Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa
File:                     dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa (raw, json)
Hash identifier:          rTfgr4EY8nqK1zIZSERt9Nzj0040/dK41hpbvEzAlWs=
Subject key identifier:   D7:13:81:74:2A:10:66:D8:88:04:BB:93:2E:36:64:AD:D1:6F:5C:47
Certificate issuer:       /CN=adbe8e45-914d-402e-9a09-f3730289dda0
Certificate serial:       010D0C9F4328584773964A3702D7E8D663769240
Authority key identifier: CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa
Signing time:             Sun 06 Oct 2024 13:00:41 +0000
ROA not before:           Sun 06 Oct 2024 13:00:41 +0000
ROA not after:            Sat 04 Jan 2025 14:00:41 +0000
asID:                     25728
IP address blocks:        192.139.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:73:96:4a:37:02:d7:e8:d6:63:76:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe8e45-914d-402e-9a09-f3730289dda0
        Validity
            Not Before: Oct  6 13:00:41 2024 GMT
            Not After : Jan  4 14:00:41 2025 GMT
        Subject: CN=54e75491-f920-40a8-8f61-d39e4a094fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:17:8a:b6:b5:36:18:56:3d:f0:e0:81:0b:3c:
                    2b:76:c2:6c:f2:e2:eb:4e:38:17:f3:4d:13:81:b4:
                    3c:06:43:a8:98:8a:8e:10:97:06:4b:98:fd:c1:a5:
                    b3:37:d6:76:55:54:24:89:29:c0:4f:eb:57:60:6e:
                    16:a7:49:af:20:b6:72:ff:5c:9c:20:8e:e9:ef:89:
                    ce:01:5c:0e:8a:36:28:6c:f1:ef:be:1e:d2:dd:ee:
                    89:eb:a4:fb:30:ad:f0:d3:62:5a:42:dc:04:21:69:
                    f0:15:ce:8f:bf:25:e3:f3:04:bd:16:39:47:3d:4f:
                    f4:7d:be:c5:81:11:25:92:16:c9:a3:aa:42:43:59:
                    62:84:de:67:87:cc:78:13:d9:46:0f:75:11:63:2e:
                    82:fb:e2:23:8c:6d:03:da:80:3b:93:3e:ef:9f:21:
                    33:d6:a6:12:d7:99:39:16:2b:01:3d:f4:6c:18:2a:
                    8c:ed:ea:2c:2d:02:13:46:87:a9:09:2e:bd:15:68:
                    c1:84:0e:30:1f:6c:45:35:75:f5:b0:29:46:1a:52:
                    9d:5d:72:a9:0d:ae:3e:0e:ae:06:cc:b3:8e:c4:89:
                    fc:da:3f:27:8d:87:aa:d0:bc:38:a3:02:e6:47:75:
                    a6:19:9c:d5:5c:63:66:cf:fb:d1:98:9c:57:8f:10:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:13:81:74:2A:10:66:D8:88:04:BB:93:2E:36:64:AD:D1:6F:5C:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/dc3e52f1-0e11-3079-9889-3a0408a5cb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0/adbe8e45-914d-402e-9a09-f3730289dda0.crl

            X509v3 Authority Key Identifier:
                keyid:CC:BB:1E:4C:CA:95:0F:22:F5:AD:48:65:19:62:5A:AE:D1:88:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/adbe8e45-914d-402e-9a09-f3730289dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.139.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:b6:c1:d5:58:76:27:1e:62:10:75:f4:5a:8a:44:a3:0e:
         c5:59:90:b3:f4:8f:2b:ae:30:92:2b:32:4d:b3:fc:68:32:2c:
         0a:71:ac:1f:a8:da:38:1b:78:50:06:3e:87:a9:2b:b1:1a:93:
         49:4f:35:71:9a:c0:f9:46:71:36:43:b8:70:0d:e7:6e:87:20:
         d6:09:ef:81:1f:7f:59:9a:ba:af:f7:53:82:15:70:0b:96:9f:
         af:13:e2:81:24:ed:0e:aa:7d:4b:cd:b8:0b:3f:14:3b:3f:ff:
         ed:cd:88:39:18:69:20:9c:f4:fe:b1:4c:8d:a7:8b:bf:91:2c:
         93:db:e9:c0:98:17:a2:56:35:12:62:e6:fd:14:86:ca:90:69:
         e9:2b:58:9f:21:56:08:1d:ad:18:4b:f5:ef:ec:78:8f:89:19:
         45:e8:65:52:d2:f3:2b:51:93:73:bd:61:36:98:82:c3:b9:5d:
         98:bf:6c:2e:fe:32:bc:5e:b1:29:a4:fa:bf:ef:2d:f5:d5:ed:
         a7:05:11:88:a7:7a:89:6f:a1:f6:7f:4a:2a:de:56:f8:f2:92:
         ff:0b:18:42:78:4b:ee:19:d9:69:66:6c:51:be:a9:f2:03:0b:
         9a:1d:1e:72:1e:5e:3a:c6:be:02:97:f1:49:1a:12:53:70:c2:
         11:2e:fa:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:43 2024 by rpki-client on console-ams.rpki-client.org