Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
File:                     b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa (raw, json)
Hash identifier:          flyNU4VkbUM1QqKfyZ6A+vCaHyRcfuyjvR6Ysr/S7yY=
Subject key identifier:   69:B6:9C:D7:46:9B:F2:44:CB:A2:9D:EA:59:24:C9:EC:15:82:4C:A2
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F43285844F0354BF2FACF08F7F8CB3480
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa
Signing time:             Mon 19 Feb 2024 02:00:25 +0000
ROA not before:           Mon 19 Feb 2024 02:00:25 +0000
ROA not after:            Sun 19 May 2024 01:00:25 +0000
asID:                     53927
IP address blocks:        139.131.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:f0:35:4b:f2:fa:cf:08:f7:f8:cb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb 19 02:00:25 2024 GMT
            Not After : May 19 01:00:25 2024 GMT
        Subject: CN=693b9e40-19dd-4a65-ba97-e4e8eaeeb844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:7c:e0:a7:63:b4:3b:34:8b:05:7c:2c:1d:
                    9c:9f:b4:11:60:c3:cf:31:18:21:b1:9c:dc:ea:71:
                    1a:25:39:81:23:1b:17:6d:bf:d2:79:3f:63:7b:cf:
                    21:f0:c4:60:85:70:cb:54:d6:0f:ec:e9:f9:64:f6:
                    ed:68:b4:20:32:2f:33:ff:cd:09:2d:4e:2d:37:12:
                    18:6a:49:83:55:cd:fe:b9:73:16:6d:56:7f:d5:07:
                    cb:90:65:b1:c6:aa:23:e5:07:da:bd:53:89:4a:6e:
                    d7:6a:aa:51:81:fb:6e:83:be:b9:ab:7a:87:4c:a4:
                    40:c0:10:16:a8:9d:b4:14:52:15:cf:bb:8a:99:4e:
                    7e:6b:6e:87:39:76:0b:a8:87:ef:ec:39:c0:26:40:
                    7f:98:1a:7c:5b:f3:6b:77:71:8e:d4:ee:05:cb:37:
                    62:5f:5f:05:6e:2a:e4:03:ed:d0:39:37:2a:c9:a2:
                    74:1f:eb:8b:c2:9d:02:0d:1f:6e:86:12:50:cd:4c:
                    f5:9f:d2:6e:35:6a:3d:5a:a7:73:02:b8:3e:d4:d4:
                    02:4a:09:fc:df:26:76:3e:c3:19:56:a9:bc:79:74:
                    fa:1e:6a:8f:f4:64:21:c2:6c:67:0f:2c:ab:42:ea:
                    5a:d7:64:39:1e:e5:2a:e5:21:cc:4f:72:4f:18:48:
                    06:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B6:9C:D7:46:9B:F2:44:CB:A2:9D:EA:59:24:C9:EC:15:82:4C:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/b7ec1bf5-f756-3c27-b214-329cb7b58a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:64:15:b8:a3:86:34:79:54:04:62:15:5b:bb:32:6b:21:59:
         47:ad:a9:8a:e0:2a:e5:76:34:36:4d:2e:e3:ef:a3:f8:6b:47:
         9c:f1:44:f9:f3:c0:c9:56:f0:fc:74:2e:71:cd:ee:6d:bb:65:
         c8:75:52:f5:28:0f:8c:84:26:37:d1:4b:5a:f8:d3:dc:7a:c9:
         c7:9f:8c:ff:7b:c0:58:70:9a:d1:71:f3:e1:9b:cf:94:48:58:
         67:cf:77:85:6d:c0:34:e2:bd:ab:24:91:86:cc:25:eb:f5:79:
         e9:eb:99:f5:8e:a4:59:c4:c5:5a:36:26:af:59:62:3f:cb:3f:
         4f:33:4c:0d:61:e0:26:aa:17:a2:06:e9:2c:0f:9f:9b:bf:0c:
         51:17:c9:a0:35:cb:93:1b:20:2f:13:00:c1:b9:48:43:ea:7d:
         4b:9f:7a:1a:b6:4e:5d:f4:30:0b:67:c5:3d:3d:dd:7e:33:60:
         94:21:34:33:23:8d:5f:50:26:37:cc:5a:54:26:be:3d:cf:32:
         aa:33:87:d0:53:fc:e2:9d:21:d8:75:d7:c9:77:dd:a1:01:10:
         c7:8a:8b:ad:a4:e7:cd:40:2c:82:78:ce:32:22:0b:88:52:bb:
         b4:ef:99:bd:ee:11:e1:c2:e8:e2:2a:55:2c:b7:fe:78:b3:46:
         87:d4:06:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:43:59 2024 by rpki-client on console-fra.rpki-client.org