Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
File:                     120269e2-65e0-38b1-82ec-292383163359.roa (raw, json)
Hash identifier:          yu5LePYTilr1tEyjjo23K4xV30FIOnmAJ1nkl0+6sMQ=
Subject key identifier:   D1:4B:EB:E3:49:07:0B:FF:1C:F7:5A:4C:7A:81:E7:8F:E1:67:58:97
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584566BDAAC04D2767844AD02680
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa
Signing time:             Mon 01 Apr 2024 13:00:36 +0000
ROA not before:           Mon 01 Apr 2024 13:00:36 +0000
ROA not after:            Sun 30 Jun 2024 13:00:36 +0000
asID:                     16509
IP address blocks:        139.180.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:66:bd:aa:c0:4d:27:67:84:4a:d0:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr  1 13:00:36 2024 GMT
            Not After : Jun 30 13:00:36 2024 GMT
        Subject: CN=7ade7d67-02c8-4190-92f3-de27c4c43fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:72:d6:4a:5e:a9:45:ae:49:62:9a:0b:e8:81:
                    d5:7e:bb:6f:43:2b:d9:ee:ce:ae:95:81:ec:da:80:
                    ac:56:40:06:78:b0:be:e9:4c:ab:64:47:99:ca:89:
                    dd:84:10:de:f6:a1:d1:43:ed:17:51:e8:b1:fa:0e:
                    b1:d8:72:a3:8f:4f:48:86:fe:9c:78:d9:0b:68:07:
                    06:e7:41:3b:cb:4f:0e:cb:58:b4:cb:23:ed:c0:03:
                    24:2a:91:0b:a3:b4:33:52:62:47:c6:c0:08:ee:e0:
                    fb:6f:40:23:6f:ef:35:26:55:5a:54:0d:64:30:69:
                    ed:3f:1c:0e:bb:9b:f9:dc:43:a8:c0:d0:65:ca:c0:
                    5c:48:90:21:a7:39:ce:17:3f:6d:42:cf:2d:c8:b9:
                    1c:5d:29:32:a2:73:ab:e1:c9:6f:92:71:17:da:dc:
                    09:d3:38:a5:7f:47:01:a4:c9:db:5f:64:a1:4d:1f:
                    26:5b:15:dc:b1:b6:e0:ad:7f:9f:1a:21:e2:c7:d1:
                    72:6f:04:f5:a9:89:f2:dc:1d:20:ab:0d:1e:b8:60:
                    77:e3:d8:a0:0b:9d:75:df:60:7b:64:b0:8a:62:39:
                    69:46:78:12:18:40:4f:43:1d:5a:74:dc:7e:e2:3b:
                    7d:12:0e:76:df:35:d9:d1:31:d2:af:43:c6:2a:98:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4B:EB:E3:49:07:0B:FF:1C:F7:5A:4C:7A:81:E7:8F:E1:67:58:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/120269e2-65e0-38b1-82ec-292383163359.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.180.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:68:a3:ae:4d:61:02:29:f3:50:39:4c:d8:f2:b6:0a:16:db:
         93:a3:62:cc:55:38:79:83:67:43:83:da:68:cf:5c:d6:1c:0c:
         43:18:25:30:10:c1:36:cc:9a:e6:b8:c9:a5:90:66:6b:b6:09:
         d7:d6:22:c8:44:7c:19:c2:45:45:78:74:5f:84:c3:c3:bf:3d:
         e7:56:43:01:9e:9f:30:9a:2b:d4:fd:8f:a2:34:64:88:94:5c:
         be:08:aa:8f:fb:17:f7:89:d0:01:e7:47:0f:40:c1:fa:a2:43:
         f4:21:7c:38:7f:43:61:86:6c:27:58:2f:5c:a3:0f:10:32:75:
         2e:db:24:71:89:fd:91:db:9f:4b:7a:22:d4:bb:a3:8d:ec:27:
         6a:38:9f:60:85:c0:46:3e:a9:9a:07:5a:fe:87:ce:36:77:fd:
         7c:2c:f6:27:42:bb:e7:04:eb:20:13:ec:c9:97:2a:eb:24:c0:
         d5:b9:2e:d5:4f:c9:bb:a9:4e:a8:15:5d:2d:79:5b:ab:85:6b:
         73:5c:81:8c:29:93:5c:1a:1d:94:a0:67:7c:c7:9e:8c:06:ac:
         4f:73:b9:32:d9:6a:6e:91:e7:e4:7e:27:56:4e:3c:34:b6:1c:
         3b:16:68:bd:70:9d:bb:72:23:62:2d:1e:39:b4:2a:19:b8:34:
         5d:58:7c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 00:47:43 2024 by rpki-client on console-fra.rpki-client.org