Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa
File:                     bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa (raw, json)
Hash identifier:          LAcpSGpXjmQGJ9pJjU+irNuZedJPVbWQBBw0tcLGQJ4=
Subject key identifier:   4E:E3:0B:38:3F:D4:EC:7D:BE:DF:65:8F:71:58:13:72:2B:9B:78:9A
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F432858472405B34388198D407C3DC040
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     54392
IP address blocks:        136.239.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:b3:43:88:19:8d:40:7c:3d:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=cc80a017-4671-4b53-8aa9-426c862ea8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:fc:07:ea:91:eb:34:f8:72:54:3f:66:bb:
                    f7:61:0f:3f:78:63:70:73:2c:25:b4:53:b2:ae:15:
                    e3:b6:4c:65:f8:56:38:2e:66:8e:65:6d:eb:3e:d1:
                    98:92:d5:85:5b:3a:a6:cb:1e:b9:58:07:a0:79:34:
                    2b:0e:05:d9:a4:94:fc:7f:ac:2a:37:b3:b2:a0:01:
                    f3:8a:65:ca:c9:a1:cf:37:26:6c:50:3b:20:1a:16:
                    74:5e:a1:7b:98:bd:94:c7:d4:41:84:14:57:75:c6:
                    a5:c7:3d:06:d3:a7:ce:e1:0e:75:87:88:8c:cf:13:
                    c8:db:14:37:8a:09:aa:8c:99:ba:e5:2b:54:b1:53:
                    c0:36:99:c8:5e:e4:0c:34:22:4d:39:3c:44:96:19:
                    ed:9a:5c:c6:42:57:e7:48:2e:cc:bc:34:30:cd:bf:
                    a1:7f:77:3e:c5:79:a5:af:9a:f5:5c:c4:49:fd:a2:
                    9e:01:9b:72:1b:82:08:49:b2:68:11:f1:ad:ab:3e:
                    90:09:e8:d5:ae:99:fc:65:d1:ea:34:dc:09:fb:db:
                    d4:01:5b:88:14:14:28:71:3d:e8:07:09:46:c6:7a:
                    ab:d2:f9:00:e8:b0:f1:35:2c:3f:8d:d2:6d:64:38:
                    3e:00:00:74:e2:7e:95:21:66:8a:02:23:41:18:ad:
                    df:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E3:0B:38:3F:D4:EC:7D:BE:DF:65:8F:71:58:13:72:2B:9B:78:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bc2fc334-31ae-306b-8ff8-a2cef7670ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.239.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:d5:a2:84:11:0c:a8:89:dc:3d:04:e7:38:21:f0:99:65:3a:
         79:69:cc:f9:16:e0:ee:f6:bf:a3:78:15:2b:54:c3:fc:ee:22:
         18:3e:e6:48:f7:8b:c9:d8:24:2f:bc:70:dc:39:2a:ac:13:c3:
         fc:dd:53:37:60:25:be:39:4a:99:fb:67:9f:96:b3:47:8e:1b:
         0c:14:9d:76:46:0b:3c:25:32:47:56:c4:94:f1:51:92:09:f6:
         96:41:86:b5:a5:12:85:16:85:f3:b6:1b:d8:e1:a3:4b:25:bc:
         be:a7:0e:6c:08:ab:7f:9f:ea:07:8c:e0:0f:fe:2a:14:ef:c9:
         e5:ca:b4:ab:5f:9f:2e:3f:d5:bb:cc:26:a8:13:88:6a:a1:94:
         9b:54:2f:a4:55:b8:c3:9b:21:fb:0d:ba:52:c2:ed:15:c4:89:
         43:67:15:5d:92:8d:fb:e8:ff:c9:98:24:14:e7:ec:c6:22:b7:
         d2:f1:ef:14:bc:1e:95:1e:33:77:af:c2:81:7b:9a:3a:a3:e3:
         54:86:54:bb:95:dc:2c:07:d5:31:b6:8a:3f:ce:04:06:2c:0b:
         e3:12:4a:82:75:dc:81:65:9e:97:b2:25:fb:10:24:76:90:69:
         7f:80:d8:81:90:9b:3b:8a:72:44:cf:ec:97:2f:b2:cc:92:c6:
         a7:e7:58:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:02 2024 by rpki-client on console-ams.rpki-client.org