Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa
File:                     1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa (raw, json)
Hash identifier:          CZ6b3fcT1q27O6a98pEbE4kghWxFAXhlH9J05Q+Zq28=
Subject key identifier:   DE:AD:8B:C6:6D:3A:AB:5E:26:E7:DB:76:D0:A5:E9:E1:C7:6E:E5:9B
Certificate issuer:       /CN=820e56e8-763b-4037-929e-b01c8d786e75
Certificate serial:       010D0C9F4328584780265993A9CA682329091480
Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa
Signing time:             Fri 11 Oct 2024 01:00:31 +0000
ROA not before:           Fri 11 Oct 2024 01:00:31 +0000
ROA not after:            Thu 09 Jan 2025 02:00:31 +0000
asID:                     399275
IP address blocks:        165.140.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:80:26:59:93:a9:ca:68:23:29:09:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75
        Validity
            Not Before: Oct 11 01:00:31 2024 GMT
            Not After : Jan  9 02:00:31 2025 GMT
        Subject: CN=8e848d29-265e-4983-963e-704cc3447eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f1:24:4e:64:5d:94:37:c0:b2:c1:37:1a:00:
                    d5:a6:e3:8f:35:ee:fe:f3:a9:4b:80:26:da:fc:5d:
                    61:73:98:ce:a5:88:84:24:c0:b7:8b:c7:61:7a:22:
                    e7:4b:62:cd:45:71:c3:97:62:69:b7:c4:fc:f9:a2:
                    f7:03:97:a3:6f:55:d7:3f:b4:63:84:85:42:42:59:
                    8d:06:9c:13:26:95:d9:ec:70:10:97:db:0c:9f:97:
                    55:b1:69:5f:c6:2e:35:75:13:d2:0e:3e:03:88:b0:
                    d7:cc:e9:52:80:16:7f:dc:3f:46:04:ad:56:a0:a2:
                    ea:18:b6:b5:28:f0:d8:86:a0:cc:61:c4:61:cb:bd:
                    e4:ae:c4:d9:9f:53:f1:91:a2:91:2c:70:3e:4e:f6:
                    32:20:e3:5d:1e:d8:a4:9d:1e:36:f2:c7:b9:5d:57:
                    b0:90:9e:9f:f9:4e:43:43:ec:82:40:a0:d3:c2:db:
                    21:1d:0f:12:9c:7e:79:64:cc:66:26:e5:4b:40:6e:
                    68:89:9b:a4:f7:10:33:00:13:9c:32:1e:35:44:6a:
                    79:69:33:c9:4b:76:86:20:16:f0:39:38:9f:b0:d1:
                    24:fa:7c:c4:d5:b3:cf:0b:51:f6:e3:28:1b:9e:ae:
                    f8:b8:1b:e7:f5:c9:a3:69:50:2a:cd:5a:c8:41:46:
                    f2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AD:8B:C6:6D:3A:AB:5E:26:E7:DB:76:D0:A5:E9:E1:C7:6E:E5:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl

            X509v3 Authority Key Identifier:
                keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:76:df:ca:6c:89:b8:be:b6:a3:1d:3b:f9:e6:d7:cb:77:f0:
         c0:f6:3c:8a:2d:b8:dc:e9:d6:a4:8f:a4:92:87:c4:2f:55:84:
         75:7b:65:7f:22:b0:ea:9d:f2:b0:d1:1f:1b:27:0b:ed:f7:3c:
         3e:12:e7:90:52:b8:e9:17:e9:3e:44:fc:1e:2b:dd:7b:86:e0:
         ec:d5:53:b0:ed:39:9b:c8:e4:b4:73:bb:32:e3:68:6e:8e:44:
         ff:bd:bf:41:54:e0:5a:fd:28:32:79:30:c7:6c:eb:b3:54:cf:
         3b:e7:bb:93:9a:45:e1:44:b3:6a:29:e0:75:3f:3d:09:d1:5e:
         0b:b4:81:03:90:55:a3:72:74:94:dc:be:43:2a:df:f3:fc:33:
         68:3f:4e:a9:85:5f:9f:8a:73:b4:96:0d:eb:2f:12:1d:8c:67:
         af:00:82:17:71:7d:44:54:a2:b9:6d:09:91:94:f3:e0:a1:32:
         79:6b:ee:d6:cc:5b:4f:e2:68:2a:f7:60:5e:1c:49:1e:de:76:
         ef:e0:bc:14:e5:ab:96:91:86:6e:32:62:67:32:6f:d5:91:f9:
         c8:b2:c1:c4:8c:35:56:26:d6:2c:d7:cf:90:15:6c:32:5a:2a:
         cc:b5:8f:6f:6d:e6:9e:ca:a5:bf:a1:ae:4a:ac:5f:ae:18:1d:
         28:68:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:07:53 2024 by rpki-client on console-fra.rpki-client.org