Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
File:                     e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa (raw, json)
Hash identifier:          UTX8QODPJ2EQlU56oEkVFM98EtBd0c1xi/YV5+fCmyo=
Subject key identifier:   50:8E:DF:82:85:5F:40:56:80:4F:CF:7E:C0:F4:FC:60:F5:32:51:23
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F43285847BEF6C77CDED0CB39524CFCC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa
Signing time:             Sat 02 Nov 2024 13:00:42 +0000
ROA not before:           Sat 02 Nov 2024 13:00:42 +0000
ROA not after:            Fri 31 Jan 2025 14:00:42 +0000
asID:                     54113
IP address blocks:        140.248.220.128/25 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:be:f6:c7:7c:de:d0:cb:39:52:4c:fc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Nov  2 13:00:42 2024 GMT
            Not After : Jan 31 14:00:42 2025 GMT
        Subject: CN=eabfed09-c31a-47a4-a541-7d167f468ddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fd:f1:d8:7e:a9:5d:5e:ad:4e:c6:3f:d6:3b:
                    49:2a:63:fa:1c:57:e8:f7:ea:f3:61:9b:bc:ab:71:
                    a8:71:4e:f4:56:ed:b9:a7:14:49:39:c7:f9:3c:26:
                    4a:08:16:72:bb:b0:b6:52:11:72:f0:cc:6d:c8:55:
                    1f:f8:c0:58:7e:02:b6:26:12:7e:fe:33:cd:85:b7:
                    c3:e7:ca:78:6b:b3:66:31:cc:39:99:99:7a:e0:ea:
                    1f:f4:b7:a4:6b:17:6e:0f:e4:0a:62:06:25:85:c3:
                    e1:d0:4f:00:80:d5:58:21:09:fc:df:08:53:cf:0f:
                    89:ce:7e:04:36:50:f7:a8:09:1b:43:8b:0e:ef:7c:
                    38:20:33:ca:1d:73:ad:fb:ba:b1:ca:73:78:85:7e:
                    7c:17:b9:98:0a:e1:8a:1c:23:a6:48:26:16:03:56:
                    db:0c:59:c9:24:ae:37:9f:cb:0e:57:fc:d5:91:73:
                    17:d5:23:66:8f:90:c6:fc:4d:0d:13:b9:af:e4:71:
                    8a:33:e9:e6:bb:2e:6a:1a:d7:28:40:0a:c5:35:6d:
                    56:28:ee:2a:2d:ec:00:c2:26:34:ca:1f:f4:91:1f:
                    2b:df:ad:71:67:90:ef:e5:15:d2:43:79:cc:ac:8b:
                    a5:82:f3:9e:c7:c2:2d:6a:82:87:cd:2d:8d:f3:73:
                    df:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8E:DF:82:85:5F:40:56:80:4F:CF:7E:C0:F4:FC:60:F5:32:51:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e2c11ea1-c423-35e7-8e41-3c3b9b7542cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.248.220.128/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:ef:10:a0:c5:d3:1e:58:56:f7:d2:b4:16:f4:e3:43:af:
         55:1c:c2:74:a4:e1:dd:b7:f6:c6:5e:a6:41:45:c4:e0:6d:1c:
         75:46:ab:4f:1d:fd:36:63:e7:02:b6:9d:79:28:95:65:6b:5a:
         4d:a0:09:a7:4a:72:12:22:0f:54:47:48:3c:2e:a2:cb:01:9c:
         41:67:38:06:f4:e0:e7:0a:24:2b:f6:e7:33:43:6a:92:3c:d4:
         b9:54:5a:c5:05:3c:46:1b:f0:70:14:37:75:8d:82:ad:d0:57:
         1d:e0:56:60:00:13:9a:bf:8a:e1:a4:43:9a:86:cb:89:02:59:
         81:5b:31:06:36:34:1b:83:15:71:33:45:ef:41:9a:79:95:ac:
         a0:e5:96:62:0c:bc:91:1e:a3:1d:ce:bd:3e:7c:16:5d:3c:c8:
         46:67:f1:a5:3b:2a:54:67:5b:23:e8:17:e0:38:88:1e:eb:79:
         c6:14:84:86:8e:e7:b9:d8:21:5a:2d:20:a2:dc:1b:95:42:53:
         aa:66:36:01:d7:a3:3f:99:69:15:f0:e7:3a:fc:9d:cc:ab:c0:
         ea:db:39:0b:77:e1:43:50:05:3e:c4:64:5b:75:36:1a:7e:bd:
         33:50:25:12:a0:07:db:6b:9c:a1:66:80:35:d6:ef:0a:6e:f3:
         af:0d:10:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:02:32 2024 by rpki-client on console-ams.rpki-client.org