Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa
File:                     a5f50612-4ed3-3a10-a7e7-924a2f984258.roa (raw, json)
Hash identifier:          OHer87x/MSMYY2sZGy6fouSQ2WKzP3eqEk+Ea6k5wyY=
Subject key identifier:   A5:93:0A:5A:EF:AC:B1:F1:73:6E:3B:06:B5:4F:05:69:49:40:8D:6D
Certificate issuer:       /CN=9f007560-e50b-4110-8b41-2c958f05b1b3
Certificate serial:       010D0C9F432858474420B56F2530ECEFC3FDD980
Authority key identifier: 32:E8:BB:52:E1:4B:D5:8D:1B:32:47:D1:B3:E9:05:70:4A:F2:9A:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa
Signing time:             Thu 19 Sep 2024 13:00:42 +0000
ROA not before:           Thu 19 Sep 2024 13:00:42 +0000
ROA not after:            Wed 18 Dec 2024 14:00:42 +0000
asID:                     399019
IP address blocks:        141.193.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/9f007560-e50b-4110-8b41-2c958f05b1b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/9f007560-e50b-4110-8b41-2c958f05b1b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:44:20:b5:6f:25:30:ec:ef:c3:fd:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f007560-e50b-4110-8b41-2c958f05b1b3
        Validity
            Not Before: Sep 19 13:00:42 2024 GMT
            Not After : Dec 18 14:00:42 2024 GMT
        Subject: CN=2d798173-349c-4277-8034-10b78f0c676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:95:ca:e4:ce:20:04:4b:ac:c2:2f:5b:57:a4:
                    8e:3f:bb:f5:38:39:43:e3:45:37:37:32:b0:8b:ea:
                    07:d4:20:cf:9f:5c:7c:a4:26:a4:95:3b:16:bb:6c:
                    a7:e6:b6:16:d2:ad:0f:a7:50:94:32:1e:2e:92:01:
                    53:c9:54:40:16:72:ff:32:e5:ef:00:8a:52:b5:44:
                    ef:89:87:29:dd:5e:f8:37:2a:d1:cd:b7:06:0f:25:
                    7e:d2:42:f9:a8:bf:74:48:ab:25:79:fc:12:64:9d:
                    1c:ca:93:d2:8c:0e:65:d6:52:c3:67:99:74:b4:bd:
                    89:f1:65:9e:86:87:7c:fb:a4:56:28:b3:c4:4f:d6:
                    6f:fe:b1:63:9e:34:9c:24:f1:4f:82:d0:97:10:87:
                    f5:03:7f:b7:8f:f9:49:1c:11:d2:e9:0d:65:d1:19:
                    7a:b1:70:22:35:f0:1f:50:1c:9e:c6:c7:7f:7a:e5:
                    64:9b:8c:4a:8b:22:4f:d5:80:ad:ed:2a:38:25:0e:
                    60:ca:1a:8b:ff:94:3b:be:79:47:01:24:0f:ce:0a:
                    8b:40:c5:dc:c3:d3:0a:f8:bf:35:03:58:59:e5:e1:
                    3f:3d:4d:9a:40:93:e6:4a:a3:ca:6c:68:da:e7:ed:
                    68:07:8a:5c:15:6d:5d:00:22:5b:c3:38:5a:a3:c6:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:93:0A:5A:EF:AC:B1:F1:73:6E:3B:06:B5:4F:05:69:49:40:8D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/a5f50612-4ed3-3a10-a7e7-924a2f984258.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3/9f007560-e50b-4110-8b41-2c958f05b1b3.crl

            X509v3 Authority Key Identifier:
                keyid:32:E8:BB:52:E1:4B:D5:8D:1B:32:47:D1:B3:E9:05:70:4A:F2:9A:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9f007560-e50b-4110-8b41-2c958f05b1b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:1d:40:07:25:25:2b:23:37:76:4d:28:ab:42:a4:40:84:cf:
         0b:00:2a:2e:ed:97:dd:3a:d1:ad:d4:f9:06:70:34:9c:98:f1:
         ce:0b:d6:63:3f:be:8a:8e:dc:6c:fb:92:d7:5e:12:c3:9b:7c:
         4b:23:5f:1a:88:91:c0:53:07:f0:98:03:4f:17:59:e9:63:8e:
         1a:dd:74:d9:06:66:94:45:78:5f:27:ff:75:50:db:3e:5b:9a:
         ec:7f:29:27:8d:cc:22:68:44:5b:aa:34:33:73:b1:d8:ab:f8:
         b0:a0:ef:60:29:c7:e5:b1:c7:b7:cc:d6:ce:58:f7:fe:f1:cb:
         08:72:66:d7:77:10:a9:f2:bc:a6:19:ee:5f:cd:c9:e8:43:8a:
         97:2d:fb:a4:75:2f:4e:f2:6e:e0:be:c4:cd:5a:42:a1:71:29:
         62:d8:58:9f:78:6a:ab:54:e0:a2:12:a5:f7:64:07:b3:fb:4c:
         72:74:c0:18:e9:db:c6:cc:29:16:a5:6c:5d:61:87:5d:79:fc:
         c6:9c:5a:96:2c:c4:70:62:9b:4e:bb:5a:2c:b6:01:19:e7:85:
         ab:25:74:bd:fc:69:24:25:33:3a:b1:95:b5:3d:7e:48:f4:c4:
         79:7f:9f:b3:c4:28:cf:f9:10:ec:cc:60:12:2e:8f:52:10:30:
         ff:ee:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:38 2024 by rpki-client on console-fra.rpki-client.org