Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa
File:                     1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa (raw, json)
Hash identifier:          hISh1I89DPva+b8LC8H6zHPPNqccnk0HdxDMi7Qo2VY=
Subject key identifier:   57:5E:91:17:D9:BC:1B:3C:A5:72:99:11:3B:2A:CF:44:87:0D:8F:2E
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F432858474420AE2DDEC0208CF5BA58C0
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     22604
IP address blocks:        139.104.96.0/19 maxlen: 24
                          139.104.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:ae:2d:de:c0:20:8c:f5:ba:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=a1e937ca-01b5-4363-9005-6906ef5188a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:de:d0:36:90:68:ab:6b:f7:4f:12:82:47:76:
                    55:f7:45:ce:cc:27:65:ae:0f:2c:d3:23:1d:21:3b:
                    77:22:ad:d5:78:2e:e8:f0:65:f6:fa:56:c2:4c:9d:
                    da:4e:c5:27:65:a3:24:df:71:ae:cd:0d:7f:f5:4f:
                    a0:b2:5d:40:2c:09:ad:27:28:40:cc:8f:16:49:51:
                    e9:3f:a1:c8:ff:45:6c:96:ea:78:5d:01:6a:06:cb:
                    3b:35:16:ee:53:a4:ac:4a:62:14:a1:6b:07:0e:b2:
                    29:84:bb:bf:75:35:0b:9e:c0:a1:aa:1f:4f:b9:d8:
                    92:a3:ea:85:9b:69:38:49:e1:31:bf:2b:dd:5c:8d:
                    80:1d:d5:b4:0b:aa:40:08:e3:8d:af:cc:1d:02:5b:
                    17:22:72:c8:43:39:1b:2b:98:80:b5:6e:39:b1:e5:
                    08:ab:f7:11:08:48:3d:cd:eb:92:4b:16:bc:6b:2c:
                    58:08:74:30:fd:fb:6c:9b:c0:14:46:eb:1f:a9:80:
                    31:26:8b:36:23:d2:55:d3:ae:40:a4:98:5a:31:83:
                    7c:82:35:30:3d:92:cd:96:20:8b:33:98:b8:46:c9:
                    61:59:33:f5:0c:ad:62:59:45:3a:95:ba:87:f3:3e:
                    60:b3:63:ad:a8:24:02:b9:d5:9b:0a:e7:e8:21:5b:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5E:91:17:D9:BC:1B:3C:A5:72:99:11:3B:2A:CF:44:87:0D:8F:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/1b9e3015-17d3-3e86-a225-2fae95d6fd39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.96.0/19
                  139.104.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:67:e7:d4:ad:1b:7a:7f:20:7a:b1:73:cf:fd:90:ef:4f:8f:
         9e:1c:8b:1b:7e:3f:db:4f:c6:f1:26:ec:94:37:72:1d:08:08:
         8b:15:dd:11:10:28:ce:5d:74:6d:d6:53:22:d2:f3:67:ef:17:
         df:06:af:58:5e:66:65:c8:d1:2e:25:6b:a3:af:d9:2a:40:4b:
         9b:60:53:20:8a:18:f1:17:6b:d5:d7:d0:51:e0:a6:a8:86:53:
         b9:fc:38:c1:70:b6:0a:56:79:b4:03:5a:da:fd:ba:e3:1c:03:
         a4:3f:8c:0f:4f:21:8c:3f:a3:1b:f1:08:4e:0d:aa:0c:4f:31:
         6c:09:d6:30:34:2b:48:48:a6:14:e9:9c:3d:39:c7:5f:64:f6:
         38:b0:62:99:3f:99:ad:b9:2e:4e:8e:90:fc:cd:b6:b6:38:b5:
         5f:1f:26:70:90:8e:72:58:72:1e:5c:01:a8:8c:66:d5:fe:b1:
         13:c8:1c:de:43:14:ed:2a:ff:d7:26:61:56:28:1c:59:bc:bf:
         68:64:6b:db:32:30:62:8c:e2:2e:69:89:a5:2b:b6:69:5b:c9:
         53:74:fe:33:1e:36:d1:f6:16:3a:88:31:c9:12:fd:db:7b:25:
         3a:2f:9b:a5:8c:3e:99:e5:e0:ef:c3:45:f6:09:17:2b:e0:76:
         37:a1:b9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:09:33 2024 by rpki-client on console-fra.rpki-client.org