Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa
File:                     6fcc7d92-8595-368c-84db-26ab941ffc2f.roa (raw, json)
Hash identifier:          kWzpE7zcTZIP3Xq1vzRiIPj8vPG0Kh3fuUQRx5D19zU=
Subject key identifier:   DD:E7:6E:10:E4:53:2C:46:C8:AF:BC:84:58:BB:12:0C:77:61:C1:DB
Certificate issuer:       /CN=fd41a5ea-0768-429c-8541-83d829a5518c
Certificate serial:       010D0C9F4328584839EAD1A118FFB033D7095B80
Authority key identifier: F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     174
IP address blocks:        139.64.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d1:a1:18:ff:b0:33:d7:09:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd41a5ea-0768-429c-8541-83d829a5518c
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=41905fab-3b11-40e8-89b4-3dd8946b7f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:86:67:7e:a2:d6:d2:49:9b:79:77:78:2b:d7:
                    e4:bf:ae:bd:51:e4:71:31:8f:36:25:b0:ea:89:a3:
                    fb:37:44:17:6d:ef:64:c8:ee:9d:5b:f1:a2:9d:f0:
                    47:c4:23:e2:ad:fa:f9:60:ab:d6:36:7e:03:e3:49:
                    f3:53:4a:48:b4:ab:37:51:96:a0:da:47:08:36:b4:
                    dd:6e:e6:db:63:4b:07:96:2d:e0:86:9d:6b:3e:69:
                    c8:20:a8:1d:53:71:09:4c:bc:c0:a3:71:18:d8:a3:
                    1c:df:6b:28:36:88:6c:c5:4b:01:21:23:38:e6:92:
                    48:c8:4c:b1:84:11:7c:39:57:c7:47:77:cd:39:c9:
                    fc:63:8e:74:1d:61:c6:57:f0:e3:63:34:a3:52:86:
                    0d:2c:c0:6e:39:e1:8d:62:30:bf:0c:03:4a:dc:38:
                    44:02:ac:e9:65:b2:3b:32:a3:5e:a3:ba:a5:1a:5a:
                    6f:93:9e:25:09:83:cd:f3:3c:23:39:d3:c3:df:93:
                    ef:44:3a:c2:f9:c4:d8:58:92:cf:e2:ae:47:4d:97:
                    f6:32:f4:eb:02:8f:70:45:7f:c9:63:1e:37:9a:ba:
                    4c:21:2a:a2:c7:33:6d:87:67:58:43:89:7f:30:99:
                    7c:ae:dc:2b:95:55:5b:7c:ec:2b:ca:3f:09:33:5a:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:6E:10:E4:53:2C:46:C8:AF:BC:84:58:BB:12:0C:77:61:C1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/6fcc7d92-8595-368c-84db-26ab941ffc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c/fd41a5ea-0768-429c-8541-83d829a5518c.crl

            X509v3 Authority Key Identifier:
                keyid:F3:6D:03:2A:F7:BB:FF:77:C1:97:8A:1A:D0:C9:09:51:92:3C:A7:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd41a5ea-0768-429c-8541-83d829a5518c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.64.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:82:d2:c2:9d:e1:b9:e8:8c:fb:6b:c4:e1:3a:cd:36:5c:67:
         02:14:f0:5c:29:af:28:39:1f:46:49:0e:d7:85:19:95:54:69:
         7c:ac:a0:56:74:7b:9d:1e:58:49:28:ab:f0:1b:82:5c:14:ab:
         4f:cf:45:38:d9:03:ce:f9:f6:b4:ea:92:9f:0f:00:eb:18:8e:
         dd:a0:e6:61:ba:cf:39:d2:68:d6:19:18:31:6d:a7:73:f1:ba:
         2b:d0:44:8e:e2:c2:d0:9f:6f:ef:e4:e8:5b:0d:f2:19:12:0f:
         5d:1c:23:ff:8d:3e:72:0d:df:5b:dd:ce:79:5d:31:15:f8:d5:
         5b:1e:f9:97:da:64:06:53:3a:d2:48:5d:ee:00:a3:63:fa:19:
         11:9c:fa:41:cd:48:b8:7c:f8:74:8e:94:27:35:01:87:7d:25:
         82:9a:be:1b:76:f1:c0:ea:74:b8:d5:36:49:ef:f3:a3:ed:3f:
         30:ee:c9:db:54:59:41:be:ce:75:cd:7c:05:09:82:55:8b:20:
         6e:6f:5b:60:52:12:2f:68:0b:b5:70:f6:d8:39:3b:56:22:65:
         6f:b1:ac:73:0d:77:87:a3:63:53:8f:02:72:8b:b0:e6:ff:3c:
         c1:0c:70:2a:d4:57:c1:01:a1:5b:98:1a:bf:a1:60:06:0b:91:
         40:8b:d3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:39 2025 by rpki-client