Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa
File:                     dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa (raw, json)
Hash identifier:          Yi2+LFbh80D39xC5VXqgo2pmqg8h7JwNdcfuRybsdNc=
Subject key identifier:   DB:ED:89:49:24:FF:CE:56:DC:BE:5E:E9:69:BE:6D:C6:BC:A2:10:1F
Certificate issuer:       /CN=825ee845-e910-434b-9fb6-239bbc2774f6
Certificate serial:       010D0C9F4328584566BDB863F8298A463132A380
Authority key identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     20130
IP address blocks:        140.192.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Jun 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:b8:63:f8:29:8a:46:31:32:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=825ee845-e910-434b-9fb6-239bbc2774f6
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=3420a1a2-2077-4ec7-ad9e-9981a349b642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2f:22:22:42:f2:2f:76:74:8c:b0:86:fe:93:
                    58:5d:7b:d2:15:42:7f:c5:c3:6d:e4:98:62:d4:54:
                    f1:45:f3:f9:40:e5:8e:ed:d8:d8:76:2d:81:50:1d:
                    c4:4f:65:4c:00:f7:80:f5:6e:d5:9c:c5:40:d4:67:
                    2e:90:51:29:6d:77:62:62:5a:c6:92:c9:05:91:45:
                    2c:8a:a5:b3:bf:10:30:3c:80:73:7e:32:0c:41:00:
                    0a:b6:ae:10:6e:26:5c:fd:cc:72:28:70:8b:d6:91:
                    45:1f:06:44:95:f4:c5:eb:45:02:92:68:ea:bb:6c:
                    1c:56:da:d9:f9:b3:01:ed:86:a6:a8:dc:d1:63:dc:
                    90:96:a3:3f:93:63:11:0f:b2:58:ad:05:87:0f:25:
                    14:9a:d6:18:30:6b:b0:f5:17:16:71:4e:cb:92:13:
                    5e:07:74:1d:ff:49:f4:d1:e9:1f:95:bd:ca:83:45:
                    b5:08:3c:98:2c:fe:4f:ef:89:13:59:54:76:72:55:
                    af:59:6c:3c:9b:02:f1:a4:89:38:6e:88:fb:9c:fd:
                    84:fd:7c:7f:e5:61:6b:10:be:05:ff:02:85:d2:40:
                    24:42:bc:58:6f:96:be:59:d4:95:f3:5d:9a:de:d1:
                    99:f3:29:7e:53:e3:5e:d1:5d:23:20:d2:44:6b:f9:
                    b2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:ED:89:49:24:FF:CE:56:DC:BE:5E:E9:69:BE:6D:C6:BC:A2:10:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl

            X509v3 Authority Key Identifier:
                keyid:1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:57:41:bc:a8:48:70:df:6e:07:d7:3e:23:8d:a9:6d:9f:3b:
         56:5a:78:39:ca:73:93:34:63:dc:25:d8:a0:99:0e:05:44:8c:
         7b:ad:ea:d2:c4:7c:63:da:9b:3c:a3:1c:a6:4f:0a:54:26:d7:
         c1:5e:1f:f2:50:8d:02:89:6d:a3:bf:89:94:b0:2c:bc:75:92:
         b4:4a:f3:e2:83:19:08:ed:12:56:06:ee:2d:db:d9:32:95:ba:
         a2:23:47:52:c4:0a:11:69:e9:d8:09:78:8c:4e:72:56:90:cc:
         e7:34:3a:30:d8:28:ee:0b:28:3d:31:c7:2c:69:35:41:69:fd:
         7b:60:b6:86:cb:06:2f:b1:20:02:7a:55:30:68:1d:40:a7:6a:
         ab:12:c1:49:d6:7d:eb:d6:1c:75:0b:04:e6:64:93:31:db:e3:
         cc:fb:1a:5a:28:0b:6e:9a:7c:b9:a5:31:ed:39:3f:05:6a:e4:
         b1:45:06:a6:ee:ff:83:5c:9b:a0:0d:ce:20:c3:b6:fd:e7:ba:
         5d:25:aa:c0:f5:81:54:54:70:de:32:93:d1:51:9e:b0:ea:3f:
         9a:e9:52:17:0e:bb:83:25:1a:88:68:9f:0e:48:a3:55:d0:00:
         b7:48:df:d8:a0:56:39:bf:d7:d1:0e:b5:c6:f9:eb:3c:b3:6b:
         e2:4a:5c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:23:45 2024 by rpki-client on console-ams.rpki-client.org