Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/31bc2ab3-f94d-3d6f-ae61-396aef1192fe.roa
File:                     31bc2ab3-f94d-3d6f-ae61-396aef1192fe.roa (raw, json)
Hash identifier:          lBqVzsleX+fIMvwP5noZUYDGwAmCeJzV6Rwl7J3jr7c=
Subject key identifier:   2F:CA:2C:4A:38:49:BE:69:F3:93:6F:3F:D4:35:E4:D5:A3:0E:D0:AD
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285847924BE41180C20E42A0ACE800
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/31bc2ab3-f94d-3d6f-ae61-396aef1192fe.roa
Signing time:             Thu 17 Oct 2024 13:00:42 +0000
ROA not before:           Thu 17 Oct 2024 13:00:42 +0000
ROA not after:            Wed 15 Jan 2025 14:00:42 +0000
asID:                     30215
IP address blocks:        139.138.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:92:4b:e4:11:80:c2:0e:42:a0:ac:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Oct 17 13:00:42 2024 GMT
            Not After : Jan 15 14:00:42 2025 GMT
        Subject: CN=3aa89890-ce12-4cdc-9c81-15d79138ffff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b9:4a:c7:d7:48:e9:be:93:9f:ad:74:26:dc:
                    ad:83:66:04:b6:0c:83:b3:48:6c:72:02:06:63:de:
                    e4:7d:8b:ae:a5:86:b3:88:d8:9c:9d:3a:37:e0:7a:
                    d1:14:8d:b4:5e:c3:43:13:c3:07:5d:7c:84:59:d1:
                    e4:48:73:3d:05:d3:90:e6:54:c4:9a:ae:f8:85:39:
                    45:f4:ca:55:12:d4:3a:ae:10:6b:45:e0:c5:f6:19:
                    e5:bb:58:33:1c:85:61:69:7e:f8:1f:da:d5:d7:cb:
                    12:cb:89:89:a6:5c:f0:33:f1:ee:21:39:af:05:5b:
                    47:fc:97:6e:a4:07:90:0a:46:86:a0:72:36:09:61:
                    ba:cb:32:17:45:1c:cf:0f:f4:46:58:39:d1:f9:06:
                    2f:56:10:42:72:3d:dc:9f:11:1b:19:26:b2:fd:22:
                    9d:78:9e:9e:59:88:26:78:4d:09:db:d3:d8:66:ce:
                    c0:02:0f:07:ae:a2:db:7e:bd:24:6d:df:bb:f9:77:
                    fd:65:ef:bc:dc:c2:0d:b5:35:10:7c:36:9e:2b:06:
                    62:54:f5:39:40:ba:4c:8d:a5:51:da:ab:06:58:d2:
                    c7:25:8b:97:04:94:bf:3b:08:a1:3b:3d:9a:ff:dc:
                    b6:06:f1:21:77:9d:53:cf:8a:7e:17:12:bd:69:46:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CA:2C:4A:38:49:BE:69:F3:93:6F:3F:D4:35:E4:D5:A3:0E:D0:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/31bc2ab3-f94d-3d6f-ae61-396aef1192fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:87:c5:0a:6c:17:62:59:32:96:4e:41:e0:15:c6:86:0d:d3:
         54:7c:ff:2c:2c:16:ca:20:68:f0:e3:1f:50:48:7c:60:47:25:
         4f:ed:45:b1:c7:0d:35:19:f9:98:e1:e8:bf:0d:b7:2b:e9:72:
         33:81:cf:e9:ff:93:e3:2c:ad:6a:b9:30:22:95:5c:36:74:8e:
         09:eb:80:a6:e4:52:0d:e0:95:2e:81:2a:84:6f:ad:70:a5:25:
         a6:0e:88:24:2f:d9:22:8c:01:eb:cf:bf:99:32:67:54:b8:dd:
         6e:32:9b:06:f1:be:46:bb:69:99:e5:fd:d3:c5:4c:1f:9b:a9:
         2a:63:35:28:a7:ac:63:8d:b9:cc:8f:e8:ee:55:e5:4a:62:ae:
         15:e6:19:22:7d:78:39:14:e7:d6:40:fb:90:34:25:4e:28:dd:
         77:e2:f7:99:53:be:e3:67:3c:93:d1:f8:78:86:00:d0:11:52:
         ec:32:78:8c:3d:70:6e:30:d6:ee:4e:26:04:69:d5:a7:5b:9c:
         24:d0:48:38:65:2d:c6:8e:87:6e:4b:e1:cf:ca:78:fc:07:9d:
         3c:13:d1:e2:e6:13:de:16:ce:c6:a0:e9:2d:7f:ab:50:fd:80:
         13:e2:97:a7:a7:fd:d2:d7:b4:d2:26:eb:4f:16:df:20:20:ef:
         72:04:a2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:40:34 2024 by rpki-client on console-fra.rpki-client.org