Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/e000c2db-99f2-3c90-98b9-d90339092d41.roa
File:                     e000c2db-99f2-3c90-98b9-d90339092d41.roa (raw, json)
Hash identifier:          j0TfFDXS8rBWPwhCbp2QUkLSuZwHI6ZAhYQsTnmsK8g=
Subject key identifier:   72:1D:37:16:42:6D:76:8C:23:E3:B2:A0:38:CD:4B:F8:CF:7F:B9:5F
Certificate issuer:       /CN=579fe1a7-1d04-4f71-b411-613b966124fb
Certificate serial:       010D0C9F43285847C50BFAD86606A8B48398F780
Authority key identifier: 47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/e000c2db-99f2-3c90-98b9-d90339092d41.roa
Signing time:             Mon 04 Nov 2024 17:18:20 +0000
ROA not before:           Mon 04 Nov 2024 17:18:20 +0000
ROA not after:            Sun 02 Feb 2025 17:18:20 +0000
asID:                     11426
IP address blocks:        140.235.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c5:0b:fa:d8:66:06:a8:b4:83:98:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579fe1a7-1d04-4f71-b411-613b966124fb
        Validity
            Not Before: Nov  4 17:18:20 2024 GMT
            Not After : Feb  2 17:18:20 2025 GMT
        Subject: CN=0738be2f-8089-4c26-9f7a-9e66fe265c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cb:48:c1:91:c7:81:50:ef:52:51:74:9f:44:
                    a9:57:bf:62:19:95:97:cc:24:36:b2:68:a5:21:df:
                    79:6e:de:b5:4c:ac:7a:f1:31:a9:0b:bd:26:63:c1:
                    0f:67:71:42:2f:d3:a2:af:8b:9d:6f:fc:e2:61:43:
                    a3:03:ec:c6:9c:51:c5:2d:d4:c9:07:68:eb:40:64:
                    f3:c9:a0:e6:3f:b7:4c:ea:a4:1d:10:62:e8:84:fc:
                    6e:bf:c8:24:0a:d8:7a:c6:58:32:7f:66:4e:fb:dc:
                    62:72:fc:c5:38:a5:db:4e:8e:1e:4f:5b:28:b2:57:
                    d9:90:28:b0:6c:f2:c7:f4:7a:22:b8:04:a7:ea:40:
                    0d:82:8c:89:15:4c:87:cd:9d:ad:db:c0:17:1d:1d:
                    62:49:7e:fa:75:07:6c:7a:61:d1:1b:7b:7d:e0:e5:
                    8e:9e:d4:03:eb:e5:1e:5f:b1:b7:88:77:74:e1:1a:
                    5f:29:aa:4c:e6:78:08:94:d1:92:31:a8:a7:4a:c4:
                    f4:b3:1b:0f:c0:72:13:d0:e9:cb:5f:91:4b:5b:60:
                    6a:d5:da:2e:52:46:9f:04:e9:8c:cd:d0:18:1c:d4:
                    18:1e:9d:eb:34:86:ef:7c:04:45:ec:93:98:e4:f2:
                    09:ee:a5:ab:0a:b3:46:6b:bd:61:a5:1b:d7:09:87:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1D:37:16:42:6D:76:8C:23:E3:B2:A0:38:CD:4B:F8:CF:7F:B9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/e000c2db-99f2-3c90-98b9-d90339092d41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb/579fe1a7-1d04-4f71-b411-613b966124fb.crl

            X509v3 Authority Key Identifier:
