Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fde2a43-3a0b-3bb2-ac73-215e683edc83.roa
File:                     4fde2a43-3a0b-3bb2-ac73-215e683edc83.roa (raw, json)
Hash identifier:          06nE4ekQYyh5FJaUwTT2zpFxj7A7AtagbS1hUG8vOls=
Subject key identifier:   81:4E:D2:09:56:C0:66:A4:20:9D:D8:2F:20:CF:46:5D:2C:80:0B:A9
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858454272C584F733323F26FC8080
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fde2a43-3a0b-3bb2-ac73-215e683edc83.roa
Signing time:             Tue 19 Mar 2024 13:00:34 +0000
ROA not before:           Tue 19 Mar 2024 13:00:34 +0000
ROA not after:            Mon 17 Jun 2024 13:00:34 +0000
asID:                     200017
IP address blocks:        139.177.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:42:72:c5:84:f7:33:32:3f:26:fc:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 19 13:00:34 2024 GMT
            Not After : Jun 17 13:00:34 2024 GMT
        Subject: CN=f70519ef-de6c-446a-a6dd-688ec860b47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b4:b9:9a:9b:c2:e2:7a:37:ca:a0:a5:6d:44:
                    79:34:45:58:12:43:f7:79:4e:8c:fc:d5:22:43:3b:
                    a4:d7:6f:d4:d9:81:09:7e:fc:a0:1b:13:09:b0:e6:
                    a8:a0:50:01:21:ed:bb:65:cf:b8:63:7b:81:ab:0d:
                    32:2f:9c:4f:3c:b1:dd:99:e0:99:07:94:e0:94:3f:
                    f6:05:71:41:d2:aa:6c:27:c3:67:29:0d:59:00:09:
                    1b:e5:31:e5:2d:27:92:c4:ec:28:1b:ca:18:3b:8b:
                    d7:f3:78:83:5e:e5:f8:e0:72:25:cc:a0:b2:94:da:
                    4e:3f:89:24:12:35:91:3e:1d:60:d4:ba:48:92:f9:
                    88:f5:58:2c:aa:02:3c:36:ef:6b:f7:01:a0:90:ed:
                    18:7f:23:68:6b:7c:90:d4:a7:8a:cd:e7:3d:cb:66:
                    36:48:34:f9:46:f7:54:8f:71:d1:56:3b:91:60:4d:
                    9c:1b:de:d9:c9:37:c9:28:0e:02:f4:4e:d1:fa:43:
                    cb:1a:1c:ad:b3:ac:6e:8c:da:26:fb:c2:a4:ed:27:
                    d4:7f:5d:0b:fd:57:9f:4b:dc:e6:28:b6:27:49:84:
                    66:5c:91:d0:7f:8e:b0:71:32:f0:99:e6:ce:93:04:
                    70:5d:c2:54:dd:0e:98:5c:6c:22:d7:d7:4c:3a:4e:
                    96:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:4E:D2:09:56:C0:66:A4:20:9D:D8:2F:20:CF:46:5D:2C:80:0B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/4fde2a43-3a0b-3bb2-ac73-215e683edc83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f6:54:23:8d:c9:88:70:a9:4f:13:51:01:bc:a4:80:9a:cf:
         e3:08:5d:25:83:67:34:bc:a4:36:db:b5:34:3c:9c:28:0d:61:
         f6:1e:69:ec:a1:71:02:e1:33:c9:b3:c9:80:5c:17:a1:f3:a4:
         83:11:d9:e0:5c:e2:29:3c:30:e0:10:49:64:97:0d:45:f7:2c:
         3e:b1:06:2c:8d:2b:05:9f:b3:f2:25:99:1d:0b:56:b6:1d:a4:
         9c:fe:19:c1:50:dc:3c:2f:1b:40:23:64:27:85:13:19:bf:f5:
         04:99:07:20:f9:80:3f:48:b3:fa:b6:88:bd:b8:17:6e:05:57:
         eb:07:30:99:5b:3e:d6:3d:16:36:0e:4c:58:d5:78:83:ac:a2:
         e8:7a:b7:20:e9:fa:c6:bd:24:0c:8a:5d:0f:a9:07:95:e6:72:
         29:e1:53:9a:4c:0f:55:92:d6:bc:29:bd:01:f6:b4:ea:1f:ba:
         52:4b:52:af:3d:77:fc:ea:61:27:fa:d0:2e:9d:68:8c:d1:29:
         31:10:8c:0d:a8:91:1b:1e:91:13:82:67:60:44:5d:fa:a4:9e:
         d2:d7:53:2f:4d:05:c3:6d:8f:4c:73:08:fe:93:ce:79:4b:e1:
         f5:4e:41:c2:6d:71:67:8a:7f:0d:03:03:e2:e5:47:77:90:c1:
         52:95:40:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:09:49 2024 by rpki-client on console-ams.rpki-client.org