Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa
File:                     509971a2-2e61-329b-aabd-5f74f8132974.roa (raw, json)
Hash identifier:          QW3uLNVRXzzXyhGcamrqDLAf/lNMzJz5Zr2PB/XMNqs=
Subject key identifier:   04:D0:ED:9F:5B:19:A1:ED:22:08:9B:C2:52:CD:BC:F5:71:AC:F0:A8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285845B7AC003174FBEEA41D18EA20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa
Signing time:             Tue 30 Apr 2024 12:45:34 +0000
ROA not before:           Tue 30 Apr 2024 12:45:34 +0000
ROA not after:            Mon 29 Jul 2024 12:45:34 +0000
asID:                     7342
IP address blocks:        209.131.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b7:ac:00:31:74:fb:ee:a4:1d:18:ea:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 30 12:45:34 2024 GMT
            Not After : Jul 29 12:45:34 2024 GMT
        Subject: CN=55228596-1d4a-4dc0-876c-7b21f5e55047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:00:d2:51:97:56:12:fb:7c:be:39:64:3f:50:
                    5b:30:0e:e5:8c:1b:d9:d9:63:95:67:48:d1:c6:84:
                    37:7e:1f:fa:42:d0:a1:12:c3:7e:6a:a3:b5:c7:c8:
                    10:20:69:d9:80:9f:06:5f:d5:4b:ff:31:17:f0:a5:
                    04:aa:5e:72:72:5e:03:2b:5e:90:e8:63:9c:90:c4:
                    12:31:14:d5:a8:a4:47:00:1e:31:67:c4:4d:64:ff:
                    c3:4a:d1:ca:7c:88:bc:27:3c:e4:17:11:c3:fe:7c:
                    bd:dd:fd:03:df:e3:a8:1b:67:7b:d4:97:a4:68:63:
                    16:23:71:dc:bc:a8:e3:be:63:d3:c0:6d:2c:d2:04:
                    49:97:13:58:66:21:4d:02:b9:8b:ac:c7:e3:d9:6d:
                    e0:b1:17:df:cf:60:49:23:a2:92:32:3c:b8:d6:04:
                    dc:41:39:64:3b:1f:a4:83:29:dd:ee:08:78:94:2d:
                    54:8f:a4:e3:f9:96:ae:7b:8d:b6:4f:bb:90:81:9d:
                    dd:76:18:01:c2:ec:3e:65:c7:57:2e:ea:6e:2c:ad:
                    48:93:56:8f:2a:28:c0:30:fc:4a:dc:11:e5:ac:fe:
                    b0:aa:99:c1:5f:25:97:df:09:e3:fb:7a:74:3b:6f:
                    fe:45:9d:53:de:12:c8:58:39:7b:61:e6:4d:e0:19:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D0:ED:9F:5B:19:A1:ED:22:08:9B:C2:52:CD:BC:F5:71:AC:F0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/509971a2-2e61-329b-aabd-5f74f8132974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:b6:48:8a:b3:57:eb:73:e6:4b:fd:b2:97:e1:64:ce:b8:28:
         92:be:1a:33:0b:4f:01:1b:54:0e:a8:14:19:59:37:bf:8b:5b:
         23:46:36:46:4c:84:c6:8f:03:18:d7:0f:aa:63:48:99:1d:fd:
         59:95:33:81:1c:34:18:6c:9d:48:2e:55:18:b2:49:d2:d1:c4:
         65:e2:13:bc:3f:bf:df:ce:6f:2e:57:7f:9e:b1:96:aa:5e:40:
         e9:37:4e:07:95:85:c7:ee:a0:38:d6:b0:6c:d6:56:ae:44:82:
         e8:7d:2e:b8:81:ad:8b:5b:fc:9c:9e:cb:36:cd:00:96:e9:99:
         95:98:94:22:84:ed:f0:83:da:00:14:b0:ff:53:7b:0a:96:63:
         42:e4:c0:1d:e1:e4:7f:70:c1:56:08:41:1a:b4:06:99:eb:4e:
         f8:57:8b:6f:46:1b:b4:5b:5d:aa:4d:c7:90:0c:8e:5f:0d:2e:
         7f:3e:ce:28:f9:01:f5:ca:79:18:b7:ba:b9:6f:18:b7:1e:6b:
         e2:93:1e:4c:6a:3d:3d:cc:68:de:6e:c8:5a:9b:23:ad:44:5f:
         85:5a:c5:16:b2:08:da:0d:f7:ea:59:b0:1d:77:11:91:56:4a:
         77:a4:05:d5:46:4d:ca:7b:c5:f3:cd:90:bf:a8:64:48:42:78:
         c8:81:4e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 01:32:48 2024 by rpki-client on console-fra.rpki-client.org