                keyid:47:D1:03:D7:EA:92:C8:67:48:81:1A:CF:43:4B:E4:68:8C:AD:BC:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/579fe1a7-1d04-4f71-b411-613b966124fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:f2:9b:30:47:10:a3:58:74:9d:be:db:de:ca:b6:b5:f2:
         2f:f9:4f:35:9e:a2:e2:70:55:aa:46:8b:84:c8:0f:2e:d6:69:
         ef:52:93:01:ab:82:aa:c1:a0:e9:fc:9b:17:51:bc:94:d4:38:
         a7:7e:ef:44:1d:b7:93:4a:a3:62:50:ca:1f:fe:82:3f:2d:e3:
         f2:6f:3a:d4:a7:51:35:e1:5b:ad:0a:c4:20:d9:9e:4c:88:2b:
         5b:aa:a4:d3:d9:1e:27:c7:87:54:a6:d4:25:7d:b4:20:26:02:
         16:6c:41:ff:e2:b4:c7:1e:aa:dc:eb:33:df:da:1d:42:02:ae:
         f5:d6:31:ee:71:f8:11:78:9c:9f:f6:d9:37:28:30:5b:36:26:
         09:dc:8f:d1:3a:f7:d8:54:1c:fb:6b:56:53:1f:93:a5:69:fa:
         33:5d:0e:a6:aa:11:73:f8:8b:9e:91:8a:b8:4c:fd:b3:01:fc:
         fe:9a:11:33:47:72:a2:fa:1f:f1:83:48:0b:16:d5:98:46:80:
         e3:5b:67:a2:0e:cf:ba:3e:f3:07:30:d6:d2:4e:4f:89:14:48:
         19:8f:51:c2:88:ef:81:47:c2:60:9b:1c:ef:3c:14:cc:c7:cd:
         ad:55:e0:56:b9:8e:d2:2c:b2:35:09:55:5d:fa:75:33:05:0b:
         17:36:3d:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfFC/rYZgaotIOY94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTc5ZmUxYTctMWQwNC00ZjcxLWI0MTEtNjEzYjk2NjEy
NGZiMB4XDTI0MTEwNDE3MTgyMFoXDTI1MDIwMjE3MTgyMFowLzEtMCsGA1UEAxMk
MDczOGJlMmYtODA4OS00YzI2LTlmN2EtOWU2NmZlMjY1YzBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8tIwZHHgVDvUlF0n0SpV79iGZWXzCQ2smil
Id95bt61TKx68TGpC70mY8EPZ3FCL9Oir4udb/ziYUOjA+zGnFHFLdTJB2jrQGTz
yaDmP7dM6qQdEGLohPxuv8gkCth6xlgyf2ZO+9xicvzFOKXbTo4eT1soslfZkCiw
bPLH9HoiuASn6kANgoyJFUyHzZ2t28AXHR1iSX76dQdsemHRG3t94OWOntQD6+Ue
X7G3iHd04RpfKapM5ngIlNGSMainSsT0sxsPwHIT0OnLX5FLW2Bq1douUkafBOmM
zdAYHNQYHp3rNIbvfARF7JOY5PIJ7qWrCrNGa71hpRvXCYfxbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHIdNxZCbXaMI+OyoDjNS/jPf7lfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Nzlm
ZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNiOTY2MTI0ZmIvZTAwMGMyZGItOTlmMi0z
YzkwLTk4YjktZDkwMzM5MDkyZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTc5ZmUxYTctMWQwNC00ZjcxLWI0
MTEtNjEzYjk2NjEyNGZiLzU3OWZlMWE3LTFkMDQtNGY3MS1iNDExLTYxM2I5NjYx
MjRmYi5jcmwwHwYDVR0jBBgwFoAUR9ED1+qSyGdIgRrPQ0vkaIytvMEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81NzlmZTFhNy0xZDA0LTRmNzEtYjQxMS02MTNi
OTY2MTI0ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOvKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+Y8pswRxCjWHSdvtveyra18i/5TzWeouJwVapGi4TIDy7Wae9SkwGr
gqrBoOn8mxdRvJTUOKd+70Qdt5NKo2JQyh/+gj8t4/JvOtSnUTXhW60KxCDZnkyI
K1uqpNPZHifHh1Sm1CV9tCAmAhZsQf/itMceqtzrM9/aHUICrvXWMe5x+BF4nJ/2
2TcoMFs2Jgncj9E699hUHPtrVlMfk6Vp+jNdDqaqEXP4i56RirhM/bMB/P6aETNH
cqL6H/GDSAsW1ZhGgONbZ6IOz7o+8wcw1tJOT4kUSBmPUcKI74FHwmCbHO88FMzH
za1V4Fa5jtIssjUJVV36dTMFCxc2PVE=
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:38:52 2024 by rpki-client on console-fra.rpki-client.org