Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa
File:                     777eef3c-2d2f-353b-8b72-b72477054f65.roa (raw, json)
Hash identifier:          fOGFFdTl39BPs4U7m7qq3uyYlgEEAFQ05izyEQYbBLw=
Subject key identifier:   B9:60:35:BC:02:FB:55:BF:B6:0F:06:0D:41:2B:77:63:F2:B2:CF:55
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F4328584737907D63A3E3D4D116755260
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa
Signing time:             Sun 15 Sep 2024 01:00:30 +0000
ROA not before:           Sun 15 Sep 2024 01:00:30 +0000
ROA not after:            Sat 14 Dec 2024 02:00:30 +0000
asID:                     203
IP address blocks:        20.139.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:37:90:7d:63:a3:e3:d4:d1:16:75:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Sep 15 01:00:30 2024 GMT
            Not After : Dec 14 02:00:30 2024 GMT
        Subject: CN=7151c111-8ea6-46c8-b092-d755122493e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:ff:31:ce:46:bc:b0:b9:26:7f:a8:a0:42:
                    f3:57:8b:d6:b0:10:61:4f:b6:b7:ce:a8:40:24:1b:
                    52:7c:f5:e4:c4:85:c1:9e:04:c4:76:db:93:e2:90:
                    df:1d:df:33:a0:70:ad:de:b7:96:d9:99:58:5f:bc:
                    3b:ed:44:84:5c:1f:8c:42:00:bb:d7:c5:2f:71:b9:
                    40:0a:79:10:ff:88:63:d0:1a:13:ea:31:d7:c2:6a:
                    85:d7:ba:18:b7:24:cb:1c:13:3c:31:fd:44:41:3b:
                    4b:61:26:7c:45:54:de:63:c3:77:55:76:89:4d:bc:
                    6d:a3:a5:6d:94:79:09:35:ff:f2:0e:53:0a:4f:84:
                    a7:ad:89:81:a1:33:cf:7e:71:5b:15:2c:bc:4a:54:
                    00:11:0c:81:32:c0:82:c1:ee:5f:af:3e:5d:00:85:
                    93:b4:96:60:6c:cb:e3:ab:41:bd:87:63:aa:32:ce:
                    d5:20:58:70:54:eb:2a:76:3e:b8:2d:3a:b1:cd:7d:
                    93:a0:13:3b:2c:0a:5a:2d:c5:bc:9f:2e:7c:bb:9e:
                    ac:4f:ed:ca:a1:89:c6:72:33:27:49:0f:01:6f:20:
                    ec:e0:79:2f:85:a4:07:b9:82:05:4b:ee:4d:1f:69:
                    54:5a:bd:69:e9:2f:01:83:f9:79:a3:86:7d:90:52:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:35:BC:02:FB:55:BF:B6:0F:06:0D:41:2B:77:63:F2:B2:CF:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/777eef3c-2d2f-353b-8b72-b72477054f65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  20.139.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:5c:9b:7b:45:94:a8:f0:0f:48:67:ff:c1:7f:e4:5e:0e:
         3d:13:60:44:64:0b:38:ee:85:4d:b7:1f:28:6f:fc:92:2c:6b:
         82:0f:59:4f:b7:fb:06:90:e3:5e:fe:bb:d5:b2:f4:7c:b7:75:
         a9:cf:08:a4:cc:73:f3:31:ed:d5:cc:ce:7f:c6:76:75:88:56:
         5d:eb:c3:04:c9:8e:5d:80:6f:f4:3e:0f:51:e2:51:53:a9:5c:
         fa:64:1b:8a:cb:00:2f:77:5e:45:36:5d:86:1f:b2:41:bd:ba:
         48:c4:ba:a7:29:22:16:f7:11:ed:5f:db:22:e0:d9:1b:62:47:
         01:81:72:bc:f2:fb:63:5e:c2:df:1e:92:63:95:bb:1b:87:69:
         0f:1f:48:87:18:a1:8d:5a:9f:8a:a9:4f:3a:dd:e2:95:c0:0d:
         4b:46:fd:23:ad:15:3d:6e:08:15:7d:8d:fb:3b:1a:31:72:41:
         ad:a5:e6:f9:87:2d:4f:d6:ec:1c:7b:e2:91:2a:f6:7f:86:df:
         38:a7:6b:91:43:61:93:eb:17:64:db:63:6c:a6:31:4c:ff:06:
         58:d7:bf:1a:8f:d2:cf:96:cf:4d:92:69:14:94:a5:0f:d2:6b:
         29:e8:3c:2d:83:5e:b9:b9:08:64:97:98:24:98:d8:c6:25:3b:
         69:29:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 02:49:13 2024 by rpki-client on console-ams.rpki-client.org