Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
File:                     e0379946-4a18-3a0c-a538-1fa6a4f52463.roa (raw, json)
Hash identifier:          KIDC02zqiRT1NFovjlcnpc+cDs48N7AiGBVcTt+xY0k=
Subject key identifier:   95:00:68:6C:2F:CC:96:23:BE:B1:4E:98:BF:70:C1:72:12:45:2C:DD
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584582A886AA2AF958BF451DDCE0
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa
Signing time:             Thu 11 Apr 2024 13:00:36 +0000
ROA not before:           Thu 11 Apr 2024 13:00:36 +0000
ROA not after:            Wed 10 Jul 2024 13:00:36 +0000
asID:                     14297
IP address blocks:        139.131.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:82:a8:86:aa:2a:f9:58:bf:45:1d:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Apr 11 13:00:36 2024 GMT
            Not After : Jul 10 13:00:36 2024 GMT
        Subject: CN=55535461-b254-47d6-aaf4-390850bb0709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1e:5f:62:c4:9d:de:73:bc:93:2b:7f:76:3e:
                    14:0c:6f:95:7c:2a:b9:21:64:f2:80:e5:e6:98:2a:
                    d4:da:0c:b6:73:4c:95:03:9c:3f:0b:3c:e0:c0:8c:
                    9b:00:ff:aa:d3:1d:61:7f:4e:53:42:44:e9:f9:6f:
                    e6:33:3c:cb:69:3d:2f:03:3f:b4:6d:d0:12:8f:0c:
                    97:45:15:0a:38:59:ee:db:4b:75:db:6e:b3:6d:c2:
                    e3:96:f7:ec:c7:e7:ac:5f:80:8b:95:b6:ef:1a:ab:
                    a9:0b:dc:e7:87:88:f3:89:96:9c:da:b4:5f:9b:06:
                    d8:ce:04:06:74:8d:f0:c1:78:71:5f:95:d2:c7:21:
                    26:1a:99:d7:2d:91:c8:68:bc:3a:06:a9:df:ed:ff:
                    15:80:c4:6a:fe:39:1c:c7:4e:ae:b0:c6:ea:7d:5b:
                    a8:46:40:8b:0b:0f:6c:72:8b:41:bc:95:ca:6f:fe:
                    ba:b7:b3:85:3d:4f:0f:3f:83:77:07:8d:01:27:14:
                    a8:37:63:77:77:ef:04:b1:ac:7e:1d:f8:1e:26:2b:
                    bf:c9:93:c7:5d:7b:8f:a4:7d:b0:54:17:92:e9:65:
                    f1:fd:5e:c8:63:78:be:cc:c4:e3:01:e7:c7:a4:9c:
                    47:00:26:10:46:38:20:c0:76:e1:d5:b3:2d:03:6e:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:00:68:6C:2F:CC:96:23:BE:B1:4E:98:BF:70:C1:72:12:45:2C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/e0379946-4a18-3a0c-a538-1fa6a4f52463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:cc:0b:43:49:96:6d:c4:97:23:85:a0:de:47:d2:85:7d:1c:
         97:8d:4b:10:ca:cc:05:c3:24:50:7d:09:21:eb:4e:13:63:42:
         3d:b7:4b:da:3e:e6:a1:0e:c5:71:26:d2:d6:78:59:c6:3a:c1:
         6d:47:c0:f1:0c:af:0b:82:d9:82:22:4e:cd:b6:72:c4:d2:56:
         59:2f:bd:82:3a:8f:97:f8:58:e7:1f:7c:a9:42:9d:c1:32:22:
         37:68:77:20:49:ee:2c:2f:8f:f3:ff:d9:1e:80:9c:97:3d:b7:
         74:96:98:fe:e8:2f:37:59:67:a5:4f:84:a9:c8:ef:65:70:5c:
         a7:73:49:58:d5:9c:49:b5:f2:2c:78:07:e9:56:ac:1b:95:a6:
         b9:41:be:00:0d:50:c2:7f:20:f2:6b:40:b8:7f:be:26:ab:4d:
         d6:92:2a:20:6c:fb:c3:52:7d:da:fe:92:f5:12:cf:1e:22:b0:
         6a:ef:08:96:bd:c0:b6:38:e3:a5:8d:d4:b9:f7:9a:35:75:10:
         31:e3:3f:9c:ca:ff:cd:e3:aa:53:4f:be:b9:a5:2c:5c:d0:3e:
         68:c1:c0:57:21:98:91:4e:eb:85:14:65:c5:47:19:4c:55:dc:
         e5:57:db:31:a3:9c:11:ba:f5:de:8d:5e:bd:b3:cb:e6:99:66:
         2d:2a:a8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:28:20 2024 by rpki-client on console-ams.rpki-client.org