Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa
File:                     9d12cb2d-ff52-30fe-8956-3282181704de.roa (raw, json)
Hash identifier:          3lZxyCZc7+7sDtQPbUKrSyKs13aH2SvlTjN3N8sQsjo=
Subject key identifier:   05:B9:C5:64:32:C6:9D:4F:7D:EF:7A:51:5A:0E:C2:BC:1E:45:5D:9E
Certificate issuer:       /CN=55031a70-6ea8-4521-acbd-0217ada4cf57
Certificate serial:       010D0C9F432858478E1BCC6C4F8E5AE290BF1480
Authority key identifier: 69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     852
IP address blocks:        139.173.88.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:cc:6c:4f:8e:5a:e2:90:bf:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55031a70-6ea8-4521-acbd-0217ada4cf57
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=f1c5272d-ab09-48e8-8dd0-d4198a92ee53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:07:6b:8c:54:7a:c2:59:af:24:09:da:b8:
                    e0:9e:a2:b9:18:8c:8c:a6:13:27:a4:fe:51:d9:62:
                    48:e6:e9:c1:72:05:9e:1b:63:0b:5c:0c:f9:8d:ec:
                    5c:2e:b9:bc:e3:6d:76:22:c9:c2:4d:b8:36:2d:b8:
                    54:59:d9:fd:3c:b0:c0:f6:9d:0f:af:23:8a:f7:b6:
                    20:66:b4:ae:b8:37:30:1f:3d:a3:63:15:7d:89:a1:
                    53:51:51:d9:00:65:8c:f7:60:98:a3:8a:a7:02:f4:
                    b2:57:af:c5:bf:33:a4:b4:53:ab:17:a1:65:99:d6:
                    5a:f6:31:45:27:71:2c:9b:2e:9a:1a:0e:0b:8b:79:
                    50:c1:eb:79:7c:17:81:3c:70:2a:a5:b0:a2:e4:12:
                    b2:fa:7b:e6:a4:ff:4c:cf:92:bf:40:c9:ca:6c:90:
                    12:49:0e:eb:59:ea:97:27:98:07:34:df:69:4f:e7:
                    6b:b5:fa:2a:98:40:19:2f:ea:d8:86:51:b5:2f:16:
                    e1:67:26:d8:ae:a1:c0:06:47:c4:a6:4f:09:81:51:
                    c1:a3:06:23:fa:b5:6c:50:9f:08:10:11:2c:32:58:
                    d3:80:ec:10:0e:f4:b3:47:0e:69:fe:9c:b4:fe:86:
                    5c:7b:6f:df:a2:71:e9:10:b4:eb:54:6d:ef:59:25:
                    41:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B9:C5:64:32:C6:9D:4F:7D:EF:7A:51:5A:0E:C2:BC:1E:45:5D:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/9d12cb2d-ff52-30fe-8956-3282181704de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57/55031a70-6ea8-4521-acbd-0217ada4cf57.crl

            X509v3 Authority Key Identifier:
                keyid:69:40:BA:02:73:9A:6F:7E:97:63:19:0E:44:61:29:E9:8C:E2:C7:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/55031a70-6ea8-4521-acbd-0217ada4cf57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.173.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:92:c2:d0:fe:7e:52:18:e5:96:8e:a7:d1:ed:61:f2:5c:a8:
         1f:23:d9:1b:7c:77:83:d3:77:09:91:eb:33:9f:c6:2a:62:86:
         b5:19:2d:bd:e7:06:11:96:63:98:aa:ce:ea:d4:c6:c3:46:05:
         76:7d:b4:a4:be:e9:62:4d:bd:0d:76:81:80:a2:5a:a9:b1:11:
         2c:6c:99:6a:61:a6:68:41:ae:39:84:2e:f2:ad:2b:22:7e:b5:
         e8:d2:57:d2:8f:ef:6f:81:45:c5:e6:e1:1e:e6:a8:de:5e:67:
         8b:ac:bb:d1:92:b3:f0:c5:80:4a:85:c2:2f:5a:ad:b2:bb:37:
         55:2c:12:dd:9e:67:5f:85:17:6d:be:19:0d:ba:ac:23:08:7f:
         10:57:3f:17:63:d0:17:0e:5b:77:50:7b:a6:04:c8:66:94:ab:
         e9:e5:12:ba:83:f8:73:b9:97:b1:6b:8e:6e:68:61:b4:b6:89:
         6f:5b:5c:62:58:71:17:f8:48:92:a8:0d:ea:34:e3:8a:62:06:
         84:3e:57:03:ad:2c:17:e8:e9:dc:93:04:66:3d:43:d2:bd:64:
         a7:9c:23:bf:05:7a:f7:13:09:f1:dd:51:f2:6a:42:52:12:0b:
         02:c0:d4:f5:92:c4:a9:92:58:61:80:7c:fb:8e:8d:fd:d5:87:
         61:8c:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:53 2024 by rpki-client on console-ams.rpki-client.org