Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/67b76649-50a7-314b-932d-152559612003.roa
File:                     67b76649-50a7-314b-932d-152559612003.roa (raw, json)
Hash identifier:          f3AuKE1IMhEJb6ZzvS97nfsr19BrNxASmInGKKyuc4E=
Subject key identifier:   99:17:FE:04:D6:86:FF:75:6E:F7:67:03:26:16:C2:F3:94:0A:9E:7A
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FD026F7950E9CF4AA3A80
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/67b76649-50a7-314b-932d-152559612003.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        139.131.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d0:26:f7:95:0e:9c:f4:aa:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=901cdfef-47e4-47cb-a23f-ebe6c39fca5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:b3:a7:ca:9e:92:fa:ff:87:6b:9f:d3:94:
                    ef:48:38:c5:41:1a:bd:d7:fa:89:bd:30:13:a0:c8:
                    78:d4:aa:61:8c:56:34:78:64:23:10:0a:d0:9a:4f:
                    4e:40:3a:c9:f7:3f:fa:33:d3:fd:f8:f7:cf:fc:ec:
                    78:68:f0:3f:12:c7:01:bc:b6:79:b4:1f:5f:9b:d2:
                    4a:5b:3d:bc:c8:11:d9:42:e0:2b:fd:85:57:be:0c:
                    d8:61:c6:f7:3e:69:ba:f7:aa:32:8f:88:20:70:84:
                    78:e3:4d:56:c4:a5:86:95:73:f3:6c:2c:d0:12:24:
                    37:5b:99:2c:13:28:fd:50:a1:29:0e:ed:0b:55:89:
                    99:f2:2c:32:c8:37:22:fa:d0:5f:7c:4a:14:78:64:
                    82:1e:e4:93:ab:a8:7c:10:a5:7c:3b:7a:b7:42:6c:
                    9b:f6:86:90:25:c5:54:16:7b:1a:61:bc:11:73:9a:
                    3a:43:07:aa:45:8b:b8:d6:3e:ef:a2:e4:2d:4c:1a:
                    19:4e:2d:d8:2d:32:28:97:75:34:bb:34:3d:5d:86:
                    2e:12:fd:f3:ba:ab:10:a7:2d:b9:6a:b1:7f:b8:af:
                    26:44:65:79:92:00:f0:55:48:3e:39:9d:07:4e:fc:
                    ce:f3:7f:eb:01:e0:27:02:48:17:b3:de:9d:be:48:
                    6f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:17:FE:04:D6:86:FF:75:6E:F7:67:03:26:16:C2:F3:94:0A:9E:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/67b76649-50a7-314b-932d-152559612003.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:15:53:44:5d:8b:06:01:cf:93:79:5a:81:0b:9d:05:4e:
         60:36:35:27:e5:6f:05:87:cd:12:6b:42:14:95:db:29:fe:db:
         42:42:b1:92:c2:9b:a6:f8:2d:4d:5f:22:72:d7:aa:32:1b:48:
         ad:bb:f5:9a:31:67:68:9f:bb:2f:50:1c:97:81:30:78:8d:61:
         7c:68:12:9b:fb:e4:98:1d:08:00:6a:b7:06:2c:0b:90:03:3c:
         8f:16:c6:88:2a:86:f5:16:92:83:ef:6d:63:66:40:f9:a3:3d:
         aa:fa:5e:95:42:a1:4f:0f:dc:65:bf:00:4c:33:b9:44:4d:ca:
         42:45:52:2c:fc:60:2b:25:43:c2:34:be:88:2e:aa:b4:1f:31:
         29:b4:90:72:c9:9d:59:fa:ae:95:45:a0:ea:ec:d0:4b:28:fa:
         00:91:c2:af:65:c1:7a:88:71:ae:c0:15:30:96:ca:0e:11:84:
         0f:d2:fb:66:55:76:e1:c1:20:b8:f1:00:52:c8:62:bb:e7:1b:
         78:a2:a6:57:7e:44:bf:3e:39:d2:7b:2e:82:cb:7b:14:a5:7e:
         92:b4:7d:b8:84:08:8a:d4:18:ca:82:20:9b:c0:5c:97:15:74:
         7d:9f:00:8e:a0:3d:7b:df:b1:44:0a:2c:4f:90:ae:08:6f:cc:
         c8:87:98:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:05 2025 by rpki-client