Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa
File:                     0f29e9e3-b308-38df-9241-83ea7184df8a.roa (raw, json)
Hash identifier:          d+5FGkIn6pb+LX5+DYkOR5Ik0nYChPwo2nkxuvdXaWg=
Subject key identifier:   68:20:AB:1C:74:9B:89:46:3F:49:2E:12:D6:10:4B:AF:AF:7F:EE:7B
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285845CF6E3D4FD86E5F69559B9A20
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa
Signing time:             Thu 09 May 2024 01:00:26 +0000
ROA not before:           Thu 09 May 2024 01:00:26 +0000
ROA not after:            Wed 07 Aug 2024 01:00:26 +0000
asID:                     53927
IP address blocks:        139.131.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 May 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:cf:6e:3d:4f:d8:6e:5f:69:55:9b:9a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: May  9 01:00:26 2024 GMT
            Not After : Aug  7 01:00:26 2024 GMT
        Subject: CN=a573ab76-50c5-4c2a-96b0-edce6d234ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2b:14:8b:c8:1f:66:f2:25:b5:96:d6:61:30:
                    4a:50:c4:4d:02:d9:03:42:e2:b8:f1:86:72:11:85:
                    8e:b1:82:df:f1:7c:45:ad:7c:67:98:fb:db:b2:aa:
                    b1:27:9c:b7:0a:42:6f:c8:71:06:36:59:18:e1:95:
                    89:a2:35:0e:46:87:c8:ba:2b:99:66:fb:b7:14:06:
                    81:13:6a:86:5b:f4:65:fd:84:b4:47:3a:b5:c3:63:
                    af:62:cc:e8:a1:ed:4d:79:e2:75:93:0e:52:64:f6:
                    f4:9d:7f:e1:e3:fb:0c:04:b1:9a:26:56:a2:e9:6c:
                    fb:9c:26:eb:2f:03:70:1d:60:21:c0:14:2e:6e:15:
                    91:07:d5:52:9d:be:77:54:0b:e3:7e:db:f7:91:54:
                    1e:e6:39:0a:e7:a3:d4:63:f3:97:63:e1:d7:39:1a:
                    fb:b2:e0:22:81:03:ea:fe:b0:48:a3:fb:58:ed:ce:
                    df:9e:57:2c:ac:69:cc:d3:0d:33:ff:d7:3b:ca:a1:
                    8f:30:c2:34:17:c0:41:bc:d2:4c:5f:72:c5:c3:88:
                    73:66:87:77:15:c3:bb:96:1f:fe:f2:82:9d:d8:f2:
                    5a:f2:d4:98:a0:df:a0:88:a4:8f:9e:5c:7e:0e:2d:
                    7d:14:67:0e:16:4b:e4:f3:55:b8:97:b5:d3:37:3a:
                    43:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:20:AB:1C:74:9B:89:46:3F:49:2E:12:D6:10:4B:AF:AF:7F:EE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/0f29e9e3-b308-38df-9241-83ea7184df8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:7d:32:ea:39:c6:7e:4b:ca:bd:70:97:4c:0b:74:1e:e8:83:
         44:7f:66:1a:91:9b:31:82:1c:80:4c:7b:0a:ed:8e:f3:8b:6b:
         d2:be:b7:0f:37:41:9a:24:03:0a:c6:a2:8e:8a:d0:8f:02:10:
         36:4c:b9:f0:2b:3e:b7:52:1e:a6:3b:68:52:da:c5:9f:92:a1:
         e3:e6:aa:a7:4d:18:8e:23:1d:23:ba:39:6c:2e:93:a8:16:8a:
         69:1b:f6:c5:d8:32:3d:db:1f:74:c2:aa:eb:df:2f:ec:cf:2d:
         63:4d:20:bb:2b:30:47:eb:b3:39:70:c7:8b:65:50:0c:e0:da:
         64:4e:8c:8c:cb:1a:16:7f:27:09:47:5f:7f:bb:12:9c:73:65:
         c3:49:3c:b5:9a:0c:1c:23:25:4d:c3:87:30:bf:e4:c5:26:c7:
         a4:22:19:ed:3a:4b:13:5a:89:3a:48:0c:d4:49:da:ad:22:4e:
         a5:40:ad:93:6a:87:f2:10:7b:d0:e5:1e:e6:5f:3b:04:4e:98:
         00:44:d5:b0:a7:db:c9:c0:05:72:2f:77:1e:a6:97:e2:75:f5:
         6a:42:68:a3:55:6c:41:a4:cd:62:21:d5:aa:0f:ea:69:a9:1b:
         1a:7c:b1:aa:54:1c:ab:77:58:e2:5e:6c:e1:10:1c:08:0b:80:
         bb:32:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:08:59 2024 by rpki-client on console-ams.rpki-client.org