Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
File:                     72276c2a-12de-3d01-9cca-f0c9bb94109b.roa (raw, json)
Hash identifier:          eK8t4vaZb1G7ch2n+9lE9vKWVdvUVVwi9WqsoS4XJVo=
Subject key identifier:   82:5D:7D:36:7B:80:3B:2A:99:FC:79:75:54:01:C0:72:83:8A:9E:7D
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F43285846B36DCA334DBB01122A8A1200
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa
Signing time:             Mon 29 Jul 2024 17:03:55 +0000
ROA not before:           Mon 29 Jul 2024 17:03:55 +0000
ROA not after:            Sun 27 Oct 2024 17:03:55 +0000
asID:                     19137
IP address blocks:        208.70.136.0/23 maxlen: 23
                          208.70.138.0/24 maxlen: 24
                          208.70.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Sep 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:b3:6d:ca:33:4d:bb:01:12:2a:8a:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Jul 29 17:03:55 2024 GMT
            Not After : Oct 27 17:03:55 2024 GMT
        Subject: CN=514a2c44-4407-4238-acf5-1b18fa33ecc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:8f:ea:b2:7e:81:f4:c7:95:b9:63:ac:99:
                    11:3b:4b:db:0a:0f:52:99:d9:1e:47:0b:fc:a8:43:
                    45:4e:ee:47:a1:f0:ee:cf:bc:9a:9e:7d:11:66:89:
                    ba:5d:5e:b7:96:92:ab:df:41:b0:89:1a:3b:67:d9:
                    1c:e2:72:dd:49:5b:9e:77:85:da:34:03:c6:47:2a:
                    a3:03:09:b8:bf:90:46:47:82:f2:91:90:79:3c:52:
                    de:b8:c8:30:ef:9e:45:56:29:b5:ad:ee:b2:f3:2b:
                    c3:e7:a7:6b:d2:8c:34:a7:c1:8e:98:61:13:c2:af:
                    ba:db:14:1c:71:7a:0c:05:d5:30:80:5e:79:0c:b9:
                    dd:22:eb:67:80:6e:76:80:78:6b:d0:45:40:1a:a9:
                    12:f4:2d:45:07:ac:99:17:09:96:38:64:ee:d2:80:
                    b2:d2:bc:27:78:8e:55:11:30:78:58:3f:42:6d:a1:
                    6e:16:d2:8d:0a:97:60:4d:96:b7:9c:16:c8:c2:f3:
                    b5:e6:5d:c2:f0:69:3f:a1:92:a0:e0:44:87:8e:49:
                    86:f6:e4:f5:da:ee:6e:6f:23:a2:05:e9:18:c5:24:
                    cc:6f:24:bc:35:bd:aa:ac:c4:31:c2:f8:5c:e7:16:
                    3a:7b:8d:a3:c5:1c:4b:1c:d6:79:d8:39:5a:1f:d3:
                    36:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:5D:7D:36:7B:80:3B:2A:99:FC:79:75:54:01:C0:72:83:8A:9E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/72276c2a-12de-3d01-9cca-f0c9bb94109b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c4:b4:56:3d:91:73:c1:ee:8d:8c:0d:32:d8:73:50:b8:5a:
         43:db:3e:41:a6:77:2c:e2:11:17:13:22:57:ff:0a:c6:d4:2c:
         e0:95:5d:b2:46:a0:c5:0b:8f:df:2b:53:93:a5:1e:da:6c:be:
         48:4b:81:7d:1e:41:11:21:66:28:03:47:01:9d:24:b7:84:cd:
         46:5a:1a:3f:61:d7:10:5c:07:a1:1e:19:4c:06:d5:c2:4b:22:
         f3:0c:fc:31:e6:ea:4a:79:54:74:80:54:bc:21:29:81:2a:03:
         22:d6:ed:2b:6d:fb:8d:12:05:6a:f5:e3:75:91:de:72:7d:19:
         99:c4:5c:2f:7e:ee:f9:ce:e6:19:c1:1a:99:2b:a4:13:c3:f4:
         50:33:b1:59:65:d3:a0:cb:98:29:bc:80:d5:34:4d:6d:a0:58:
         84:4b:4b:15:87:4c:30:9f:8d:1b:68:75:b8:d9:5c:75:b4:9a:
         03:14:fb:ec:b0:b1:6b:51:03:75:6f:8b:06:fc:69:7f:dc:f5:
         5f:2e:6d:75:be:9b:c8:4f:c5:2e:47:40:c4:88:80:c2:c2:f8:
         4c:59:ef:39:e9:42:9b:a2:6b:7f:a9:f4:d3:52:ee:9c:a5:7f:
         90:e3:2d:89:41:12:1f:7f:63:f0:d4:55:d8:43:72:2e:65:9c:
         8f:04:c2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 29 00:09:10 2024 by rpki-client on console-fra.rpki-client.org