Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa
File:                     43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa (raw, json)
Hash identifier:          N51l6amk+kFrU5j18B+P0MksVbyKiThRI+4N7wq0oZ0=
Subject key identifier:   10:5B:93:99:DF:8D:E5:48:2C:54:E9:03:E4:A3:A6:BC:EE:DE:73:61
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584902EC242A0A58BFAC8B52CE80
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     23344
IP address blocks:        139.104.96.0/19 maxlen: 24
                          139.104.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:24:2a:0a:58:bf:ac:8b:52:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=99638337-e5ee-4e16-a731-ea5f672cd5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:75:b9:6a:87:d2:92:88:53:44:24:67:c9:
                    94:ab:ae:b9:ee:68:bb:ae:8a:f8:09:27:9b:c7:37:
                    f0:f6:17:28:3d:0c:40:78:7d:e1:7c:3e:7f:11:0f:
                    9e:b4:04:99:42:cb:9b:07:01:63:15:97:3a:7e:7c:
                    c4:a0:25:b1:dc:1b:9f:b6:c0:eb:7d:2f:11:48:54:
                    a2:78:21:60:6f:b7:38:04:02:61:56:7e:13:83:bf:
                    ca:79:87:9a:c2:01:42:91:c4:c5:e8:04:cd:06:30:
                    94:a5:1a:0d:a3:06:2c:e3:df:a4:69:2b:79:29:25:
                    bb:02:1c:24:b4:68:78:ad:f4:8a:2f:92:05:c3:d2:
                    ca:f8:71:3e:54:cb:a4:dc:ba:77:83:6f:1c:7a:63:
                    e4:d7:ba:11:5c:e8:e0:40:78:25:55:7e:27:72:90:
                    c4:2b:f2:96:ef:64:2f:d2:ad:93:4c:2d:0d:b5:ca:
                    7f:a2:6e:f5:82:f7:62:18:ef:15:66:e7:74:22:61:
                    50:bb:80:98:a6:e9:23:4c:59:70:f9:87:d2:99:3d:
                    f9:c1:b9:c3:88:05:60:f4:bd:1d:fe:b3:f5:95:80:
                    8d:88:b8:35:14:cb:cf:e4:ce:1e:b9:41:3a:1a:2c:
                    1c:ef:54:cb:5a:b3:71:17:55:45:02:28:7f:52:3d:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:93:99:DF:8D:E5:48:2C:54:E9:03:E4:A3:A6:BC:EE:DE:73:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/43e8fdb2-cb44-3fcc-9c8c-b26fdd9881b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.96.0/19
                  139.104.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:d4:8a:20:45:34:f1:52:49:6c:28:f8:df:26:6f:41:dd:d7:
         b9:10:c3:30:e6:1d:b0:b9:78:d4:1f:0d:c2:e2:64:d9:dc:15:
         22:e7:ba:e3:a4:6e:9c:b2:5d:c0:8b:5c:b5:5e:19:71:fe:13:
         df:e1:5c:ae:e9:cb:d8:f6:47:79:a8:58:3f:78:f0:b9:a6:98:
         73:18:8e:a4:34:e0:83:52:d1:22:29:88:1a:dd:1d:e5:b8:21:
         b1:b7:0f:f5:34:fe:f6:15:15:1d:b8:7a:7b:8f:3e:46:37:e8:
         dc:d2:ce:fd:35:dc:3d:62:25:49:98:49:0c:c6:4a:c1:db:a5:
         76:ba:f5:80:2d:28:6e:aa:f6:cf:90:fa:fb:7c:bf:99:7e:e1:
         87:5a:98:d6:ba:08:1f:dc:93:48:ff:58:ec:c2:eb:8d:20:6e:
         dd:82:ca:23:12:ba:4c:19:bb:94:3b:21:c8:73:ff:45:71:be:
         1d:97:4c:f3:19:e4:f8:a6:2b:8e:74:29:11:d9:a7:b9:34:22:
         27:03:0c:51:03:53:21:a4:72:1b:88:03:01:16:62:20:f2:62:
         4a:f3:aa:65:c1:f5:6d:3f:5b:8d:76:5d:3e:cb:e1:41:60:44:
         20:17:1d:e8:00:69:d6:2b:39:2b:3b:14:34:85:a7:58:e0:8e:
         5f:d1:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:01:13 2025 by rpki-client