Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa
File:                     0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa (raw, json)
Hash identifier:          W8c+L2G5p+1rj94PPySiKawVVZ+CUKSFPAxz7LRPvCo=
Subject key identifier:   D9:28:5F:50:FF:23:FD:19:5D:F1:A8:88:60:96:BE:53:18:8A:18:6F
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858475BDB61A2DBA0605C87D18120
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa
Signing time:             Sat 28 Sep 2024 01:00:31 +0000
ROA not before:           Sat 28 Sep 2024 01:00:31 +0000
ROA not after:            Fri 27 Dec 2024 02:00:31 +0000
asID:                     202
IP address blocks:        20.139.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5b:db:61:a2:db:a0:60:5c:87:d1:81:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 28 01:00:31 2024 GMT
            Not After : Dec 27 02:00:31 2024 GMT
        Subject: CN=c62b7c61-f841-403b-8937-5f706787f1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0c:9f:bc:10:70:23:e0:6a:1d:f2:aa:19:af:
                    ad:d4:25:13:f0:ee:c8:32:44:55:70:a3:4f:58:66:
                    e1:a3:bf:6f:82:da:40:78:ea:51:fa:1d:77:87:44:
                    f1:7f:02:a2:4d:84:85:3c:0d:1f:93:0d:25:4b:04:
                    9d:e6:03:34:17:5d:da:b3:5e:0a:5c:a9:08:2f:10:
                    04:84:1b:5f:d0:a8:79:b4:c4:fe:1c:b4:3f:ff:d4:
                    90:68:f1:b5:5d:39:ed:f6:bc:2a:4c:8a:bb:6c:c5:
                    d9:04:b7:2a:e5:d8:2e:d3:21:6b:4f:25:3c:3f:cd:
                    1a:e7:5d:85:20:44:45:30:fe:31:b6:ca:82:f7:06:
                    3f:ac:c4:b9:aa:58:d8:a9:ba:da:c9:c3:2e:94:5d:
                    71:06:0f:8c:19:12:43:32:74:f2:16:a5:5e:74:31:
                    e0:f2:55:98:f0:89:b4:30:74:c2:09:02:dd:18:a8:
                    bd:b4:c2:17:0c:2c:6e:b3:9b:1a:66:bf:04:14:01:
                    c2:f7:0b:8c:6f:18:68:b1:a6:0c:60:8a:ce:ea:fc:
                    62:28:09:bf:d0:f5:92:1e:83:93:13:83:5e:0d:7d:
                    bc:f7:fe:b4:9c:67:8d:6d:90:1f:a1:ee:33:dd:c1:
                    a8:7c:ca:41:d7:0a:39:10:0f:d6:cd:bf:a2:26:bd:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:28:5F:50:FF:23:FD:19:5D:F1:A8:88:60:96:BE:53:18:8A:18:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/0971af1f-9e32-3d66-b9a6-b4ef3ee401d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:be:0c:45:7b:29:4d:f2:59:3a:f7:4d:50:c8:4f:cf:1e:c1:
         50:6c:b0:ee:ea:ee:34:ad:8a:80:98:ce:e5:1c:bf:c8:ab:8d:
         96:31:2d:8b:a7:9c:6e:ef:64:c5:e6:36:86:05:a7:c4:e5:f0:
         db:44:06:89:f4:0b:07:01:67:9c:a4:f5:e9:b1:66:f0:09:48:
         e8:9e:85:22:a7:50:d9:d9:d6:ca:2c:8b:22:a5:e2:81:9e:8b:
         60:1f:b6:89:eb:a3:3a:d6:61:d2:50:f6:a7:55:52:55:b3:58:
         29:8c:ca:ed:82:35:0f:01:83:43:b6:7a:b0:0e:40:98:ed:1b:
         bf:96:92:69:b3:77:78:02:48:80:34:70:6b:0c:c9:c6:53:de:
         37:29:d7:2b:fe:76:29:3d:be:d1:6b:b0:14:b0:bc:40:39:e5:
         21:5d:06:df:79:68:86:dc:4f:79:e4:e8:36:64:78:73:7b:5c:
         e5:0c:28:cc:b0:dc:37:f8:b4:c8:51:f0:8f:19:f9:c2:4b:05:
         96:a5:96:3a:a8:50:3e:78:d0:0a:0a:d3:10:1f:bd:09:5b:76:
         04:9e:bf:5c:90:ce:32:ab:9e:da:7f:0d:f5:f8:70:e6:f8:86:
         05:af:db:eb:bc:70:fb:e7:83:04:9b:86:66:d2:c3:1b:c1:d2:
         e8:ac:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:42:56 2024 by rpki-client on console-ams.rpki-client.org