Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
File:                     b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa (raw, json)
Hash identifier:          a7mFmEs4i1BWFCxSooinvhSWI2pSow4tx7XPxHtHiaI=
Subject key identifier:   79:47:65:5D:66:CC:E0:15:F6:B3:92:9E:67:DD:A4:53:28:BA:31:A8
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F432858478E1BBF4F14158102B1AB8080
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
Signing time:             Wed 16 Oct 2024 01:00:31 +0000
ROA not before:           Wed 16 Oct 2024 01:00:31 +0000
ROA not after:            Tue 14 Jan 2025 02:00:31 +0000
asID:                     53927
IP address blocks:        139.131.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8e:1b:bf:4f:14:15:81:02:b1:ab:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Oct 16 01:00:31 2024 GMT
            Not After : Jan 14 02:00:31 2025 GMT
        Subject: CN=d1631633-a74a-4b02-849f-d604b4534555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e2:c7:da:39:cb:45:cd:c2:4d:fc:2b:21:99:
                    6b:c8:cd:0d:96:a4:28:e6:7a:06:94:09:83:23:c3:
                    f2:c3:1e:6f:e2:a4:92:2f:a2:1a:b4:8c:d0:6b:19:
                    b6:b9:be:6f:13:74:7d:7c:50:e0:e7:33:f4:69:86:
                    19:ab:d9:c0:b9:8f:6c:86:98:39:e0:40:6e:a5:ff:
                    3c:99:e4:e8:c1:20:1a:04:3c:ec:3d:f7:b8:d2:7a:
                    75:d1:16:0a:49:f5:a3:35:1d:95:2f:3a:91:3a:f6:
                    e6:4b:66:1c:7c:f3:bc:ed:ce:ce:4b:4b:c2:4d:00:
                    d0:72:e2:d3:9e:3c:a5:e8:f1:34:88:d4:33:c7:fc:
                    8f:33:d8:70:34:ce:ea:cd:a3:d4:98:d8:7e:18:68:
                    c9:74:ca:49:d6:56:e3:d5:f0:11:9f:58:ca:52:fb:
                    02:48:91:f1:c7:d3:3a:3f:6e:03:fa:f9:1d:5f:f7:
                    18:f5:b6:6f:8e:ff:d2:c5:43:ad:18:6f:fd:07:a6:
                    f0:23:5c:55:49:04:8f:14:e3:88:e2:26:90:03:4e:
                    1d:db:8a:5a:03:55:a1:75:37:3b:5a:50:f0:78:53:
                    75:b6:5b:30:0d:c6:67:af:8f:83:1f:be:53:72:06:
                    63:05:a7:43:0a:fb:c5:44:4e:b6:14:1f:bf:d9:32:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:47:65:5D:66:CC:E0:15:F6:B3:92:9E:67:DD:A4:53:28:BA:31:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:db:71:a0:b7:84:ad:6e:61:37:1f:b4:4d:f7:a2:17:cd:
         63:23:42:3d:bb:52:5b:aa:b4:96:a0:73:a1:09:15:69:20:2a:
         dc:0b:01:8d:ed:6a:78:92:4a:83:1c:c6:8d:44:6c:7b:b9:60:
         58:7c:01:91:32:98:1f:68:07:a7:18:03:10:01:15:76:78:e8:
         05:a7:5a:73:aa:6b:9c:7a:e3:fb:f5:a3:17:3e:b9:18:be:48:
         58:ca:0a:80:7a:42:f0:6b:88:12:e7:39:f9:b1:4b:d4:fd:d2:
         cf:06:23:d1:ac:61:16:16:d4:4d:a5:66:40:1a:1a:0f:53:65:
         25:59:b3:c6:ff:5d:e9:ea:66:43:80:35:4c:96:d1:29:1d:86:
         99:7e:32:df:87:5c:bc:6a:1f:6b:40:29:55:09:fc:c0:9c:65:
         d3:e4:5b:62:5e:98:8e:87:9e:c4:75:e6:9b:08:f2:fb:9b:8e:
         07:49:c0:dc:38:c9:39:81:d9:51:16:6f:33:e8:fa:8d:5d:4d:
         44:b0:4d:bf:81:78:29:3a:75:7d:d5:e7:38:09:a6:99:ab:48:
         86:4b:02:b6:1d:0c:fb:87:70:d3:9d:e5:ce:fc:74:1e:30:29:
         aa:34:3e:2d:7f:d3:b7:2d:c8:ad:c3:cb:81:f7:87:83:6e:67:
         77:56:11:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org