Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
File:                     a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa (raw, json)
Hash identifier:          6oyEZ5bgJmIcsRytuZJya49sb70wxG/U/mc6L8mDlHM=
Subject key identifier:   D1:F9:65:64:7E:68:62:E3:8B:EB:0F:08:5E:72:C4:95:0E:F4:1B:D1
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285848C6E632E51F1360A90BBF5200
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     399490
IP address blocks:        139.104.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:32:e5:1f:13:60:a9:0b:bf:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=8343ae16-a2ac-4b23-b350-e575c0f82f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:dd:6c:2a:67:61:78:bf:46:a6:92:62:8c:
                    17:b3:9d:f5:7e:96:8a:f6:e2:52:f4:91:a4:c4:e7:
                    00:52:32:a9:d0:e5:56:c3:93:e9:ad:92:d5:da:ea:
                    6c:13:b6:92:4d:dd:f1:a2:02:40:d0:34:9f:e6:c4:
                    7f:60:5c:70:18:11:1b:07:b8:03:5b:f6:a8:7b:46:
                    72:4e:c1:cb:f2:a6:c3:93:3b:c2:40:1c:03:ab:76:
                    2d:75:d4:39:3e:cd:ea:b9:f5:3f:29:8e:aa:75:74:
                    3d:8a:37:e2:ff:84:75:57:29:8f:ed:ce:3f:c4:39:
                    7c:e3:83:1a:7d:b9:a1:3e:50:ba:3c:02:5e:fe:ca:
                    13:60:f7:22:b7:03:46:97:15:a7:16:aa:42:63:5b:
                    56:de:b3:72:13:69:c4:0f:74:23:b9:0e:2b:da:28:
                    0d:04:2a:53:80:0b:ea:ad:3f:34:5f:61:26:c7:0b:
                    95:bb:4b:dc:9b:63:c0:01:89:7b:e6:23:84:2b:30:
                    3b:4f:ff:c4:d0:98:0f:76:1f:49:19:c8:53:53:fc:
                    06:bc:d1:f9:c1:2f:59:b6:bb:42:a9:45:3f:a7:1d:
                    02:f2:89:87:0d:7c:43:4b:ef:33:36:ed:81:f5:a5:
                    9f:3b:8b:53:3d:db:a8:6e:89:c4:3b:47:2b:2f:89:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:F9:65:64:7E:68:62:E3:8B:EB:0F:08:5E:72:C4:95:0E:F4:1B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/a672ef67-2bd0-3a5b-81f5-1563ca7cde18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:a7:85:87:cb:e0:e7:3d:ba:7e:2d:42:1c:2d:0c:f3:df:
         a6:b7:fc:86:8d:de:1e:48:c6:35:9e:3e:4f:61:ff:9a:16:81:
         17:88:6a:1f:69:d5:c0:52:30:e8:3f:e5:64:6c:3a:4c:ba:19:
         c6:48:07:c3:4d:68:25:0a:41:4e:6d:81:4a:39:94:e1:4c:bf:
         6b:d0:09:74:8c:b9:52:8c:d6:0f:c2:e7:48:0e:82:b2:52:75:
         56:0d:33:b7:00:33:1f:ea:d9:58:6c:f2:33:56:08:44:fa:0d:
         83:f2:91:19:08:4f:18:8f:7f:52:d7:08:ef:55:3d:86:39:71:
         57:12:12:46:37:a6:99:ad:68:9d:98:17:e2:d8:40:52:a9:bc:
         bb:f2:73:e4:c7:2e:18:a8:55:4f:c2:d2:c0:06:3d:fb:74:81:
         42:6c:77:f6:ee:58:69:bd:a7:e3:bb:02:6d:e6:0a:84:99:34:
         43:1d:9d:a3:9f:09:2b:7d:5d:25:e7:79:5c:15:d8:e9:df:d2:
         e7:93:03:67:96:d7:a7:93:5f:5d:aa:74:95:62:10:0f:2a:41:
         21:23:ee:df:23:53:44:b6:cd:65:86:9c:80:8c:b4:91:44:5f:
         9c:0a:e3:26:fd:bb:b2:28:8b:90:4b:90:54:51:da:68:4e:23:
         e1:38:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:49 2025 by rpki-client