Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/abf01c14-d33a-3d52-be38-42260ecc82be.roa
File:                     abf01c14-d33a-3d52-be38-42260ecc82be.roa (raw, json)
Hash identifier:          LSLalaVKZUlug6VOurqyfzwbb25hhTFjV18tM0ISY1k=
Subject key identifier:   69:7F:EA:BD:DF:19:D9:11:97:3B:9D:E6:32:13:8C:E1:46:B1:C3:9C
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F43285847C50BD2017242129C8E7D6F00
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/abf01c14-d33a-3d52-be38-42260ecc82be.roa
Signing time:             Mon 04 Nov 2024 17:18:01 +0000
ROA not before:           Mon 04 Nov 2024 17:18:01 +0000
ROA not after:            Sun 02 Feb 2025 17:18:01 +0000
asID:                     11426
IP address blocks:        140.235.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:0b:d2:01:72:42:12:9c:8e:7d:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Nov  4 17:18:01 2024 GMT
            Not After : Feb  2 17:18:01 2025 GMT
        Subject: CN=d56c6203-90cc-4b46-8824-1ef4355451fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:9b:ab:db:e5:61:18:80:a1:78:93:7e:3e:
                    ce:bc:e3:e0:00:84:41:8d:c9:af:4f:7a:9f:12:cd:
                    6c:f1:11:00:c6:7c:f0:91:a7:30:6f:48:83:94:88:
                    42:8d:e8:e0:81:83:d2:99:65:e5:99:b1:a7:f6:0b:
                    d1:61:7b:0a:e3:eb:f4:33:6c:e5:a9:02:9d:d7:c9:
                    a7:cb:bb:44:43:08:d7:47:e4:9f:6f:43:1b:1c:05:
                    47:b0:f6:5a:d7:2c:d9:5e:6c:fd:44:ad:ae:a1:20:
                    3d:cc:d0:6e:15:20:e4:d4:bb:88:01:27:c8:28:6b:
                    9b:12:ed:30:77:c1:ae:ec:ce:f3:0f:86:da:ae:77:
                    06:b6:ce:3e:74:dc:db:a4:93:e9:b2:3e:c2:8c:06:
                    09:7f:c0:94:22:08:3b:90:3f:48:12:f4:69:ff:dc:
                    4e:dc:19:be:80:c3:28:cd:fc:65:4d:9e:ab:ef:1a:
                    8e:a2:67:5e:da:61:68:40:ed:68:d4:e1:35:50:60:
                    54:2c:2f:7d:c2:e9:5a:c2:c2:70:5a:cd:76:cb:70:
                    ae:4b:73:00:d9:50:5c:f6:01:21:11:e9:20:d7:b9:
                    59:2b:00:5d:69:b8:b2:db:84:32:96:be:98:50:f7:
                    2f:3c:0c:43:ff:a8:23:0a:4d:6f:a2:5f:e3:9c:f2:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:EA:BD:DF:19:D9:11:97:3B:9D:E6:32:13:8C:E1:46:B1:C3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/abf01c14-d33a-3d52-be38-42260ecc82be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:bd:51:13:71:69:b7:12:fb:09:b9:09:3c:87:f6:0a:d7:
         d6:29:54:79:70:03:f7:78:8c:56:b6:63:15:65:23:35:27:5f:
         0b:7c:43:5b:86:21:ea:42:6c:48:e7:a9:2a:71:f6:3d:10:ef:
         4f:6e:8b:bd:78:47:35:d1:bd:a1:7c:25:79:e8:f9:a1:33:0d:
         99:ff:9c:f5:2f:e7:eb:26:a5:bb:12:26:0e:96:e9:f3:78:38:
         4c:a2:34:76:9d:6e:01:97:b1:53:77:c8:89:07:fd:b2:78:5b:
         e6:35:2b:7e:07:27:e9:86:88:1f:4f:e3:02:b1:89:c6:6e:a1:
         62:70:43:8c:1a:59:ee:74:0f:2b:07:e4:5e:aa:8c:cb:3d:5e:
         a1:73:18:c1:f9:5f:ba:d4:54:c1:cf:0d:98:9c:14:13:d0:c4:
         19:fb:66:a3:49:7c:d3:41:f2:28:1f:93:e1:49:32:bf:a7:2c:
         52:ff:a6:57:fa:a1:2f:19:2a:d9:39:e3:b4:22:f1:6a:18:f0:
         fb:c2:56:46:c9:ac:8d:e3:fc:bc:1b:0d:8c:ac:3d:46:2c:34:
         7e:00:be:47:5b:16:ba:65:26:88:0b:d6:49:1c:65:28:63:64:
         b4:c3:1c:a6:0b:f1:8e:51:a1:7c:a3:c5:4d:dc:70:42:6c:69:
         71:7f:6f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:27:33 2024 by rpki-client on console-ams.rpki-client.org