Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa
File:                     2ebb08c5-703f-3407-837a-53994c506648.roa (raw, json)
Hash identifier:          GoCUBBPngRjFGuH5ZnHOjrK5TD348AfbVJKxZqQ/les=
Subject key identifier:   F2:8B:5F:B4:FE:81:9A:17:CA:20:9E:4F:41:D6:D5:DA:E2:7F:F0:EF
Certificate issuer:       /CN=2c17c05d-3f57-415d-ae1c-87b9e45a36cc
Certificate serial:       010D0C9F43285847CFD4D67B095B7408FD83F980
Authority key identifier: 9C:8C:C1:E5:F9:4E:CB:E9:9B:C3:ED:50:03:68:CD:AC:84:98:36:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa
Signing time:             Fri 08 Nov 2024 14:00:39 +0000
ROA not before:           Fri 08 Nov 2024 14:00:39 +0000
ROA not after:            Thu 06 Feb 2025 14:00:39 +0000
asID:                     11998
IP address blocks:        142.139.0.0/16 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:cf:d4:d6:7b:09:5b:74:08:fd:83:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c17c05d-3f57-415d-ae1c-87b9e45a36cc
        Validity
            Not Before: Nov  8 14:00:39 2024 GMT
            Not After : Feb  6 14:00:39 2025 GMT
        Subject: CN=b044f0f6-7061-4174-bc40-005019c8d4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d6:c4:22:dc:07:e4:5e:52:9f:62:a7:41:a6:
                    fc:33:fd:c2:ad:89:20:4e:10:7a:a8:a7:77:3c:ef:
                    34:e5:32:38:24:ed:0e:9b:b2:b7:a0:53:c2:e3:e2:
                    f6:84:3c:f0:f7:d7:8b:1e:50:20:0e:a2:3c:23:eb:
                    15:2f:d5:bb:31:c4:8e:70:3a:f4:5c:6b:db:19:c0:
                    e6:a8:d5:75:ce:df:f1:1d:9a:69:f2:91:4a:0f:29:
                    84:6e:c3:ad:8c:23:5a:94:f5:ad:8f:0e:82:62:9f:
                    c2:ae:8a:52:ed:2d:7a:33:ee:1d:f5:40:55:9f:e6:
                    3f:35:82:39:cf:e8:e9:60:84:ac:a8:ca:8f:78:9e:
                    11:a9:68:6b:59:bd:2f:16:dc:77:71:2a:c1:5e:c5:
                    e9:63:da:1b:f1:cb:9f:6c:21:25:7d:77:76:f1:8f:
                    33:8d:6d:ca:9a:95:fe:da:c8:c3:56:01:7c:a9:d1:
                    ca:8d:1e:b6:41:c1:ee:33:59:25:c2:7c:53:54:be:
                    57:55:9b:13:f2:3f:13:e2:cc:44:9e:b2:df:f5:32:
                    bd:9f:c7:f7:b2:3a:10:c9:a4:9f:2e:0d:d2:22:70:
                    56:90:64:04:5e:21:44:eb:c1:00:24:60:14:b8:90:
                    52:44:18:ba:77:81:9b:b0:36:d4:6c:16:0d:12:2d:
                    e2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:8B:5F:B4:FE:81:9A:17:CA:20:9E:4F:41:D6:D5:DA:E2:7F:F0:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2ebb08c5-703f-3407-837a-53994c506648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.crl

            X509v3 Authority Key Identifier:
                keyid:9C:8C:C1:E5:F9:4E:CB:E9:9B:C3:ED:50:03:68:CD:AC:84:98:36:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2c17c05d-3f57-415d-ae1c-87b9e45a36cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:4c:74:f1:43:73:18:d6:63:cd:6f:a3:02:56:42:ad:56:b7:
         da:9c:10:40:c5:b9:4b:cf:67:9d:65:48:2e:a8:a6:8d:00:c7:
         d5:0b:71:c9:9a:81:05:0b:cb:13:fc:e8:4f:97:a2:28:54:ae:
         21:f6:2c:44:5f:68:4d:b3:de:8a:77:25:5b:ad:f0:48:9d:d8:
         27:76:70:30:d9:06:9e:20:fd:eb:78:ac:70:a6:8c:81:73:a6:
         19:0d:c5:fc:69:5b:04:1e:08:15:fd:e4:96:79:81:26:95:63:
         1e:27:7f:13:c3:d5:25:8f:da:91:9a:29:cc:a3:93:d8:d3:3f:
         9f:73:1b:e6:39:87:40:e2:52:eb:63:22:36:6e:28:20:e6:84:
         69:1d:a1:ec:8e:9f:6d:dc:c3:9c:b0:17:9f:c3:d3:66:f7:64:
         be:59:ec:25:a6:9d:79:09:5c:4e:75:b3:04:d2:cb:53:92:87:
         bc:d2:e2:46:b2:b5:c4:98:51:5a:60:cc:51:fa:6e:85:ae:6d:
         e0:d7:79:a3:46:8b:6c:ec:17:41:a2:d7:66:0f:6d:74:08:ea:
         d9:26:ec:07:a8:5a:34:8e:f9:65:09:1f:57:d8:1c:e5:7a:ef:
         3f:91:df:35:e3:23:1e:63:a6:d6:f2:20:d4:11:50:86:e3:72:
         d8:84:28:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 18:43:53 2024 by rpki-client on console-ams.rpki-client.org