Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/7078bc0f-da98-3967-9ad6-aeed3d34c126.roa
File:                     7078bc0f-da98-3967-9ad6-aeed3d34c126.roa (raw, json)
Hash identifier:          vwmBL+QoFFdwvmiqVyHk/ui5/3nljTBR2IreUiOf0zU=
Subject key identifier:   49:B1:BF:3E:8F:80:DA:71:D9:0D:F0:ED:B4:FB:52:96:1D:2C:63:C6
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285848C6E62C3A9CA752BA08BD8980
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/7078bc0f-da98-3967-9ad6-aeed3d34c126.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     140693
IP address blocks:        139.104.11.0/24 maxlen: 24
                          139.104.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2c:3a:9c:a7:52:ba:08:bd:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=c9863fdc-f352-43d4-a8da-ab2ffe13a4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:38:0f:a6:97:dc:1a:c4:d8:c9:4b:fa:b8:03:
                    e7:af:d0:cf:48:5c:4a:c6:26:e5:3e:24:d2:0d:31:
                    6a:ef:d4:7d:0e:d2:71:f3:86:ce:a9:aa:7c:ce:cb:
                    96:b7:99:9e:a3:76:d3:de:c4:07:d1:94:79:08:5b:
                    e2:fa:ac:1e:20:99:6d:39:38:8d:62:a5:bb:a0:1d:
                    f2:6a:75:82:5d:fc:9f:a8:34:72:2c:8e:fd:e1:8c:
                    2d:9e:de:be:ac:56:c8:72:88:1f:e1:88:ad:38:d7:
                    89:74:94:67:ca:94:1b:7d:a7:ea:2f:c5:8d:3b:14:
                    b3:69:e8:dd:cc:8a:6a:3e:92:68:00:6b:17:c6:e4:
                    f3:b7:87:16:aa:db:f0:97:06:f6:02:7e:6c:a8:3f:
                    7d:58:19:32:52:ea:e6:cb:71:5f:89:aa:14:08:1f:
                    88:0c:87:7f:8a:19:92:cb:24:90:9b:65:81:65:9b:
                    86:58:54:d7:10:cf:93:e6:a9:47:5b:28:0c:6c:f5:
                    98:c3:45:22:a0:de:02:bb:0f:4e:e4:cd:b4:c3:bd:
                    0d:50:70:18:96:1a:97:c3:bb:cf:38:4c:7c:01:67:
                    b5:a6:1b:d3:9c:85:22:cd:63:0e:6c:17:e0:64:02:
                    f1:ba:64:51:69:81:d4:e0:9d:ab:ee:a9:c5:aa:71:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:BF:3E:8F:80:DA:71:D9:0D:F0:ED:B4:FB:52:96:1D:2C:63:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/7078bc0f-da98-3967-9ad6-aeed3d34c126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.11.0-139.104.12.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:91:0f:16:79:a3:59:63:74:8d:71:a4:bd:c6:3d:9b:6e:16:
         ae:d6:6e:a2:13:00:b3:c1:3c:7a:c5:a2:33:2b:dc:38:e0:9e:
         2d:22:ef:5f:4d:0b:3c:34:ec:9a:aa:7d:99:33:b6:f6:44:6b:
         6a:df:d8:5f:27:7d:56:88:ac:f7:1d:71:95:25:c3:a9:1e:83:
         cf:6e:4b:28:ba:57:91:77:8a:cb:be:ed:81:32:f5:a8:75:46:
         ff:8e:52:1b:42:2e:2a:3c:21:57:2a:a8:f7:f9:92:29:37:30:
         54:27:52:de:4e:62:2d:27:d8:f8:06:e9:e5:71:ba:8d:71:80:
         d8:a4:7b:c4:65:90:b3:10:1c:d1:e1:70:7f:ca:95:07:6f:82:
         4e:39:bc:67:8b:a9:00:d2:63:b5:86:4f:6c:13:44:98:01:33:
         b6:f9:9f:5b:44:bc:89:fd:8a:57:ce:3c:80:9f:6e:30:2b:be:
         2f:4d:13:54:13:a1:10:4e:a5:fa:b2:7d:60:3a:bc:99:96:ad:
         29:90:45:5d:c1:c9:d0:e3:7b:44:ca:e5:b0:a6:4c:06:18:9d:
         8b:e2:90:25:61:66:68:84:e1:d1:3e:de:43:9d:62:0a:f2:33:
         45:54:a7:07:f5:5e:76:7f:29:c3:91:13:e8:8f:6f:4f:a0:74:
         52:75:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:10:30 2025 by rpki-client