Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa
File:                     d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa (raw, json)
Hash identifier:          tpn1lCWeR9O0xFHkj2uj6T/a3J6I88mps4scyM5r1nQ=
Subject key identifier:   8A:10:0E:AA:6C:AE:F0:B1:0D:58:48:77:ED:8F:AE:7C:9D:B7:59:81
Certificate issuer:       /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b
Certificate serial:       010D0C9F4328584596335287570CED4FA9AB62E0
Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa
Signing time:             Thu 18 Apr 2024 13:00:33 +0000
ROA not before:           Thu 18 Apr 2024 13:00:33 +0000
ROA not after:            Wed 17 Jul 2024 13:00:33 +0000
asID:                     7922
IP address blocks:        139.64.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:96:33:52:87:57:0c:ed:4f:a9:ab:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b
        Validity
            Not Before: Apr 18 13:00:33 2024 GMT
            Not After : Jul 17 13:00:33 2024 GMT
        Subject: CN=ba561cdc-8d6a-4c18-96c7-4bf757b31860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e4:05:df:65:96:48:66:17:b1:e8:0f:58:39:
                    a1:25:bf:06:51:8f:46:cd:c1:19:74:81:66:19:60:
                    e6:82:9b:c9:69:77:25:d9:66:fd:c7:ab:90:27:9d:
                    50:56:1b:39:2d:f5:b2:f4:5c:6b:89:54:70:7e:c9:
                    7e:de:80:a2:03:29:f3:1a:76:97:f8:5b:f4:3c:3d:
                    50:c7:5f:dd:47:d6:3f:87:41:7d:b5:c2:f7:9c:b6:
                    87:e4:35:f1:f7:1e:12:29:96:45:fe:09:f3:ac:99:
                    d6:a9:ad:47:00:d1:55:37:c3:a8:fb:27:5b:0a:9c:
                    91:6b:ad:4f:04:f1:4f:b9:4f:f6:20:8d:ec:b8:44:
                    f7:6e:b4:b7:cf:4f:23:de:2a:2a:21:b1:f7:b7:16:
                    3c:34:1a:62:88:0e:cb:d3:96:b8:5f:c9:cf:70:25:
                    ee:0a:ae:ba:e3:30:98:29:f1:9a:e4:1e:38:32:67:
                    6f:7a:08:11:43:29:56:eb:12:38:47:7c:f4:ca:0c:
                    eb:e7:41:9a:23:96:60:30:1d:ba:38:55:f0:2d:55:
                    56:2c:ed:de:87:a9:7f:e0:7c:33:b2:f1:90:39:76:
                    a0:9e:d9:50:91:d2:74:1c:1e:3c:73:ec:21:e2:ca:
                    6e:f8:82:7a:8c:aa:2c:28:32:f8:f6:c4:dc:5c:af:
                    74:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:10:0E:AA:6C:AE:F0:B1:0D:58:48:77:ED:8F:AE:7C:9D:B7:59:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl

            X509v3 Authority Key Identifier:
                keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:99:99:a8:63:79:8e:53:42:51:d2:24:c8:e2:29:60:1f:1a:
         26:f0:99:81:70:75:fe:d4:fc:c6:88:b5:b9:19:3e:15:8f:64:
         d2:2f:23:0d:49:17:6b:43:cc:ba:c3:fe:f7:80:d3:7e:d8:95:
         25:4b:e8:1e:34:ec:d6:da:45:e5:ca:11:f9:05:54:2c:c7:13:
         55:54:25:6b:e5:39:bb:38:d1:32:ca:24:48:df:9e:b2:61:e2:
         ac:88:77:7b:f5:15:2f:fe:cc:4f:ac:72:a9:3e:80:9e:2a:31:
         bd:00:ba:a1:1b:a4:1a:a1:ca:87:cd:40:68:e4:2e:d2:4f:26:
         65:ca:9e:54:a4:f9:83:a8:55:1a:cf:c2:0d:31:06:90:af:ba:
         b7:44:73:47:a7:2d:2a:87:77:52:6c:50:c7:66:72:38:1f:c9:
         e9:8a:58:59:c7:57:0b:f6:43:c2:f4:78:48:cb:bf:66:82:c0:
         fd:cb:73:41:e0:3a:ac:51:49:91:4c:fa:d7:82:ca:e3:fe:ed:
         7c:51:64:75:b8:66:26:50:1f:c4:1a:d9:85:e1:9a:57:82:1a:
         fa:f5:8e:f6:df:a2:15:61:6c:b8:ed:2b:e5:cc:80:dd:d6:27:
         fd:59:3e:5b:91:d9:51:8a:38:2f:8b:a6:7b:9e:f1:45:89:7d:
         02:fd:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:07:55 2024 by rpki-client on console-ams.rpki-client.org