Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a22fdd9a-dff8-35c8-b87d-7364c839bc74.roa
File:                     a22fdd9a-dff8-35c8-b87d-7364c839bc74.roa (raw, json)
Hash identifier:          yfC9w6WSonE+JQuclHaEPJmcvh9XyqJVsBZ2U9811Ow=
Subject key identifier:   41:29:02:D4:DE:00:45:B1:B7:59:4B:B8:4F:FE:19:E4:80:6E:81:3A
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F432858457D6C42CA1AE7031B1B7FD040
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a22fdd9a-dff8-35c8-b87d-7364c839bc74.roa
Signing time:             Tue 09 Apr 2024 16:00:15 +0000
ROA not before:           Tue 09 Apr 2024 16:00:15 +0000
ROA not after:            Mon 08 Jul 2024 16:00:15 +0000
asID:                     399937
IP address blocks:        139.177.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:7d:6c:42:ca:1a:e7:03:1b:1b:7f:d0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Apr  9 16:00:15 2024 GMT
            Not After : Jul  8 16:00:15 2024 GMT
        Subject: CN=93fe875a-dcfa-4ff2-8270-8e44d425f013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8b:5a:45:7e:4c:28:1b:a5:1a:d1:ce:e0:5c:
                    88:3b:2f:9a:4f:05:37:98:d5:85:fa:47:9c:3f:11:
                    0a:8f:dd:cf:9d:1b:21:81:70:41:77:9e:2d:51:00:
                    e3:c7:cc:c4:b7:be:ed:f9:60:ed:bf:13:79:c3:35:
                    bc:fc:99:47:93:0e:ea:23:06:dd:2e:68:ce:c5:20:
                    e5:67:e9:1e:1b:e9:d0:0b:6b:85:35:89:73:fd:ce:
                    83:69:b0:ab:94:20:0b:33:93:02:37:db:e8:05:44:
                    12:81:61:fa:ab:1b:37:d8:92:6e:6a:9c:a9:7c:b5:
                    aa:94:ec:03:64:16:5b:8d:b8:98:6c:6f:54:43:60:
                    e2:32:a5:97:10:76:2a:6d:b5:e8:22:bd:af:56:ff:
                    3e:83:97:b4:74:58:56:69:52:1f:5b:0e:e1:78:07:
                    19:18:ef:2e:8e:02:2b:5f:48:a7:5a:b6:a5:b3:e3:
                    f4:67:94:e4:4e:3d:48:10:0f:05:43:b8:bb:32:ff:
                    57:ff:ef:ca:c8:59:88:3e:5e:52:12:ce:8f:c1:41:
                    c3:68:5e:a8:75:9c:ff:b0:8a:ea:db:68:12:a4:6d:
                    de:ac:c4:8a:5c:6b:b2:0c:38:5e:36:1c:5b:c4:72:
                    ba:cb:0c:c5:3f:ed:dd:9a:ba:51:25:f2:d0:07:e7:
                    67:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:29:02:D4:DE:00:45:B1:B7:59:4B:B8:4F:FE:19:E4:80:6E:81:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/a22fdd9a-dff8-35c8-b87d-7364c839bc74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:31:2c:2a:3b:0b:fa:0d:14:49:db:61:c1:9e:42:3e:c4:0b:
         cd:60:d7:57:cf:48:76:32:e3:55:05:23:6e:1e:0f:a9:aa:70:
         ab:bb:e5:b9:02:a8:2d:59:6e:f8:53:7e:e7:9b:05:1d:17:7c:
         4b:9e:d4:fc:4d:2e:0d:e3:df:50:a5:f8:9b:48:21:8d:1b:a4:
         53:d4:f4:d9:2d:ec:6c:41:4a:d4:b2:0f:20:56:46:ef:f6:19:
         48:00:f4:76:3e:ca:a5:c1:47:65:68:5d:1f:47:98:e9:c4:ca:
         c2:5d:ac:91:de:3d:aa:bb:09:fe:08:bb:9c:7c:a1:14:49:70:
         77:08:71:b9:49:67:8d:03:30:32:1c:17:a8:08:b5:e1:f2:99:
         de:ab:09:f2:a4:50:3f:6c:f6:e8:23:ce:01:7e:03:ed:6b:85:
         1b:49:8a:a2:32:11:d6:27:c2:cf:70:d2:e6:0c:dc:51:04:fe:
         fe:01:14:ab:d8:20:e7:b9:44:fe:f9:97:d0:84:fc:a5:36:20:
         aa:a0:6d:c2:54:0d:6f:da:7c:eb:53:86:d2:b1:93:eb:14:06:
         0f:6b:aa:67:37:02:1f:1d:bd:bb:60:d7:3b:72:96:88:f4:1b:
         3b:e5:8d:4d:aa:a9:60:3b:a3:c1:38:9a:0f:dd:d5:ef:10:b0:
         22:b7:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 03:03:01 2024 by rpki-client on console-ams.rpki-client.org