Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa
File:                     a99c1376-9fd3-3d22-8eed-c104fccc112d.roa (raw, json)
Hash identifier:          C34j6yfmNwhP5/jjreddQctX5vJv8AlJ87lxXzPQyXs=
Subject key identifier:   93:8D:F9:F9:EE:2B:90:30:38:5B:9B:88:DA:64:E9:70:C8:B1:5D:80
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F432858457FDDDEFA0892DC3045A83500
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa
Signing time:             Wed 10 Apr 2024 13:00:34 +0000
ROA not before:           Wed 10 Apr 2024 13:00:34 +0000
ROA not after:            Tue 09 Jul 2024 13:00:34 +0000
asID:                     396986
IP address blocks:        139.177.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7f:dd:de:fa:08:92:dc:30:45:a8:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: Apr 10 13:00:34 2024 GMT
            Not After : Jul  9 13:00:34 2024 GMT
        Subject: CN=c63593e7-84cc-4dbc-94f5-17c77907c927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0a:92:01:25:16:04:c6:9c:14:60:c5:a2:b5:
                    3c:c3:a6:5b:a6:66:de:b4:ae:df:b2:03:ec:eb:5a:
                    6f:fd:53:13:da:61:f9:1d:12:15:ab:e6:6a:c1:15:
                    f3:0f:af:5a:69:2f:5b:bb:cb:1c:47:1b:65:b4:be:
                    88:ea:0a:9b:62:08:15:c5:4f:69:2c:3a:78:64:1e:
                    e5:e8:b7:76:11:ef:8a:80:ee:cf:c0:22:06:da:99:
                    c7:fc:9e:6b:5c:7c:03:56:33:36:32:c7:e8:de:0a:
                    9b:95:b2:8c:11:a6:bf:00:5a:43:a7:57:d8:b2:b6:
                    b4:a7:d7:d7:51:fd:91:b6:a3:83:b1:21:33:a8:a3:
                    5a:62:d0:af:8a:fc:bf:19:ff:c7:69:ff:af:62:58:
                    26:0a:09:b5:68:ed:c5:96:c8:57:84:f5:e4:dc:c1:
                    ca:26:6c:5f:19:47:d5:5f:8c:40:7d:52:b9:c6:1b:
                    17:23:a2:5d:b2:08:2c:8f:61:2f:9a:61:03:0c:3f:
                    ec:b4:22:b8:02:d8:3f:1e:f6:9b:e5:30:d8:96:70:
                    e2:f7:59:8a:35:12:dc:ba:c6:85:9b:fd:29:58:50:
                    50:d0:97:b8:a2:76:74:98:28:94:6c:ee:76:94:72:
                    33:2b:74:ba:bc:47:4d:3b:be:fa:c0:05:02:9e:ab:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8D:F9:F9:EE:2B:90:30:38:5B:9B:88:DA:64:E9:70:C8:B1:5D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/a99c1376-9fd3-3d22-8eed-c104fccc112d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:e0:e5:86:be:60:c8:7c:07:b9:5f:72:2f:19:bb:a1:a1:8c:
         07:9c:33:45:aa:6d:11:ac:3c:e6:a2:92:e6:42:bf:a8:28:23:
         4e:f7:5b:71:cb:17:35:25:10:d1:3b:87:b8:05:7a:48:67:03:
         2c:3c:2b:78:3a:d9:eb:6d:b6:74:f4:14:7f:0c:f3:4d:b2:04:
         fa:be:62:8c:b9:85:76:7d:7f:c9:44:14:41:39:7e:10:f1:6f:
         ac:73:e7:44:94:83:f8:c1:eb:60:27:8d:9b:64:e7:a8:5f:21:
         70:e3:e6:d5:cf:a1:bd:5f:c2:08:6e:22:eb:75:8b:3a:ce:60:
         5b:7f:d3:b6:46:2d:01:21:b8:5c:58:0c:13:b1:1e:f1:a1:5c:
         32:14:71:7d:37:f5:0a:16:94:77:4f:a4:08:0e:32:2c:f8:f7:
         e2:18:0a:dd:0f:87:2f:04:46:f4:05:91:8e:6a:50:72:51:5d:
         63:a3:9f:18:dc:2a:37:0f:a9:fe:bb:99:66:a2:fb:1c:91:35:
         57:7c:8d:b4:46:60:d1:04:2e:eb:ac:97:49:1c:dd:94:8a:8b:
         77:63:fb:f8:1d:82:24:f3:23:2c:88:d6:ea:12:41:b3:96:44:
         ed:76:61:2a:e7:04:69:9c:75:67:ff:b0:c5:80:08:f4:6c:e1:
         f1:8c:09:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:30:59 2024 by rpki-client on console-fra.rpki-client.org