Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa
File:                     d1c8dec1-cf4c-3500-a840-366e754a8c33.roa (raw, json)
Hash identifier:          EZnL9bGglZJU60buQo3NbzwMbWxcj+qnb1VDNgTQGW8=
Subject key identifier:   42:5A:C8:E7:83:EF:B3:DC:18:DC:0A:47:FB:75:72:20:89:9E:97:40
Certificate issuer:       /CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
Certificate serial:       010D0C9F43285847875D2EF674F09C25C2D68F40
Authority key identifier: 8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa
Signing time:             Sun 13 Oct 2024 15:01:50 +0000
ROA not before:           Sun 13 Oct 2024 15:01:50 +0000
ROA not after:            Sat 11 Jan 2025 16:01:50 +0000
asID:                     30114
IP address blocks:        140.235.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:87:5d:2e:f6:74:f0:9c:25:c2:d6:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e
        Validity
            Not Before: Oct 13 15:01:50 2024 GMT
            Not After : Jan 11 16:01:50 2025 GMT
        Subject: CN=999340dd-7d6f-4ae6-9073-8982c24f8b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:92:f6:72:0f:72:a9:98:d1:be:d0:6d:d5:
                    e3:e7:a9:1e:ec:19:a3:77:4f:72:13:b5:fb:d3:7d:
                    46:0e:81:ac:0f:15:18:f6:1a:9c:1b:58:8f:1e:f1:
                    24:a3:92:cf:77:87:00:e8:43:8c:9b:14:53:86:b2:
                    b4:06:a3:b2:d6:9a:56:fb:0b:c5:02:96:bc:07:c7:
                    02:de:0f:7f:e5:61:03:25:cf:12:2c:86:2a:b8:59:
                    40:1e:c9:54:5f:8b:f8:60:6a:89:eb:ac:df:aa:bf:
                    3d:cf:31:5a:6e:97:7a:c1:16:51:6e:2b:66:7e:0b:
                    2c:21:5a:cb:97:5f:23:67:02:df:13:2a:96:d9:20:
                    3c:27:19:7e:0c:f6:3c:e5:56:6e:8b:02:3a:f8:a9:
                    41:85:b2:d0:ac:ef:7d:e3:f9:47:fc:26:e0:84:d2:
                    ea:6a:72:ad:e2:4a:b5:17:e7:05:ea:96:78:dc:1d:
                    c7:4d:f3:b6:d5:d3:e5:75:13:49:b4:1a:46:24:35:
                    c9:ac:fa:e6:b3:b7:8b:0e:19:28:70:57:42:4e:31:
                    c5:88:d0:0f:b1:c0:e9:ea:56:57:77:bc:eb:99:87:
                    5e:db:e8:91:24:1a:3b:90:64:bf:e9:89:68:23:25:
                    20:db:9d:77:a6:82:6e:24:39:88:ea:1d:fa:5e:4f:
                    a6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5A:C8:E7:83:EF:B3:DC:18:DC:0A:47:FB:75:72:20:89:9E:97:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/d1c8dec1-cf4c-3500-a840-366e754a8c33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.crl

            X509v3 Authority Key Identifier:
                keyid:8F:2C:1A:5D:87:37:7C:47:21:1E:17:7A:7A:C5:62:C1:07:5E:DE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a74bb2f1-5966-4c4a-a5e4-ace59e1fa27e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:3d:21:a4:23:de:dd:13:6d:ad:c3:12:81:29:c8:17:3f:
         9f:b9:2e:21:42:6c:4f:00:91:91:f3:20:a0:2b:fc:6d:ff:a1:
         0c:76:b6:1f:b8:bb:e0:fe:bc:24:b0:17:f5:0d:4a:9e:47:2e:
         9d:d0:ee:ab:ea:50:34:a6:d4:f3:84:fc:8e:ba:c3:a9:8c:41:
         a1:f2:9c:a4:75:e8:93:49:61:47:c0:bc:8c:24:b1:1e:bd:6d:
         ff:10:a3:7f:00:8b:45:6e:eb:b9:fd:49:9e:65:1e:ba:c1:05:
         65:b3:af:ba:e9:68:da:2a:0d:ad:a9:b3:77:bb:b0:c4:21:06:
         36:e1:a3:89:66:f0:37:14:dd:57:65:0d:e5:97:a0:07:91:5a:
         3b:df:18:aa:0d:23:52:a2:87:71:21:8e:08:32:a5:8e:3a:37:
         97:ce:a9:ee:95:89:3a:53:01:11:04:c3:79:0f:cc:2e:e6:0d:
         7b:96:89:08:3f:e1:14:44:6d:6e:46:a5:38:63:b9:8b:2c:f7:
         82:7d:f0:8b:ed:6b:95:a6:e8:e4:0f:56:ce:cd:f2:18:4c:87:
         9c:9c:17:a8:3f:bd:c8:69:cf:3c:14:d4:c8:0e:ae:c2:8b:2e:
         9c:a6:3a:db:51:33:ef:e7:10:c0:d7:58:fc:eb:0d:87:54:ec:
         10:1c:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:22:22 2024 by rpki-client on console-ams.rpki-client.org