Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
File:                     9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa (raw, json)
Hash identifier:          uL5Ro5pT9lTPE6UELK3KID/PYApPFxmAFuJZy9orTKo=
Subject key identifier:   01:47:A5:8A:9C:AF:96:96:75:04:1E:13:DB:E0:FE:1D:EA:91:77:50
Certificate issuer:       /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
Certificate serial:       010D0C9F43285847E35F66524E40C97E088D64A0
Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa
Signing time:             Fri 15 Nov 2024 14:00:39 +0000
ROA not before:           Fri 15 Nov 2024 14:00:39 +0000
ROA not after:            Thu 13 Feb 2025 14:00:39 +0000
asID:                     395494
IP address blocks:        23.139.104.0/24 maxlen: 24
                          72.19.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e3:5f:66:52:4e:40:c9:7e:08:8d:64:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1
        Validity
            Not Before: Nov 15 14:00:39 2024 GMT
            Not After : Feb 13 14:00:39 2025 GMT
        Subject: CN=ac256ab8-c8c3-41a6-b32a-4c5049e3ac07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d5:1b:48:e2:9c:58:a9:01:5e:cf:40:38:c4:
                    97:b8:19:f9:e0:60:2b:20:26:3d:fc:ca:7d:d0:3e:
                    6b:58:bc:cf:bd:60:7e:59:7a:6c:88:e1:d2:16:70:
                    6a:f6:b6:53:39:0f:08:e0:46:d0:bb:14:91:62:fe:
                    ca:05:80:de:91:e3:7f:dc:4c:fd:fc:7c:22:df:43:
                    90:06:dd:26:97:06:ac:02:56:a9:9a:0b:19:a7:45:
                    80:62:ea:01:b8:1d:96:51:92:cd:b0:a8:6f:09:d4:
                    30:60:31:7a:6b:46:ed:b6:44:39:11:d2:fe:b3:c1:
                    e5:0f:b6:ca:9b:bf:aa:f3:8d:8a:65:e5:c8:17:30:
                    24:c1:ec:e3:04:9a:54:ad:08:2b:34:d5:f5:81:35:
                    ca:65:3a:9d:cb:2f:01:d9:c5:b9:09:c8:e6:0f:65:
                    75:98:b6:00:2c:e8:c1:6e:f0:4b:30:94:db:cf:61:
                    71:1c:1a:3e:65:b8:1e:59:2e:93:94:89:78:b1:f2:
                    d9:12:47:4f:b4:73:f5:ce:2c:06:27:1b:d8:88:e0:
                    1e:54:41:35:2b:9a:bc:ee:bf:3e:ee:c5:84:e0:52:
                    41:47:77:87:9a:08:68:29:f4:fe:ac:70:6d:c9:12:
                    88:0d:43:f8:9f:b2:a3:06:7b:5b:5f:0b:2e:a1:18:
                    d6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:47:A5:8A:9C:AF:96:96:75:04:1E:13:DB:E0:FE:1D:EA:91:77:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl

            X509v3 Authority Key Identifier:
                keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.104.0/24
                  72.19.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:9b:c9:60:de:dc:68:54:f4:7a:8d:fb:bd:f0:bd:1c:88:1a:
         d2:c5:53:c7:9f:8f:99:a9:87:b6:ad:66:ef:ce:0e:df:a9:4d:
         51:2c:91:b5:de:84:b8:2f:76:e9:2d:a5:ad:1b:d7:1f:4c:57:
         44:60:83:83:d5:89:cc:6d:bd:aa:f7:9d:04:d1:b0:85:eb:22:
         a1:4e:18:ee:ac:96:64:70:3d:65:86:99:f2:6c:36:3a:7c:2d:
         e8:e3:02:34:8c:0f:8c:6e:6f:81:2f:ab:c7:6c:f5:dd:ae:aa:
         0d:7f:c2:1e:08:a2:87:ff:1c:89:85:c3:10:e1:4f:ab:38:87:
         8c:cd:e5:03:a3:83:43:f1:cf:7a:68:ea:e3:20:ba:f4:c3:b8:
         2d:83:29:d6:a7:d2:84:c3:97:7e:9f:de:2a:f1:0a:70:05:3e:
         60:19:26:7b:66:63:d2:30:5f:fa:8a:85:ae:f6:33:72:a2:ab:
         2a:e4:5d:2e:6e:29:9e:c6:57:30:fa:d9:1e:5d:5a:70:c9:ae:
         e6:84:93:cd:44:c2:2b:cf:3f:3d:26:bd:9a:67:e8:2c:67:ca:
         7d:5e:65:ac:d7:0d:da:b3:7e:18:65:a9:a8:d1:eb:f0:e6:52:
         05:36:fe:4d:be:b7:e1:c9:1b:48:7f:37:0d:8c:95:07:60:0d:
         77:b8:8f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:01:50 2024 by rpki-client on console-fra.rpki-client.org