Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa
File:                     bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa (raw, json)
Hash identifier:          KZRWszpspD9aQ9iJWhTxG3WYsFPuejHhARVp+ujmg08=
Subject key identifier:   F8:7F:18:16:52:FF:3B:50:B9:67:4A:3D:FE:C8:59:B6:EB:7C:3C:33
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285847E78F6149CF4134746576C2A0
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     13379
IP address blocks:        139.104.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:61:49:cf:41:34:74:65:76:c2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=54cd086c-6a9b-43e1-82fd-17c6b680cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:46:4a:d7:38:a3:51:ba:34:9d:ad:4e:6b:a5:
                    c2:e1:b6:f3:13:54:db:c4:01:97:14:65:4d:31:50:
                    cc:70:cb:3e:e1:9c:32:97:1f:ae:25:e1:66:de:72:
                    eb:c8:56:38:b6:97:47:93:8f:f2:1e:2d:0b:bb:26:
                    47:49:c5:0a:74:ac:2d:57:91:ec:63:43:58:39:54:
                    e6:99:3d:18:15:c8:94:48:09:fc:cb:6d:55:70:f5:
                    58:40:82:1b:fb:c2:e6:a8:68:47:19:7f:30:8e:ca:
                    8d:a2:63:07:fc:c2:b0:81:40:51:70:69:7d:e5:5a:
                    b5:98:d2:06:6d:82:fb:89:cb:ee:03:58:c3:99:81:
                    86:a7:51:c2:89:ec:83:ef:bd:06:ee:72:97:ba:4e:
                    ae:68:e9:61:10:9f:08:2d:d3:43:cf:b8:8e:4d:6d:
                    e7:a4:6d:cd:4b:e2:d5:5d:bd:b8:42:a8:67:3f:a8:
                    be:8a:fd:ca:a0:a8:e0:45:bf:9a:bb:0c:89:63:ac:
                    45:80:41:3f:35:bf:1d:e6:b0:cc:e0:72:54:ba:e4:
                    8d:1a:f1:d9:0e:55:af:cf:b9:fb:41:7f:d3:89:75:
                    67:d3:82:82:12:65:58:2b:aa:ed:e4:6a:bd:ca:f7:
                    72:29:5b:3a:fe:9f:de:70:64:25:12:a8:cc:3a:76:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:18:16:52:FF:3B:50:B9:67:4A:3D:FE:C8:59:B6:EB:7C:3C:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cd:e1:aa:82:8b:02:3f:64:6e:55:d4:8f:3c:b0:33:08:91:
         5b:52:f6:3a:d7:fe:59:fe:db:f7:41:d7:7d:e0:69:d3:9a:19:
         9f:89:a7:a8:50:fd:b8:e2:fd:bc:79:e7:94:3b:fc:df:38:ea:
         82:d0:19:cd:d7:65:03:c5:55:9b:bd:64:72:9c:6b:23:bd:c4:
         b8:37:43:f6:5e:71:ab:89:f1:f1:21:35:f5:86:b6:2e:dd:6c:
         a6:f9:9e:93:49:da:65:a7:01:6d:53:6a:c5:f2:9d:6d:6a:d6:
         16:21:05:98:58:bd:70:55:f2:03:0c:06:a5:35:3a:e3:bc:a7:
         84:45:20:b6:59:92:89:d8:6d:a7:a1:31:86:0c:84:3f:5d:46:
         b1:3d:09:23:94:50:99:ad:31:9c:19:e1:f2:d7:53:88:c4:2a:
         34:63:4a:91:b3:e8:56:94:22:c7:19:96:ac:31:d7:4a:bd:17:
         35:11:a2:5d:84:23:d1:8a:3e:a9:e0:ff:4f:20:e1:e0:50:1b:
         d9:15:d5:24:44:06:cd:f3:ea:fc:a1:8a:84:4e:46:2a:26:3b:
         1a:16:3d:78:60:20:0a:db:0e:b6:1c:eb:5e:91:8c:3f:15:47:
         d8:20:15:be:da:6d:c1:cc:f4:05:46:3c:f8:2a:c0:dd:d9:e1:
         ec:ca:b7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:39:50 2024 by rpki-client on console-fra.rpki-client.org