Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
File:                     d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa (raw, json)
Hash identifier:          03YaBIo70VBJFZw5j6oXc7JvQhVCvxc+ocUVxqboHww=
Subject key identifier:   56:48:EC:0A:E3:D2:94:C4:66:51:16:70:5C:9B:0D:89:4D:A1:46:0C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B12F7EAE15C58E5E066FAC
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        140.248.216.0/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:2f:7e:ae:15:c5:8e:5e:06:6f:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=c13eb6de-f749-4045-b6a6-e9f4dcd4d017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6c:46:26:65:fd:17:03:6d:c6:fc:4f:90:f3:
                    68:89:04:1a:56:5d:f2:c1:0c:54:88:d9:99:e8:43:
                    34:d4:bb:4f:73:40:eb:a3:74:cb:b2:37:d4:d0:81:
                    9d:13:68:c3:b3:58:b3:29:10:bd:45:58:21:55:6f:
                    65:ce:67:61:6f:ce:a4:ea:e0:01:70:c6:f2:5c:f3:
                    65:01:50:d8:b4:45:27:84:3a:ed:90:f0:01:bf:f4:
                    d2:2d:3d:1d:e0:b2:67:3f:04:62:80:48:2e:6e:53:
                    0f:36:49:15:df:39:28:ac:62:16:e7:4c:39:32:7c:
                    2e:99:b4:ea:99:9f:f1:88:71:04:b1:bf:84:e0:37:
                    4a:61:ed:8a:e1:07:e8:ce:bb:8e:75:65:ca:1e:42:
                    d4:96:a6:d5:b3:27:77:78:2d:db:9c:0e:68:92:12:
                    4a:06:9f:29:03:ee:40:d4:22:48:44:fe:5f:a8:82:
                    de:71:fd:93:2e:cd:b6:c6:85:a9:2b:85:4b:e4:a8:
                    fa:e3:63:1c:81:67:38:69:2f:79:cc:0a:dd:0c:ee:
                    b5:e1:62:93:4c:61:13:83:76:ae:b7:66:33:25:d4:
                    4a:4c:ce:79:4b:be:8b:d5:c6:59:de:3b:5a:53:e7:
                    6d:c9:5b:bb:16:f8:fc:b2:84:76:cc:7e:44:5f:20:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:48:EC:0A:E3:D2:94:C4:66:51:16:70:5C:9B:0D:89:4D:A1:46:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d0fdcccc-3387-3de3-8576-6d94866bc8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.216.0/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:db:b2:d6:cd:60:cd:06:e3:73:97:92:a7:20:58:14:c7:9a:
         5f:3d:2b:30:14:9a:b4:66:03:45:46:f4:8a:cb:7b:d1:8b:0b:
         aa:02:c5:4d:fb:aa:30:83:5f:a6:f1:41:6b:ba:d2:3f:86:60:
         a5:aa:d5:04:ce:ff:e2:fb:bf:46:d0:37:99:fe:dc:42:ca:54:
         0a:f1:e9:82:c0:b1:7f:fa:33:35:2a:52:30:e1:dc:be:59:12:
         cc:ec:7a:11:e3:5b:7c:6e:57:90:a8:06:b6:29:97:e1:b2:49:
         6d:56:78:65:be:46:ba:be:eb:18:95:35:64:c4:c7:a1:d1:f6:
         b8:67:24:8a:6c:70:dc:f3:2c:1a:dd:dc:f6:4f:04:a2:e3:ef:
         10:8c:f7:99:9d:e6:44:5a:e4:81:68:5f:c4:ef:d9:3a:9e:1e:
         c0:fa:91:2c:e2:84:62:cc:73:4b:42:a3:27:8e:8b:6b:d3:d5:
         68:5c:77:71:24:84:cd:ae:1f:c3:3b:8a:96:0a:a3:9d:e1:ab:
         89:49:55:e0:d9:48:40:f5:fe:a4:63:a5:94:be:0f:04:d2:28:
         7e:4e:df:3d:b0:5a:b7:99:eb:a5:62:85:70:8f:e4:3e:a0:0b:
         c2:ad:88:97:8d:82:87:f2:3b:96:5f:5c:4a:10:95:8e:36:9a:
         bf:56:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:32 2024 by rpki-client on console-ams.rpki-client.org