Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa
File:                     49d76c1a-ff7d-31b6-8857-cab10d46025d.roa (raw, json)
Hash identifier:          xFin+5YOnuMOictV5ErqUE+ekVtUTd26xaWD8QAXFQ4=
Subject key identifier:   1E:73:01:E5:84:F0:73:9C:07:E2:A6:76:54:0C:88:64:AF:AA:96:C4
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848ADC61BA3E06B1E3170599300
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     14297
IP address blocks:        139.131.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1b:a3:e0:6b:1e:31:70:59:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=7e9db38e-2186-491e-8b97-c238c5626c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8b:a5:08:be:f9:31:d8:cc:eb:83:f9:5e:ac:
                    ac:4a:e0:9e:9b:72:ed:ff:ac:b6:5d:43:61:db:f5:
                    1a:5c:37:5d:5b:c6:e7:93:64:89:78:cb:06:e5:45:
                    e0:9f:28:da:86:b4:14:68:3c:8b:df:4f:21:35:c7:
                    03:d8:ed:1d:f9:f6:2c:07:d7:88:32:a0:ef:7f:87:
                    f4:7b:d8:d8:f0:ae:80:22:cf:38:4c:a9:94:97:c0:
                    db:a6:df:91:68:cd:fd:68:fa:d0:92:eb:c2:d3:e1:
                    31:26:69:e2:d1:d5:12:4c:d8:db:db:d8:27:db:d0:
                    ba:70:99:b4:5f:b1:42:18:70:d4:f9:7f:3c:8a:e0:
                    0f:83:c5:01:30:d9:46:a1:01:19:36:c7:00:7e:74:
                    99:a1:f4:c8:aa:a4:3f:90:fc:e7:48:e8:87:07:7a:
                    3c:63:22:ee:7b:16:28:5a:e9:dd:c5:73:c2:08:39:
                    ed:77:44:97:c6:10:54:cb:e7:2e:5a:a4:ff:7b:ae:
                    5b:47:5c:22:f3:9f:42:25:6c:dd:29:5b:4b:aa:cf:
                    4c:27:a3:bf:43:66:6d:15:43:a7:9d:e6:53:83:0a:
                    5f:3e:bd:3a:e9:7a:a3:bf:70:8b:46:dd:fc:71:1b:
                    e4:ff:4a:da:38:42:f9:b6:ba:60:1d:38:89:fe:a2:
                    69:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:01:E5:84:F0:73:9C:07:E2:A6:76:54:0C:88:64:AF:AA:96:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/49d76c1a-ff7d-31b6-8857-cab10d46025d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4f:5b:99:40:be:e1:40:5e:c0:15:e1:0c:7f:b2:70:45:d0:
         39:91:38:f7:15:58:36:94:59:6e:b7:ec:4c:ed:3c:7a:db:7c:
         d2:5f:15:d6:0f:7b:38:b5:04:19:47:bc:b4:4d:a9:91:d9:0b:
         64:31:4c:87:31:57:64:28:32:53:46:62:60:1e:86:64:82:54:
         bb:0f:a0:64:02:52:56:3e:42:3c:aa:9e:9f:3d:96:65:ed:ac:
         57:07:de:3e:97:1b:b8:94:39:f7:c8:5c:a5:5b:32:15:1d:67:
         db:fd:66:82:b0:74:a1:0d:af:6d:b6:4b:7e:3b:8d:7f:db:d0:
         ce:63:68:b0:4c:c5:02:a9:75:05:1d:26:b8:fd:01:39:1c:84:
         b5:3d:f3:fd:3f:a9:8b:30:a2:f5:57:84:9b:0a:1a:19:36:a0:
         a7:d0:d2:37:65:50:38:f6:41:bf:ee:8b:2b:f7:7c:63:4e:c6:
         8a:9a:cb:d3:4b:f2:90:eb:91:39:dd:6a:81:a9:86:fc:33:d1:
         26:60:7c:9f:5f:df:4b:3d:5b:f5:ca:6e:6b:bb:1c:be:64:96:
         ef:7a:4d:23:a2:74:14:b2:c1:bc:77:8d:50:0e:53:24:28:1a:
         9e:55:91:d3:48:14:05:ff:1f:58:2f:26:0d:24:a4:65:59:b4:
         99:e7:b7:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhuj4GseMXBZkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz
N2U2MB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk
N2U5ZGIzOGUtMjE4Ni00OTFlLThiOTctYzIzOGM1NjI2YzBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoulCL75MdjM64P5XqysSuCem3Lt/6y2XUNh
2/UaXDddW8bnk2SJeMsG5UXgnyjahrQUaDyL308hNccD2O0d+fYsB9eIMqDvf4f0
e9jY8K6AIs84TKmUl8Dbpt+RaM39aPrQkuvC0+ExJmni0dUSTNjb29gn29C6cJm0
X7FCGHDU+X88iuAPg8UBMNlGoQEZNscAfnSZofTIqqQ/kPznSOiHB3o8YyLuexYo
WundxXPCCDntd0SXxhBUy+cuWqT/e65bR1wi859CJWzdKVtLqs9MJ6O/Q2ZtFUOn
neZTgwpfPr066Xqjv3CLRt38cRvk/0raOEL5trpgHTiJ/qJpRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB5zAeWE8HOcB+KmdlQMiGSvqpbEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw
NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvNDlkNzZjMWEtZmY3ZC0z
MWI2LTg4NTctY2FiMTBkNDYwMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm
NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl
MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz
YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi4NsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFNPW5lAvuFAXsAV4Qx/snBF0DmROPcVWDaUWW637EztPHrbfNJfFdYP
ezi1BBlHvLRNqZHZC2QxTIcxV2QoMlNGYmAehmSCVLsPoGQCUlY+Qjyqnp89lmXt
rFcH3j6XG7iUOffIXKVbMhUdZ9v9ZoKwdKENr222S347jX/b0M5jaLBMxQKpdQUd
Jrj9ATkchLU98/0/qYswovVXhJsKGhk2oKfQ0jdlUDj2Qb/uiyv3fGNOxoqay9NL
8pDrkTndaoGphvwz0SZgfJ9f30s9W/XKbmu7HL5klu96TSOidBSywbx3jVAOUyQo
Gp5VkdNIFAX/H1gvJg0kpGVZtJnnt4g=
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:10:34 2025 by rpki-client