Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa
File:                     c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa (raw, json)
Hash identifier:          MFYYCkfhauOzlIHnRLEp+ppT7DMfl4J/UubA5oIW6YI=
Subject key identifier:   A4:99:C1:E3:76:5F:14:79:87:88:BF:69:62:B8:CD:14:AE:EE:69:11
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584742BB471EC1F2A838F6735F54
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa
Signing time:             Thu 19 Sep 2024 01:00:31 +0000
ROA not before:           Thu 19 Sep 2024 01:00:31 +0000
ROA not after:            Wed 18 Dec 2024 02:00:31 +0000
asID:                     14297
IP address blocks:        139.131.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:42:bb:47:1e:c1:f2:a8:38:f6:73:5f:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Sep 19 01:00:31 2024 GMT
            Not After : Dec 18 02:00:31 2024 GMT
        Subject: CN=d792283d-8e00-4f81-8306-44ba25cba106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:43:c1:3b:fc:9c:2d:a1:0a:a7:6e:5b:4f:
                    27:2e:13:40:e6:57:10:10:83:be:e5:08:d8:db:0a:
                    68:78:c7:c9:b4:25:bf:36:ba:a3:08:e4:20:2f:d5:
                    05:3e:03:67:ae:e6:de:f3:13:56:22:8f:3f:f6:c3:
                    7a:26:20:dd:bd:0f:3c:25:3f:15:8b:70:22:03:73:
                    33:1c:0c:d2:5b:5f:c6:5b:b2:22:a1:3f:20:11:24:
                    de:46:1a:74:6a:32:9a:86:47:53:0f:2b:34:13:b7:
                    1e:21:dd:3d:5e:71:57:79:ec:ae:e9:c0:26:d4:96:
                    5e:8d:aa:17:17:58:e8:90:4d:b4:f8:93:16:3f:4e:
                    e8:fb:ce:a3:1d:ab:eb:dd:8b:c9:9c:6a:ef:a5:ca:
                    11:ba:7f:a2:d8:38:cc:84:b5:dc:b2:7f:c7:3c:5a:
                    c5:10:40:28:47:e1:2f:04:f1:d1:ec:8b:35:6f:4b:
                    1e:4f:f8:24:a0:08:53:65:c1:e3:f0:a2:0c:40:44:
                    f9:c1:52:85:86:63:d5:94:fc:9d:d0:13:76:03:c1:
                    d2:85:ee:df:a8:40:63:87:01:12:dd:b5:f0:8e:44:
                    38:98:d6:e7:61:85:af:4c:be:18:37:f2:98:91:7b:
                    2b:00:ac:53:2f:ec:06:84:42:1d:4d:15:97:e0:a8:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:99:C1:E3:76:5F:14:79:87:88:BF:69:62:B8:CD:14:AE:EE:69:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c2e3ab5c-67dc-3a51-b5a4-2708d0fc99e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:ce:32:61:a3:c9:7f:18:be:b6:96:f0:33:28:ec:9d:26:
         da:e3:f3:a9:9f:73:88:71:9d:f1:59:55:ba:7c:6f:2e:a3:7d:
         57:5b:14:49:1b:38:c3:68:34:29:a5:80:62:56:3a:79:a1:62:
         d3:98:6b:10:da:c2:66:c4:f6:2a:d7:eb:6f:ff:8f:26:3e:49:
         51:aa:06:41:9d:77:26:18:39:54:c2:8c:ec:6d:61:93:ce:4d:
         df:36:e4:fb:72:cf:51:56:50:b3:d5:21:f6:a8:51:7d:c0:05:
         1b:5f:2b:b4:61:d4:89:c2:7b:dd:80:90:d0:6d:28:db:08:72:
         bb:46:73:bf:c4:b1:17:59:aa:ed:26:44:76:5d:f8:ad:a7:15:
         af:c1:78:36:8b:ee:85:32:e4:16:22:86:7f:37:48:17:bb:09:
         4c:75:70:b8:f3:fe:f4:52:98:84:90:53:9a:46:e1:d0:7e:d7:
         bc:65:d4:a1:e0:8d:ba:95:39:55:72:13:13:63:e3:25:79:c1:
         91:64:4d:6a:75:83:a5:3b:71:f8:10:38:3f:72:23:cc:03:1f:
         ef:be:8f:a5:34:de:fe:f1:a4:8a:cc:c5:55:5a:02:43:46:a4:
         a9:ad:cb:e9:5d:a4:8c:ec:08:26:eb:e0:d9:92:84:df:af:13:
         23:19:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:49:08 2024 by rpki-client on console-ams.rpki-client.org