Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
File:                     a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa (raw, json)
Hash identifier:          +VqPZd3BOMNMzKLrsY0JTTson11NwUC75GReVc9K8iI=
Subject key identifier:   AD:A6:AA:9A:CB:67:42:67:8A:7A:DD:B0:49:AC:70:3C:62:0F:F7:D6
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F4328584548081EB1105F498491826DC0
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
Signing time:             Thu 21 Mar 2024 13:00:33 +0000
ROA not before:           Thu 21 Mar 2024 13:00:33 +0000
ROA not after:            Wed 19 Jun 2024 13:00:33 +0000
asID:                     399490
IP address blocks:        139.104.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:48:08:1e:b1:10:5f:49:84:91:82:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Mar 21 13:00:33 2024 GMT
            Not After : Jun 19 13:00:33 2024 GMT
        Subject: CN=03b13554-98a3-4b5f-a0c7-48b720499172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:cc:ff:bf:3b:70:c8:8b:45:6b:c6:d3:b1:
                    62:b6:8e:35:35:ce:6c:0f:81:b0:ee:08:f9:6c:b2:
                    22:be:b9:65:66:29:ea:79:b2:45:2b:eb:1d:29:89:
                    7c:91:b1:75:3b:b6:d9:7d:e5:1d:82:23:d7:89:b4:
                    ed:81:9c:cb:d4:ef:c7:ad:ac:53:f9:b6:9e:d0:dd:
                    88:35:90:7f:c3:bf:e8:2b:a0:96:da:01:a6:20:5e:
                    fe:e2:8f:5d:54:fe:05:b5:36:94:3f:88:2f:c4:bd:
                    d9:03:cb:47:17:6c:c2:23:bd:ea:20:3a:06:37:a8:
                    07:21:93:b7:56:49:d3:80:d0:55:7a:c0:f3:2c:4d:
                    66:54:eb:f2:f9:08:ef:be:05:fe:31:d1:c8:54:a9:
                    ca:28:e6:b6:95:e4:e1:c9:50:3b:5d:3f:90:a2:f4:
                    92:2e:7d:45:59:5f:e9:0c:cd:75:96:1e:38:2f:29:
                    98:5f:6d:93:52:01:eb:32:3a:e7:1f:77:78:b6:15:
                    b7:32:dd:24:ba:d5:5e:83:22:9a:6f:a4:6c:3a:bc:
                    2e:aa:46:70:d1:49:32:6f:69:51:8d:dc:f9:d0:6a:
                    d6:27:bd:0d:89:9c:62:8d:1c:e5:db:8c:23:03:6c:
                    f5:4a:a9:99:ec:d8:65:c8:92:81:bf:ee:13:6a:6a:
                    b1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A6:AA:9A:CB:67:42:67:8A:7A:DD:B0:49:AC:70:3C:62:0F:F7:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:03:80:3d:1b:86:88:96:66:51:b4:6b:79:52:2f:83:dd:c1:
         08:aa:c4:04:56:5d:12:2c:8c:de:b5:3f:93:01:fd:30:cc:b6:
         63:17:23:5e:46:ca:8f:78:57:1e:cd:a6:43:6b:3c:2a:66:aa:
         0c:bb:b2:db:5c:73:aa:b4:d4:1f:33:ba:10:12:88:8a:11:62:
         20:0f:b0:11:f2:22:83:db:be:7c:7d:4b:c0:6a:36:b6:6b:54:
         44:44:15:bb:60:2a:8a:fd:9f:ba:2e:1d:6b:22:6e:6c:af:48:
         a9:69:64:9d:b3:fc:cd:2e:fb:45:c5:ce:70:5e:3d:4e:d9:60:
         10:81:5f:f7:8b:16:29:73:80:6e:c5:72:63:d2:f6:31:ad:0c:
         58:60:e7:c9:80:9a:37:6c:e7:8b:ca:6d:0a:e5:2c:59:cc:9b:
         f7:31:3b:6a:1a:86:ea:5e:c9:2f:8e:40:42:f1:e1:c8:25:37:
         48:c5:a9:f8:83:ed:9a:5e:0d:da:dd:0f:76:26:e7:1f:76:ae:
         89:7c:49:36:20:76:0a:e6:25:86:9c:93:de:b8:b6:0d:ca:e4:
         2b:36:e3:25:97:de:5c:65:3e:20:c8:f3:df:c2:4f:fb:60:91:
         e2:37:17:86:e4:c4:52:72:9e:4d:12:bc:74:5b:68:a4:7a:61:
         e6:21:4a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:53:32 2024 by rpki-client on console-fra.rpki-client.org