Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa
File:                     8d5edccb-a604-3269-b950-73d331fa9d1b.roa (raw, json)
Hash identifier:          ZXC9xUpkA5OGmvtTUtD0WaxsJqlWo1ZwR1rXbgdrvoM=
Subject key identifier:   9E:F2:9B:C0:C5:20:DC:17:83:FA:24:18:5D:5F:CD:0C:00:AD:25:EA
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285848222FD0FD1903ED863DD54500
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14297
IP address blocks:        139.131.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d0:fd:19:03:ed:86:3d:d5:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=1e4897bd-7920-422c-bf55-7a955ef7ea32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:9a:05:d3:72:e2:55:9c:70:ae:dd:87:17:
                    c6:e0:74:80:33:97:c1:85:b9:c3:78:74:6a:18:19:
                    8f:17:00:52:07:de:52:6c:84:cb:ad:2a:6f:52:ef:
                    53:29:bc:89:70:46:73:83:60:6d:5e:8e:08:2e:54:
                    8f:96:98:34:6f:d6:f6:19:6d:ba:01:96:15:67:37:
                    fb:60:e5:d2:9b:bd:71:99:ff:1c:e8:e6:47:5d:9c:
                    57:de:d6:d2:cf:97:d6:17:df:cf:f1:de:79:bd:c6:
                    dc:f5:4c:f7:21:58:28:16:08:f8:bf:4c:0e:7b:a9:
                    f8:70:23:df:0c:79:91:79:b4:39:3c:22:77:80:39:
                    e0:02:df:e9:98:29:65:37:48:b5:ab:f0:69:0d:33:
                    31:fd:59:65:49:91:ad:46:58:0f:7b:38:34:ba:a1:
                    b9:08:f5:d5:b1:fb:dc:62:cd:76:93:cd:59:ef:da:
                    fd:d8:83:7b:43:69:4b:65:4e:1e:ec:db:49:f5:88:
                    0a:de:25:b0:a6:43:79:72:f1:2e:d5:de:8f:03:1d:
                    6d:a7:7f:c9:7c:03:6f:78:9e:1e:ef:a2:78:53:2c:
                    0a:b8:7a:1c:fb:74:ee:de:f1:9a:7d:12:d0:e3:bc:
                    11:28:e5:ff:83:32:68:71:7e:1a:15:09:2e:f3:3f:
                    25:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F2:9B:C0:C5:20:DC:17:83:FA:24:18:5D:5F:CD:0C:00:AD:25:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/8d5edccb-a604-3269-b950-73d331fa9d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:e8:4c:6f:05:0e:52:04:9b:71:9d:28:a6:a6:4f:ed:ae:23:
         57:41:64:c0:ef:98:21:a9:b1:5e:81:1c:62:fa:45:45:c9:65:
         5a:6c:c7:98:a1:0c:14:f2:bd:cd:52:53:d3:7d:13:59:d0:c2:
         d3:87:fe:69:c8:9e:98:a2:2e:93:1d:ca:d2:19:c3:42:67:ad:
         31:50:b7:4f:a9:38:16:1e:3d:01:6c:17:b2:2e:78:5b:66:1a:
         8c:18:57:90:7a:91:aa:8e:d7:18:19:0e:62:ae:a3:dd:d0:ff:
         bf:f5:1a:51:19:1a:b7:b4:9d:33:31:97:da:df:77:ce:59:1f:
         e7:74:36:b6:8c:ce:dd:60:29:ca:1e:fe:eb:eb:b6:44:da:14:
         58:f5:81:7e:b4:da:cb:70:0d:fe:5e:70:a8:32:50:64:96:02:
         d6:4c:d4:60:87:1f:61:5e:5e:30:f0:29:9b:97:b0:f6:da:43:
         40:f3:79:d2:cf:4c:88:32:26:3e:77:a4:f5:ad:04:99:31:fe:
         7b:57:8a:58:74:b0:90:9b:72:c2:83:c5:3c:be:74:30:96:b6:
         72:bf:20:77:00:17:41:ff:72:b3:d3:fe:d3:f2:62:f5:67:b2:
         a4:42:50:a4:97:ca:c3:f0:39:8f:ca:77:d1:41:51:0a:62:5d:
         5a:fa:46:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:39 2025 by rpki-client