Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a2700fe6-c394-33f8-9849-f568165bfc79.roa
File:                     a2700fe6-c394-33f8-9849-f568165bfc79.roa (raw, json)
Hash identifier:          bK26OJz3Y0VVaFZJQ3ycWOSQlXueNip9qT5kxPwd94I=
Subject key identifier:   C6:9C:01:96:66:6C:BB:6A:52:76:E7:3B:E2:21:98:2C:AC:96:F0:FA
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285845068ABE50BA1E3C5466262C00
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a2700fe6-c394-33f8-9849-f568165bfc79.roa
Signing time:             Tue 27 Feb 2024 02:00:26 +0000
ROA not before:           Tue 27 Feb 2024 02:00:26 +0000
ROA not after:            Mon 27 May 2024 01:00:26 +0000
asID:                     203963
IP address blocks:        139.177.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:06:8a:be:50:ba:1e:3c:54:66:26:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Feb 27 02:00:26 2024 GMT
            Not After : May 27 01:00:26 2024 GMT
        Subject: CN=b538e4df-1ed1-44c9-80eb-07b22f0c0ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:cc:a1:cf:24:5c:36:07:c5:1b:1d:30:8c:
                    12:e6:7f:11:ad:ee:95:88:16:3d:b9:9f:00:cb:aa:
                    34:93:aa:08:8d:c7:d2:5a:5a:ee:f8:7f:91:e3:d6:
                    20:bf:c5:7a:c4:cb:ef:8b:62:ff:53:23:0c:9d:ee:
                    09:cc:dd:11:6f:3e:8f:66:cd:3f:26:4e:0e:ba:5a:
                    84:a2:fd:ad:a7:7f:3c:a7:a5:8b:0d:08:dd:c3:6a:
                    8b:b5:fd:81:d8:b5:5d:12:5c:1c:a8:81:15:da:58:
                    59:21:32:18:65:84:6b:5e:79:27:f9:db:ee:de:49:
                    46:84:b2:b9:71:6f:57:09:31:52:1b:4c:60:07:24:
                    3d:6c:5f:c6:fd:f1:07:60:63:a9:9d:d7:97:56:ea:
                    e3:e1:47:41:52:a4:5d:8e:9b:57:8e:9d:e3:4f:98:
                    58:cf:73:d8:18:d5:95:13:fd:cc:1c:31:61:6c:62:
                    bd:bc:e5:50:6c:ee:19:00:72:f7:33:3d:1a:54:38:
                    7d:0d:33:f4:46:03:81:94:18:5b:f1:70:42:55:42:
                    1c:f5:d2:2c:70:ca:bd:5c:7b:b0:20:e7:1f:e6:00:
                    05:b5:ef:17:44:4f:b0:2f:6d:a2:0e:48:7d:d1:a7:
                    13:fa:1a:43:d5:62:25:40:2a:d2:f6:78:cd:5c:fc:
                    42:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9C:01:96:66:6C:BB:6A:52:76:E7:3B:E2:21:98:2C:AC:96:F0:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/a2700fe6-c394-33f8-9849-f568165bfc79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:08:bd:30:98:30:7e:b8:bd:c0:28:72:83:a1:b4:5b:ec:b3:
         a7:05:83:de:c3:a9:72:30:cc:94:57:82:42:36:5b:f3:b7:44:
         13:d3:0c:99:4d:e9:01:10:82:d1:14:11:4a:df:6a:b7:23:cd:
         3c:4e:2c:97:f5:03:ef:e2:95:45:d8:14:9c:28:7a:47:44:19:
         b7:37:1d:81:69:e6:c0:2e:a9:1a:93:0a:74:ea:d9:88:be:b9:
         88:d0:ea:a9:f5:39:58:3d:30:5a:11:0e:09:83:5d:8e:13:76:
         ca:fc:0e:50:70:3a:eb:cf:a3:52:ff:70:32:a7:50:ae:69:dc:
         c0:fd:7d:2f:56:18:95:8b:37:9a:19:21:98:68:b1:ac:2b:37:
         85:e5:f7:f4:9b:e6:fb:2d:6c:97:34:9a:8f:da:d5:3b:54:09:
         a3:97:16:48:0e:e8:5f:1f:82:22:d0:80:da:11:bf:c0:35:16:
         80:b8:3a:05:e4:bf:7d:7f:c1:88:36:4e:95:c9:c2:54:23:c7:
         70:44:38:46:8e:9c:37:25:9c:06:7a:db:1a:18:38:56:2a:74:
         85:af:aa:2f:fb:4a:26:1c:25:de:a6:88:8d:cf:0e:4f:b0:b4:
         74:b9:eb:4e:2a:43:7e:9e:32:05:19:a5:4f:ee:d4:4a:13:d0:
         a5:a9:57:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:00:26 2024 by rpki-client on console-fra.rpki-client.org