Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/7ff84826-3124-3e13-bcac-166a9f3d1833.roa
File:                     7ff84826-3124-3e13-bcac-166a9f3d1833.roa (raw, json)
Hash identifier:          KTBYpc4WPkWToX4tE3PT8qSo5RWIjZbRLTcxySXt/sE=
Subject key identifier:   7E:F0:27:C7:A3:E1:75:0E:FD:7F:40:72:9C:A9:05:6B:A5:19:86:67
Certificate issuer:       /CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
Certificate serial:       010D0C9F432858456F1DC49C8F429F28845B8100
Authority key identifier: 00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/7ff84826-3124-3e13-bcac-166a9f3d1833.roa
Signing time:             Thu 04 Apr 2024 13:00:36 +0000
ROA not before:           Thu 04 Apr 2024 13:00:36 +0000
ROA not after:            Wed 03 Jul 2024 13:00:36 +0000
asID:                     393839
IP address blocks:        139.138.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6f:1d:c4:9c:8f:42:9f:28:84:5b:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=445edff1-360d-4ae2-a045-ccf7dbc4beeb
        Validity
            Not Before: Apr  4 13:00:36 2024 GMT
            Not After : Jul  3 13:00:36 2024 GMT
        Subject: CN=9663c785-f362-440a-9299-fca4f4c56fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:16:bb:a1:69:a0:46:e9:99:e6:18:7c:33:
                    74:6e:1b:cf:f2:ff:21:31:11:5b:ed:9c:b5:0c:c5:
                    4d:d0:fa:65:75:02:b9:a6:66:21:15:6a:c4:15:6c:
                    33:e5:19:d8:38:24:9e:33:0a:77:45:2a:4d:e2:50:
                    19:db:2c:89:9e:b1:a6:2a:0a:f5:00:56:eb:c7:a8:
                    94:e7:83:1a:02:d7:27:6c:04:02:23:a2:5d:54:21:
                    ba:5c:9f:3d:fc:46:d4:b2:64:75:ba:5a:df:ac:49:
                    ac:e7:14:f5:b8:a4:6f:b5:d8:d6:e2:95:19:7b:4c:
                    3f:ac:fe:96:59:0d:42:66:28:7e:c1:79:59:58:a8:
                    83:f6:15:50:6c:fe:b5:59:f3:1d:22:c5:79:f1:e7:
                    3c:40:a8:c4:b5:91:ed:de:e6:6e:0c:b1:8b:60:16:
                    dd:7d:9e:08:1a:2d:34:60:fa:df:c7:b0:75:14:a4:
                    91:91:dc:c7:e0:b6:fe:bd:06:4b:b9:58:f8:96:df:
                    94:ec:a7:dc:6d:08:c7:94:be:c8:9d:b3:e2:04:dd:
                    90:96:80:d3:94:80:08:14:3f:cc:01:94:26:6c:5c:
                    44:8c:6a:3f:ca:d1:5f:6d:5a:f9:dd:04:86:58:0e:
                    a2:f9:1c:bd:ef:10:5b:00:9d:b5:d3:17:23:8b:19:
                    3e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F0:27:C7:A3:E1:75:0E:FD:7F:40:72:9C:A9:05:6B:A5:19:86:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/7ff84826-3124-3e13-bcac-166a9f3d1833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb/445edff1-360d-4ae2-a045-ccf7dbc4beeb.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:C6:A7:48:8A:12:60:2D:94:01:4C:B0:5E:88:88:58:B0:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/445edff1-360d-4ae2-a045-ccf7dbc4beeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cd:e4:b0:8f:bf:af:18:9f:7f:1d:ac:a6:a9:79:67:b3:f6:
         d8:27:4e:a4:ef:91:52:5f:e0:97:73:c8:18:19:51:44:00:f1:
         a5:e1:ab:af:a3:e2:d8:df:cd:a0:ef:ce:91:e6:83:1f:12:5a:
         da:48:f5:b8:73:9a:ea:f1:40:20:0a:3f:d3:95:3a:19:75:09:
         7c:d0:f4:03:15:c9:1a:54:9c:72:1b:ec:10:8e:e3:90:48:52:
         37:54:de:f9:de:e7:93:7f:98:ce:14:16:43:99:26:e9:6e:fc:
         12:60:53:ff:81:c8:97:e0:56:85:68:60:d4:9e:f7:27:3b:04:
         e3:98:5e:bf:a8:60:63:80:5b:92:5b:cc:82:55:f1:f9:b0:1e:
         6d:99:b9:84:ae:b9:6d:4f:7b:ec:1d:1e:e5:ff:4c:5f:fb:79:
         d4:00:8f:f6:57:86:4f:a1:e8:89:cc:8b:9f:36:c4:16:62:e8:
         85:fc:12:1b:97:d8:d8:b5:93:97:db:3b:6a:c6:51:53:2b:39:
         2f:a6:a8:1f:dd:0f:77:fa:c8:cf:a3:c7:6e:b8:6b:cf:c1:12:
         ca:a6:ff:c4:7a:30:fc:98:3d:56:e4:ff:bf:f7:1a:d7:c5:a7:
         84:a7:62:34:27:b8:6a:f4:b4:26:fe:f2:fe:68:55:25:7e:05:
         d3:8f:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 03:25:57 2024 by rpki-client on console-fra.rpki-client.org