Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7fc2d7f1-d1de-3c7d-9b1b-a4e4f398280e.roa
File:                     7fc2d7f1-d1de-3c7d-9b1b-a4e4f398280e.roa (raw, json)
Hash identifier:          /1jxgWQtmsOxyKpDxyJbghqwuzzxM1U3gpIyl/XGsoU=
Subject key identifier:   E7:2E:8C:04:DC:19:6E:2F:8B:3C:40:43:01:96:E1:94:E7:00:9E:F3
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FCFD96609633218486F20
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7fc2d7f1-d1de-3c7d-9b1b-a4e4f398280e.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        139.131.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:cf:d9:66:09:63:32:18:48:6f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=427c0641-7ba3-4dbe-afe0-479ac191938e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:3b:48:4f:47:c0:6c:00:a8:41:ee:16:07:9f:
                    df:7b:cd:55:cc:9c:57:e9:eb:92:6d:60:dc:8c:95:
                    f9:c6:3b:07:e8:de:89:fa:63:9f:3f:04:2d:c7:da:
                    5f:fc:f9:fb:82:4a:76:81:3f:47:5b:1b:7c:dc:f6:
                    99:ce:7a:0b:f6:11:7b:c8:12:8f:f9:04:33:3e:33:
                    a7:b0:c7:a0:3b:65:55:70:d1:9d:cf:96:95:84:97:
                    00:ae:47:a0:93:5c:9a:ec:f4:11:b8:32:ff:92:38:
                    0e:45:d7:7d:78:8b:71:60:ce:1e:9a:1a:c9:df:a5:
                    1c:0d:2b:ba:36:40:1e:e6:cd:f1:ed:ae:1a:e5:63:
                    86:1d:63:c0:39:32:8f:79:80:87:cb:80:47:81:20:
                    86:1f:3d:2a:b0:5a:22:88:75:c7:33:63:19:55:70:
                    f1:cb:da:79:28:8d:ba:3c:d3:93:c6:e3:8c:fd:d5:
                    0d:f1:38:62:9a:4f:b1:ad:c8:d7:ad:03:53:f6:ac:
                    c4:11:12:c1:dd:ea:72:25:37:98:dc:0b:f4:6a:ec:
                    ea:4e:d0:a2:1b:6b:53:3f:b7:dc:ab:44:99:0a:61:
                    0e:ae:fa:c5:1f:74:34:72:75:cc:65:9e:e1:4f:cc:
                    90:bc:22:23:07:67:c1:78:f2:0a:1e:67:48:54:53:
                    3b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2E:8C:04:DC:19:6E:2F:8B:3C:40:43:01:96:E1:94:E7:00:9E:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/7fc2d7f1-d1de-3c7d-9b1b-a4e4f398280e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e6:fb:c0:7d:f0:57:ed:11:e7:ae:c5:fb:df:5e:6c:43:fa:
         c2:f7:97:67:f4:8f:78:53:54:64:65:0f:f3:32:5e:3e:a4:e5:
         de:f0:c1:87:fb:48:61:2e:de:e1:73:a7:54:15:38:e4:5e:c5:
         d7:06:96:43:e9:dc:e2:aa:1d:5e:c1:3d:46:28:b0:3e:44:d0:
         36:62:2e:2f:b3:9c:6a:f9:b1:09:28:e9:2e:dc:2c:25:ba:7e:
         54:65:9f:7a:2c:07:7d:fd:b4:df:9a:65:b4:26:99:29:af:65:
         d4:79:66:35:2d:16:75:ca:dd:45:e1:ce:db:7d:58:9e:b0:83:
         8d:e9:04:34:03:bd:f2:7b:3b:70:66:78:c7:dc:fd:86:eb:41:
         24:89:3b:a9:c4:f8:d2:0d:69:75:95:71:90:1a:1d:20:40:de:
         7b:fd:cc:55:8f:e0:0a:d4:b8:97:99:98:23:aa:6f:b3:9a:8e:
         5e:19:76:27:71:24:d8:42:f8:50:1b:71:8e:96:02:8f:d7:dd:
         b2:23:81:f4:17:2e:bb:d6:81:72:57:0e:b0:e1:6f:19:ed:8b:
         78:ee:d9:62:85:e1:1f:b0:e9:b6:87:6d:42:61:fc:6f:95:18:
         38:4d:75:66:78:b8:7e:9b:ee:93:88:68:39:7d:0f:5b:9a:54:
         31:21:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:19 2025 by rpki-client