Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa
File:                     d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa (raw, json)
Hash identifier:          v3VtPlNphnzRc+UE25Y8ticrTS3mwo1jO0chCZwh1Bo=
Subject key identifier:   2B:E1:6E:34:93:35:C3:2B:6E:95:81:14:99:8E:24:DA:D3:90:0E:4C
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584793B146DEF8441CC39D33F600
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa
Signing time:             Fri 18 Oct 2024 01:00:31 +0000
ROA not before:           Fri 18 Oct 2024 01:00:31 +0000
ROA not after:            Thu 16 Jan 2025 02:00:31 +0000
asID:                     54113
IP address blocks:        151.101.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:93:b1:46:de:f8:44:1c:c3:9d:33:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 18 01:00:31 2024 GMT
            Not After : Jan 16 02:00:31 2025 GMT
        Subject: CN=a3662154-fc90-4853-92ab-c6bd9cc3b398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4b:21:b4:bd:0c:2d:4e:02:b9:51:bc:5f:2f:
                    b7:c8:92:84:17:5b:b4:46:d7:fd:07:d9:89:e0:35:
                    8c:e5:6a:75:30:21:15:13:95:5d:95:db:72:b3:f9:
                    1e:d2:a4:67:c3:8b:c5:79:22:28:04:49:d7:bd:20:
                    0f:12:22:f1:be:2b:c6:83:fb:70:11:dd:47:54:a8:
                    79:31:98:7c:18:4a:dd:5f:38:25:1f:52:df:4a:31:
                    80:6d:c2:c7:f0:5b:68:d2:3c:9b:d5:b8:1d:a9:0c:
                    3e:78:2a:a6:17:c8:f1:18:f4:30:90:e0:4e:1c:7e:
                    87:8c:9a:8b:04:c1:3e:cf:df:f3:97:16:34:05:3d:
                    c7:02:59:29:a2:d1:9e:9a:dd:81:4f:ba:94:a2:ff:
                    a9:1a:3b:29:87:05:f1:ab:b5:c3:65:eb:c7:78:27:
                    29:9a:7d:94:9e:4d:de:80:68:a9:18:e5:75:c7:0e:
                    0f:b5:ce:c7:39:81:b4:2c:1e:de:38:bb:d7:99:2c:
                    ee:96:55:c5:c1:05:8b:71:eb:21:ce:ab:a5:d8:4d:
                    eb:d4:7f:e8:a1:3f:ae:fe:39:c8:a1:e7:62:ca:fe:
                    c6:36:e9:6f:c5:50:93:86:f5:86:80:12:3c:2b:01:
                    59:1e:1d:3e:77:f5:c4:68:2e:4a:6d:c3:fa:68:98:
                    99:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E1:6E:34:93:35:C3:2B:6E:95:81:14:99:8E:24:DA:D3:90:0E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/d27f7e4e-8dd2-3319-8c51-8e4a36d4a01b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:86:f4:0c:b2:98:0a:26:3b:84:21:73:19:86:f3:15:1b:fe:
         bc:fa:43:2b:d4:0d:a0:82:1b:9c:9f:2e:28:c0:08:c2:59:40:
         cc:87:f6:c2:9a:eb:18:d6:26:6e:73:0c:1c:0c:83:61:09:f4:
         fb:3b:e6:e4:81:bf:e3:0e:69:c6:ce:b6:4a:85:1d:e4:3f:57:
         8b:b1:19:11:30:fa:5e:a6:bd:3a:98:cd:0d:01:a4:28:b8:cc:
         31:e1:e5:89:2f:06:4a:b5:d8:a7:7b:c5:b3:db:95:70:40:10:
         45:6a:ae:9b:e4:d6:9a:e6:ac:9a:38:59:b9:f0:65:c6:58:90:
         26:73:27:b5:a1:6e:15:b0:fd:c9:2a:56:7c:70:fe:72:c0:f3:
         ee:e5:94:b2:82:3f:6f:d1:06:3a:99:65:77:3d:39:d3:e1:44:
         db:c1:46:f1:4f:e2:10:d2:9b:8a:e0:8c:70:85:63:18:14:79:
         a8:2e:f1:0a:43:1e:c9:00:0d:0a:32:a3:5f:3c:87:ba:a5:0c:
         b0:18:99:58:4c:c4:be:a0:59:d8:25:bd:52:cb:eb:0a:ff:68:
         8f:ba:c5:29:b0:62:b5:c4:cd:27:32:73:1e:a0:96:8e:0b:9d:
         4c:8b:b5:fb:ba:3a:90:e4:8a:b9:fb:5d:92:0c:be:54:2c:aa:
         0f:90:01:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:24:33 2024 by rpki-client on console-fra.rpki-client.org