Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa
File:                     bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa (raw, json)
Hash identifier:          BAvilz58Avot7orKN9vPhIoPcdk59AxeEIEuo+AtLtQ=
Subject key identifier:   B7:37:A4:C4:1C:AF:6B:B9:C4:41:FD:06:5C:22:85:A4:63:B9:9F:0D
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285848C6E632D34025CB7DC6B5D080
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     13379
IP address blocks:        139.104.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:32:d3:40:25:cb:7d:c6:b5:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=9aed7e5b-f517-4fd7-ab69-d166175a853e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:91:31:9e:2c:4c:e7:27:5c:95:b1:dd:3b:
                    08:47:4a:e9:f5:17:ce:6c:d0:b1:17:3b:55:f3:c2:
                    f7:4f:e3:c2:be:bd:61:25:dc:12:b4:ec:b8:63:cc:
                    a9:0b:4a:ad:19:56:4f:67:bc:6d:40:8b:99:d4:eb:
                    35:a6:0e:f4:0c:77:e0:c6:f9:8d:46:00:01:d4:a7:
                    e2:6a:61:97:e4:1a:a6:6a:20:e9:2a:1f:d2:0c:41:
                    00:cc:db:fb:e9:2b:6f:44:90:e6:7e:52:33:08:ba:
                    12:14:56:f4:7c:41:7f:23:f1:f4:2e:50:f5:3c:70:
                    6c:72:fe:40:4d:98:00:00:e9:c6:ae:5e:ae:a5:a1:
                    10:8c:ba:48:62:a5:5f:d2:6d:f1:2f:4e:ea:bb:ac:
                    c2:4d:b7:ce:44:3c:79:f7:eb:af:50:12:37:c0:d8:
                    79:6f:3a:42:94:f1:95:e8:2e:a1:b3:84:b7:27:e3:
                    2c:b8:90:95:dd:a4:b5:57:60:86:db:93:81:7a:3e:
                    24:47:53:68:1a:8a:23:d3:a2:20:ed:1b:48:62:db:
                    63:7c:b3:2a:f2:d7:7c:2e:e0:f0:42:b4:25:ac:7c:
                    a9:88:5b:52:7b:30:8a:75:73:4f:a2:45:5d:a7:13:
                    d3:73:3b:aa:49:91:52:83:d1:55:d0:7c:30:c9:85:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:37:A4:C4:1C:AF:6B:B9:C4:41:FD:06:5C:22:85:A4:63:B9:9F:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/bcbf65a6-8f68-3a2c-bfac-9c955af1ca17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:92:85:5f:08:77:b3:cb:93:50:16:be:07:10:3a:40:ad:72:
         5d:3f:6f:6e:2d:46:39:02:bb:87:f5:e5:24:d8:ed:2b:35:4d:
         7b:1c:c6:6b:20:a2:30:a2:22:97:41:ec:9a:e7:85:c4:63:4c:
         67:f8:f2:69:be:ae:f6:1e:58:75:ff:a2:92:28:f8:6a:29:fa:
         63:17:88:f0:ae:b0:f8:43:eb:06:87:f9:37:e9:4b:50:69:13:
         e5:f6:1c:7e:26:6c:10:05:a9:ec:48:83:e0:d9:32:e8:2e:fc:
         78:76:d8:94:81:87:d1:3d:93:fc:98:92:75:6e:76:80:1f:95:
         3b:a2:1e:91:5a:f3:45:b7:18:ee:87:f2:c6:06:4e:89:a7:ba:
         7f:d9:db:70:68:56:79:26:4d:78:79:1a:57:fd:72:8d:99:c3:
         df:9f:e7:c5:af:29:32:f9:00:f0:22:51:f2:68:f9:f6:5d:ff:
         56:a2:ec:75:a9:1c:a3:0e:dd:88:63:de:c5:7c:58:6b:fc:42:
         de:77:f5:37:ee:43:72:fe:cf:eb:cf:95:4a:a6:08:69:0f:0f:
         7e:a5:52:8f:20:bd:f8:f2:8a:b9:43:f0:35:f6:6f:16:7d:15:
         18:b5:40:87:f8:be:c6:d2:d7:4d:6c:a1:2a:b4:c3:a0:bb:7f:
         31:a5:9e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:45:09 2025 by rpki-client