Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/025f947a-ed1e-3cea-867a-7abfe93a4a0a.roa
File:                     025f947a-ed1e-3cea-867a-7abfe93a4a0a.roa (raw, json)
Hash identifier:          6+RU9e3FDNRMUZc9Frhrg0RCz8lJIopKTHp+M4uyGLs=
Subject key identifier:   6A:08:4B:6B:BE:C1:08:51:A7:7C:46:13:DE:BD:C1:C4:E7:6F:1D:CF
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F432858456C532451FA48BE42225F7E00
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/025f947a-ed1e-3cea-867a-7abfe93a4a0a.roa
Signing time:             Wed 03 Apr 2024 13:00:37 +0000
ROA not before:           Wed 03 Apr 2024 13:00:37 +0000
ROA not after:            Tue 02 Jul 2024 13:00:37 +0000
asID:                     399490
IP address blocks:        139.104.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:6c:53:24:51:fa:48:be:42:22:5f:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Apr  3 13:00:37 2024 GMT
            Not After : Jul  2 13:00:37 2024 GMT
        Subject: CN=e0fbe960-8a79-4b72-b3db-9db074aa2329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:75:15:ff:4a:10:23:d0:0c:06:73:b1:1b:
                    76:05:c5:7c:a7:d3:ba:62:be:ac:50:1c:91:bf:b2:
                    0d:ac:f0:62:e2:99:aa:d8:05:16:90:f0:73:df:48:
                    0c:35:e7:c4:60:2a:47:44:88:ac:78:8c:07:34:4d:
                    72:7b:84:78:3d:c7:21:22:45:b1:ed:7a:f6:b7:89:
                    e5:f6:75:67:76:41:cb:6e:c3:5e:cc:5f:07:12:9a:
                    cb:53:7c:ba:5f:48:2d:da:ff:3f:d7:23:51:3d:ee:
                    08:dc:0f:dd:7c:15:4a:ce:a4:ed:dc:62:37:a8:ba:
                    2c:2c:29:f9:04:de:99:ac:b6:27:b1:6d:bf:95:7a:
                    a1:d0:ab:63:bc:a3:a9:e3:8d:f1:9c:dc:8c:6e:2a:
                    7d:f5:0d:ae:aa:eb:96:c7:88:d5:35:0c:b8:e1:0d:
                    6d:21:a3:50:07:d9:0a:1c:36:c8:cb:fc:4a:cc:55:
                    6f:53:48:ee:23:64:bb:92:da:0e:84:58:82:c1:22:
                    58:87:de:00:98:bf:4b:62:b0:02:84:08:5c:d6:85:
                    9b:a0:19:f8:ae:77:f9:5d:50:df:30:dd:fe:c3:c2:
                    64:58:6e:aa:ff:2b:f5:78:17:1a:4b:c5:5b:9f:98:
                    d5:3b:b0:5f:e8:31:48:f8:bc:84:1b:17:98:91:de:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:08:4B:6B:BE:C1:08:51:A7:7C:46:13:DE:BD:C1:C4:E7:6F:1D:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/025f947a-ed1e-3cea-867a-7abfe93a4a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:79:02:2d:7e:31:06:ea:90:18:f6:19:78:f0:37:d1:97:ff:
         c8:83:7e:bf:47:ce:43:ea:ff:2f:b8:0b:1b:9b:83:ed:a2:93:
         84:6d:67:25:06:6c:34:40:52:d9:26:d1:b9:2f:8f:e8:14:52:
         df:82:73:4b:63:3a:b1:fd:92:8d:92:5d:87:b8:eb:68:c9:4d:
         79:e8:60:60:6a:e5:68:86:b0:48:68:2e:24:df:90:8d:1a:42:
         5d:b8:af:ca:00:65:ac:d7:40:8d:91:87:ca:85:fe:77:37:15:
         96:01:5a:ef:c3:56:0d:a3:8e:84:50:e1:3a:70:ec:7e:b6:0b:
         3b:03:89:ef:c4:3f:5d:17:87:a6:c3:91:ef:c0:1a:6b:16:b4:
         9e:41:9c:a5:14:ac:29:a6:4c:8d:7e:49:cf:99:03:1f:56:cd:
         9e:4b:35:5a:6a:e2:2b:19:eb:c2:10:ed:14:b6:29:56:b8:8d:
         83:7b:a0:0f:6a:af:43:03:5d:93:3a:1d:8d:cc:ca:0d:16:ee:
         d6:3f:fc:96:95:f2:31:cc:71:08:01:f0:6e:4c:95:45:cc:51:
         79:7c:b3:13:bc:06:80:1c:9d:e3:40:96:95:4a:5f:7e:81:47:
         35:d5:3b:90:00:96:1d:e2:c0:6d:2f:2d:67:13:e9:bd:60:31:
         ad:91:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 08:24:41 2024 by rpki-client on console-ams.rpki-client.org