Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa
File:                     0e54ccc7-f789-32f8-9918-79d5d323da7c.roa (raw, json)
Hash identifier:          phDJog6ub9wD4/w8DGpLLUokOe3rcQcjfPabWp94CG4=
Subject key identifier:   51:EB:9F:F0:31:9D:46:F9:26:9F:A8:8F:39:B0:34:1E:93:AA:FA:7C
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F432858478F812EF23D4E2DBC11DA3400
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa
Signing time:             Wed 16 Oct 2024 13:00:43 +0000
ROA not before:           Wed 16 Oct 2024 13:00:43 +0000
ROA not after:            Tue 14 Jan 2025 14:00:43 +0000
asID:                     30215
IP address blocks:        139.138.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:8f:81:2e:f2:3d:4e:2d:bc:11:da:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 16 13:00:43 2024 GMT
            Not After : Jan 14 14:00:43 2025 GMT
        Subject: CN=d547241e-6b13-4a79-a658-cfc2cb70e306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:97:68:03:ca:f2:b8:e9:47:af:27:c8:10:
                    0d:aa:4e:17:cb:a9:1d:f1:9a:9d:8f:f7:31:a6:52:
                    7b:95:d4:b8:8b:87:bb:79:cf:18:f6:87:22:f0:13:
                    df:d0:fc:14:1e:96:16:a3:6f:d9:d3:9f:09:41:a8:
                    14:d1:1c:b6:ef:a5:31:a4:6f:34:bd:53:1a:b5:1e:
                    80:87:af:99:cf:07:ff:12:e6:31:a1:7e:94:89:bc:
                    d0:56:8e:d5:07:05:77:27:51:ad:0c:67:ce:87:33:
                    b8:12:9b:12:7c:f8:73:68:e1:ca:97:d4:cb:8f:0f:
                    53:26:a4:4a:79:85:c5:4c:2d:83:0c:78:3a:6b:4e:
                    67:11:d3:1a:6e:5e:c6:50:5e:c4:85:54:81:ef:2b:
                    2c:47:c6:f3:01:d4:f2:2e:ac:1e:3d:5c:a5:c4:ea:
                    14:b0:af:c7:26:7b:b1:ef:7a:b9:03:f7:1e:1c:76:
                    3f:7c:6f:bd:38:1b:cb:96:dc:22:45:35:1a:56:f4:
                    d0:32:c5:82:80:f9:97:5f:1d:e4:b1:6f:92:71:45:
                    52:ea:cd:ad:99:f5:69:79:b9:0e:b1:aa:76:18:a9:
                    61:3a:d5:0d:ea:70:01:a7:d0:95:f7:18:60:cf:52:
                    4c:13:97:84:51:25:ab:c4:09:ae:70:d9:11:a9:9d:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EB:9F:F0:31:9D:46:F9:26:9F:A8:8F:39:B0:34:1E:93:AA:FA:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0e54ccc7-f789-32f8-9918-79d5d323da7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:19:0b:d0:1b:4d:fc:0a:cf:29:71:db:65:4a:4d:1a:a6:
         93:b6:ae:1f:ab:76:83:fc:52:bf:94:59:ff:63:df:c1:3e:d1:
         69:8c:f1:f1:d0:b6:85:17:d3:82:db:fb:61:fd:1d:02:9d:51:
         5c:ed:22:ad:3f:e9:9a:f3:9e:bc:ea:04:bb:04:fd:60:20:e4:
         5c:fa:b3:da:07:9a:85:c5:8a:c3:e4:b9:cd:b6:30:d6:e4:ab:
         97:6e:5e:a6:34:8f:97:25:cb:90:31:10:32:6e:6e:96:51:73:
         b9:e0:65:54:c5:c6:c5:58:a2:8f:a2:36:7d:e3:0f:b7:39:14:
         d6:d8:93:7c:80:9d:3e:c5:18:9a:0e:17:59:08:5f:59:dd:0f:
         a4:2f:47:89:1c:3e:4a:95:79:e8:65:c6:aa:cb:19:3b:52:da:
         a8:18:d4:3d:33:48:7e:10:8f:83:92:8d:d7:2c:58:d2:25:ab:
         c4:cc:38:7a:a6:a3:54:82:f7:3e:c1:8d:fe:b4:d8:b4:f5:88:
         ad:27:a5:f9:e5:c3:c1:39:af:7b:85:b5:b9:14:71:ca:50:97:
         ef:ea:88:35:13:34:9f:fb:ec:09:51:a4:5a:fa:36:d4:f8:01:
         97:d7:fc:87:de:a2:ac:fa:7c:43:c8:af:16:32:f8:31:da:48:
         ad:73:cf:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org