Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa
File:                     0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa (raw, json)
Hash identifier:          IcxROeJDdFyj8xqfblYsith2PYWVnbVtKXi1SxgnttQ=
Subject key identifier:   BD:10:E9:27:D0:B2:1F:55:26:DA:C0:80:D8:52:A3:42:A0:A0:C6:B2
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847B696BBA4C4BC8C0E1FB44B40
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa
Signing time:             Wed 30 Oct 2024 13:00:40 +0000
ROA not before:           Wed 30 Oct 2024 13:00:40 +0000
ROA not after:            Tue 28 Jan 2025 14:00:40 +0000
asID:                     16417
IP address blocks:        139.138.33.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:b6:96:bb:a4:c4:bc:8c:0e:1f:b4:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 30 13:00:40 2024 GMT
            Not After : Jan 28 14:00:40 2025 GMT
        Subject: CN=0c887a22-5d8c-41ea-aca9-98d266af9d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:5e:32:09:e0:66:9e:c7:81:0c:62:e1:32:
                    9a:24:bd:9f:c7:3d:4f:87:c3:e9:bd:e5:b6:7e:33:
                    9c:9f:34:28:f0:44:e5:9a:55:cc:4a:3b:ae:65:bb:
                    d7:8d:4f:f4:b8:e4:f0:ef:55:2d:b4:e4:3e:86:ac:
                    d2:90:ac:cd:88:04:c3:e2:aa:b5:70:2c:1c:49:a5:
                    9d:8c:8f:88:52:a1:c0:5a:27:68:45:67:7a:23:71:
                    23:6f:91:6f:2d:00:46:b1:6c:5d:9c:39:f1:66:61:
                    64:73:15:65:d5:ec:f2:55:08:53:b6:f3:9f:1a:25:
                    46:2d:dc:25:7d:29:f8:83:54:2b:5a:a4:90:a1:a5:
                    b4:a1:bf:b4:0a:76:07:c5:d7:c1:d0:e6:03:b0:eb:
                    7f:a3:d0:e1:c3:85:34:9e:aa:d7:d9:d6:38:8b:a2:
                    b9:83:74:84:f4:ed:af:27:9f:3f:7f:1e:59:ac:51:
                    cd:cc:8b:05:e2:53:03:ed:82:5b:fd:d1:e2:5b:a2:
                    91:1f:ac:21:2b:dc:de:b8:20:ce:df:4b:a7:23:7a:
                    98:2c:5c:76:ac:c5:4d:6b:c3:58:73:ab:f5:55:61:
                    59:19:46:1c:5c:d3:f8:59:49:91:90:79:59:dc:33:
                    1c:ea:58:8d:b8:c5:5d:34:19:5b:c1:75:99:ae:62:
                    14:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:10:E9:27:D0:B2:1F:55:26:DA:C0:80:D8:52:A3:42:A0:A0:C6:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/0ed937b7-7f60-36df-8d9f-63c86c63b9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:b9:c6:41:84:f1:f2:cb:90:8f:5a:44:f7:96:3e:f7:3a:65:
         2d:00:4e:79:ef:9a:d8:f6:45:04:a7:86:2b:56:5c:4d:15:5f:
         98:f9:8c:1a:ea:8c:65:28:d7:63:18:cf:de:d4:68:2b:fc:26:
         3d:2d:c8:57:42:58:27:34:1c:1f:63:5c:bf:72:61:1b:a9:2b:
         fd:cc:01:9b:bb:6b:af:c0:b6:74:38:13:f0:f9:3f:19:3d:5f:
         30:53:2b:8a:59:0d:fc:f5:d1:d1:5c:17:df:6f:1d:1e:7c:c8:
         da:97:e9:94:5a:60:06:b5:d0:ad:df:0a:17:ff:f7:9e:30:a7:
         d3:cd:2e:02:5a:af:76:ee:c7:d0:97:9e:e1:d9:47:12:69:ca:
         bc:b2:15:08:d5:08:44:b1:82:99:5e:98:10:85:27:05:8d:f3:
         74:e2:7d:af:5f:3a:4d:3e:29:d2:b6:c3:e0:d7:4e:1b:f6:a1:
         ee:b3:56:90:55:63:93:2f:f5:4f:e3:05:25:04:fa:cf:a8:0e:
         a4:81:81:48:12:e0:84:5c:66:8a:8f:41:9c:8d:1b:cb:58:46:
         49:d9:75:3e:4d:a1:91:3a:9e:78:e1:97:eb:81:d3:dd:02:8d:
         83:fa:67:21:a3:53:6d:43:c1:a0:4b:06:b4:68:09:32:a6:3c:
         29:a6:e3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:42:37 2024 by rpki-client on console-ams.rpki-client.org