjk2LWEyODktZmQ5MmY2MmIxYTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju/36XUQhEJtEDNtkv0lqvFniYTWTUJ0KptV
zn0VMDo8R80Y1TMzi9F89KWoOcdG7FoINzq1SNMVWNJKg+lmThRTI+YgA3FFtsy/
QWFvWnjLtjdp2tKSOw3joR1eXdUcLnWNzhzqM+hPBz77FOMsEndQeiMgkCiNDRrs
CrfW3PGSZQ507q7izCYvKcv3qnvRPlf2KtVDGw/Hx7uqsyS0v41/i9FeW8S4tP4e
ggovbU1bNEoskigSDXc3Vx7/woh+AiKZ7csmDMveXYdb+lK271B9gS828/DGZXER
Vezdza96Mqse67BUxbRNyaf1Ufdf2gZdsEr+70eDkWj4yPl/PwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMW22KHt8TPTVGbDH4cAWy1TZHwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYWQ4YjNhMzMtNWQxMS0z
YThkLTkzMGQtZGJhNTk1MmM2NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhW4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAWC1mwZ37XZoMcUQ2ewkqrACbm0PBJCB3LWqFEs3Vd8I+Go+ZSRRyl
8v6dPCd+MeOD23oyELemQkqtxk7B9AuvQx+GrDfkSJ9Ga+ZMV7hM2ogZTSbNW7p0
VtPuqOCirAYV+ZMkzL2vXo8+qROUWON8ALM5NgmV74kV7QpdIzxAqP/mvaLJcKU/
eTC5XEhwiC5JfzXJ4by2e+qg40lvSGss8Yt9KRTDaBN7pu1FBWXF2FqOlKhLLdJ1
BfHWlF/mCw5mbD793panD0lJYKijK3DvdKiY8COH0KYMPeYy5L5LA98nPpa+ZkLB
H47K4A+7M0XVvOhTQpyRHbOUY3BFP+S2
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org