Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa
File:                     7e31f3de-8642-3397-8931-556523bd10ad.roa (raw, json)
Hash identifier:          TftXyecbNf5LCv50mrwa80IoA+ua6t63kt0x3b9bisw=
Subject key identifier:   06:AA:29:CB:D5:CB:43:26:51:C1:7D:76:CE:AE:68:E3:D3:99:BD:C1
Certificate issuer:       /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial:       010D0C9F43285847B3CC1696F83999E371A2CE80
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa
Signing time:             Tue 29 Oct 2024 13:00:40 +0000
ROA not before:           Tue 29 Oct 2024 13:00:40 +0000
ROA not after:            Mon 27 Jan 2025 14:00:40 +0000
asID:                     12119
IP address blocks:        140.141.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b3:cc:16:96:f8:39:99:e3:71:a2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
        Validity
            Not Before: Oct 29 13:00:40 2024 GMT
            Not After : Jan 27 14:00:40 2025 GMT
        Subject: CN=42816899-10ba-46ac-837b-df3609661fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:d8:5c:55:2a:7d:5d:75:3b:bf:95:59:32:
                    b7:3d:05:af:f0:96:e8:ad:40:1f:6a:19:6d:f2:df:
                    ad:95:f8:1f:57:00:4c:e9:e9:2a:59:86:4a:0c:fe:
                    c5:95:b3:85:c7:8b:a0:38:d3:f3:82:9b:41:47:92:
                    69:c1:8b:3d:e0:40:51:49:12:7c:8a:1d:37:10:1d:
                    ed:8b:de:32:d3:0c:67:68:0b:92:d5:32:71:f5:ad:
                    ec:83:f6:d7:fa:9e:68:42:97:bf:c0:f9:fa:5a:3a:
                    59:c8:65:3f:29:05:bc:ef:1f:87:4b:5f:1d:cd:34:
                    16:0d:ee:67:20:19:f6:91:0e:f0:30:46:8e:5d:8b:
                    99:a5:c9:fa:2d:76:3e:4f:54:b8:e8:fb:ea:46:49:
                    bf:3f:76:b0:3a:27:21:e2:37:34:36:2f:32:f4:ad:
                    58:3a:e9:95:7b:09:a0:78:2a:0c:67:ce:c2:4e:9e:
                    e8:ac:73:0f:97:30:2e:4a:4e:1e:f7:61:7c:0d:41:
                    ea:ac:9e:f0:af:9d:20:dd:d9:21:50:09:b4:dd:e5:
                    50:bd:d8:ab:72:b8:74:72:be:cb:fa:ab:12:06:1c:
                    95:ae:74:3e:8e:a7:9a:06:e7:1f:b8:61:08:0e:eb:
                    61:27:87:2e:57:fa:3b:69:90:fa:15:c1:e6:e5:d1:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AA:29:CB:D5:CB:43:26:51:C1:7D:76:CE:AE:68:E3:D3:99:BD:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl

            X509v3 Authority Key Identifier:
                keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.141.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:70:37:d7:80:9f:83:58:19:69:39:c6:a2:36:75:13:88:34:
         ce:42:9a:06:cf:58:e5:74:28:96:76:e8:7e:99:4b:c5:b6:b5:
         8a:98:7d:11:82:ac:51:c4:f5:48:79:e4:d9:48:d9:d6:42:3a:
         11:5b:bb:60:ff:4f:cb:92:a0:75:f0:36:5e:5f:8c:45:20:ab:
         f7:77:6d:fb:15:66:61:df:23:b9:45:a9:16:ca:8e:d4:05:fd:
         ba:4c:87:1e:1c:94:b3:ed:d0:21:90:86:14:00:7d:00:56:8f:
         43:f2:1d:00:66:f4:be:f8:04:36:0e:bb:ac:8a:4f:81:e7:de:
         7c:c3:7a:95:9c:5f:90:cf:61:fd:c4:cb:cc:e0:2b:c3:1d:74:
         80:12:37:19:76:91:4c:40:52:0b:dd:a2:1e:b6:5b:1d:0a:ea:
         24:6c:b0:70:1e:50:25:44:f6:da:0f:53:bb:e7:d7:76:2a:62:
         81:73:fa:e8:04:cd:48:51:bc:ae:ae:95:60:64:fd:f7:7b:42:
         eb:d0:fc:ef:04:3e:3a:4e:ef:8c:5e:33:58:14:f2:dd:e0:a9:
         24:5a:9c:c3:c6:e0:e3:82:60:35:9c:d6:3b:5d:5f:50:f7:e7:
         41:fe:ce:a2:0d:82:29:ff:73:9f:ce:49:db:e2:8d:3f:18:14:
         6e:44:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:05:45 2024 by rpki-client on console-ams.rpki-client.org