Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
File:                     c23901d7-63c5-3efe-bb37-843df17671e0.roa (raw, json)
Hash identifier:          /4agkyltOz57EvKAosPqOJv/IkogfbOYG3u4VA24LZ4=
Subject key identifier:   34:8A:04:C9:31:97:D8:99:B7:79:98:C4:67:54:EF:6B:E6:4B:13:2C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B1360946B8012834002E80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.255.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:36:09:46:b8:01:28:34:00:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=b398dffa-9ece-45bb-8fd5-2d701d8aa7ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:76:e3:e9:73:34:62:eb:8c:07:5a:a6:c1:4f:
                    62:6d:86:f0:61:93:74:81:e8:61:e0:3f:1c:71:a8:
                    f0:8e:8e:b0:10:a7:6d:db:24:18:51:57:75:b9:9a:
                    fe:e3:26:91:4c:f9:34:a6:46:3c:3a:62:10:bc:af:
                    f1:74:1f:b3:0f:ae:04:14:9a:20:f4:e7:4c:e1:c3:
                    e0:2c:1a:f3:5e:04:29:9f:22:27:81:45:40:72:fd:
                    10:03:58:6e:0b:a6:1d:d8:21:f8:1e:2a:17:77:99:
                    a4:35:c9:86:58:6c:a8:8e:af:93:55:73:43:19:24:
                    cf:5f:e8:ab:9e:f3:db:d3:ab:a1:a3:4f:25:c5:ea:
                    ae:aa:46:6d:40:b6:49:a4:2a:40:88:15:30:4b:eb:
                    80:a7:98:7b:f5:35:74:6c:1c:89:82:8d:34:9d:c0:
                    4e:e5:ca:35:24:b2:8a:a7:b5:18:32:4f:cb:d2:55:
                    1b:78:2a:7b:8c:5b:d3:9d:79:62:d0:b1:e2:dd:1c:
                    1d:09:84:39:89:30:14:0a:32:75:34:52:82:a0:1c:
                    6f:54:96:33:13:79:64:4d:fe:65:56:f3:39:5f:73:
                    e7:35:ec:6a:9a:24:6b:d5:68:fd:24:d1:61:ee:37:
                    06:4f:c9:c3:95:f8:7c:f2:42:bd:c1:f3:ec:50:18:
                    bf:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8A:04:C9:31:97:D8:99:B7:79:98:C4:67:54:EF:6B:E6:4B:13:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c23901d7-63c5-3efe-bb37-843df17671e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.255.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:8e:48:f8:ff:ba:f9:49:2c:12:76:b0:3b:48:7a:7e:82:8a:
         37:a4:84:39:ff:5c:ef:91:1d:87:a2:09:37:b2:98:95:55:60:
         ea:76:70:7f:de:ed:43:87:96:92:34:36:a3:a9:57:89:f1:0b:
         ad:47:e8:78:0d:3c:ff:83:b9:de:38:f7:b3:7e:2b:86:6f:c1:
         9e:6e:ac:6c:52:ec:80:dd:a0:47:12:d8:de:eb:4a:29:1e:f2:
         2f:91:2d:77:0c:ea:55:be:14:d9:4f:b0:a0:af:c5:39:b2:22:
         5b:c1:ce:ea:31:5d:ee:66:c3:f8:53:f6:51:d1:47:a2:52:71:
         7e:e6:be:b6:e7:11:d1:b1:df:16:cd:12:a3:f2:50:4a:d8:1a:
         0c:49:ae:4c:0d:43:7c:5c:74:36:27:5c:94:fb:a5:a1:2c:67:
         1a:5c:95:35:e2:69:91:c3:33:19:29:31:d3:99:bc:ca:0a:79:
         02:bb:39:be:d8:3a:76:ff:dc:b1:2b:6c:e0:28:29:57:7e:23:
         b0:31:f3:8c:8c:9d:15:81:95:63:83:c1:1c:b7:e4:0a:1f:70:
         98:7d:d9:5c:ef:5f:7e:b6:4d:6c:e7:ac:25:cf:b0:17:8c:f1:
         65:7d:8b:98:ef:e6:62:46:ba:f7:f4:b7:51:99:9e:1a:78:e8:
         02:01:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org