Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa
File:                     4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa (raw, json)
Hash identifier:          /yZnycnIUiwDFbBRm2mCncbaAjWXLOKVsd8U1tJit7U=
Subject key identifier:   20:7A:9D:3F:03:57:69:32:A6:29:1A:8D:D1:26:B4:55:67:CC:88:69
Certificate issuer:       /CN=90867e5c-2c8f-4999-a134-dc9418f84496
Certificate serial:       010D0C9F43285847CFD4D6F83C4CFAC47FCA2900
Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     3477
IP address blocks:        140.208.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d6:f8:3c:4c:fa:c4:7f:ca:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=5de6bd2a-9ef3-41a4-805f-b53d6d7251c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:33:06:76:3b:ec:6c:70:d7:a7:41:75:29:0c:
                    f2:f6:8c:a1:9d:89:a2:5a:86:2d:8e:f1:36:b5:07:
                    06:60:57:1d:03:3b:17:2f:c0:70:4e:2b:b0:91:f0:
                    a1:e7:a7:2f:2c:7e:a7:fd:c2:3a:04:e1:b7:6b:83:
                    50:ed:dc:7c:89:ca:87:f7:52:1e:53:d8:49:c7:a0:
                    df:fd:42:83:32:08:f7:f8:27:90:79:e3:2e:7c:d1:
                    64:91:60:5e:aa:ed:06:b7:58:73:86:67:c0:06:41:
                    17:dc:45:4f:bc:65:a3:75:8b:30:aa:05:eb:46:97:
                    26:b7:0d:41:85:d5:b1:41:41:49:11:07:57:56:8a:
                    d6:34:8b:2c:e0:d8:e9:1e:53:a4:4b:50:9d:1d:f1:
                    1d:e5:1e:96:5d:17:37:d1:7f:ea:ff:18:fb:74:06:
                    8f:68:c5:16:05:a8:85:7f:c6:6e:f1:17:24:d2:fd:
                    1a:00:a6:41:fd:b1:e3:1b:a4:f2:fd:2f:99:0d:77:
                    d1:4b:ed:62:46:6a:fd:82:95:3f:20:5d:cd:b6:64:
                    5c:f0:af:3e:de:1f:1d:48:4b:63:bd:35:7c:f4:c3:
                    63:57:62:ee:19:f3:7f:9e:95:68:c7:24:ea:c0:48:
                    03:20:ff:2b:16:83:b6:5a:5f:d6:7c:a7:5c:29:26:
                    7e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:7A:9D:3F:03:57:69:32:A6:29:1A:8D:D1:26:B4:55:67:CC:88:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/4e11c5d1-0c7a-3154-b28e-ae22550c8592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl

            X509v3 Authority Key Identifier:
                keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.208.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e8:60:25:a8:52:d3:ac:71:c4:7f:15:34:bd:03:97:6f:8c:
         f0:52:ee:13:01:e6:5f:91:6f:e3:de:01:3c:57:2a:a7:99:93:
         ae:d4:1b:72:91:eb:53:67:84:b7:61:75:b9:aa:a6:0a:5e:98:
         74:80:02:9c:a7:96:b0:0e:a7:10:9d:b1:1c:b5:1d:92:5e:27:
         b3:aa:b4:81:58:9a:0e:38:ed:31:f3:70:a3:38:e0:d5:9f:bd:
         b3:49:a2:c1:a5:19:29:18:91:5b:c4:5e:bd:35:0b:0b:fd:54:
         ac:d2:9c:32:bf:b5:c4:d5:76:4b:c7:a3:8d:b7:4c:b7:88:41:
         f4:b3:24:0c:b4:37:04:17:9e:20:e6:90:3f:f7:e0:59:ef:b1:
         d3:49:46:54:95:84:18:1f:4c:59:b1:0f:42:52:d3:80:f1:b9:
         63:cf:c7:de:9d:01:43:de:18:7e:f5:0b:04:0a:75:9e:5f:d6:
         83:9f:09:9a:30:46:f1:43:8b:1c:b5:79:9a:4c:04:42:62:20:
         ef:bb:0e:be:be:cd:2f:1c:bd:87:7f:4d:98:2a:3e:2d:2f:cf:
         cb:d4:9e:99:63:74:f1:4c:86:58:a1:95:29:d8:f3:41:79:91:
         ac:b8:52:9c:bf:01:e6:41:0a:7d:b2:65:aa:19:a5:8d:77:e3:
         1a:49:42:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:06:27 2024 by rpki-client on console-ams.rpki-client.org