Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b3eb040e-4f77-3090-b986-e394f37ae1b7.roa
File:                     b3eb040e-4f77-3090-b986-e394f37ae1b7.roa (raw, json)
Hash identifier:          p0HYpdW0MyXgAmQdQk1Ig609x2MeL7MnJR47F49QH1U=
Subject key identifier:   EB:3E:43:1D:36:14:3C:6B:29:19:C7:E2:B7:EF:AF:9A:C6:32:37:9A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584586D871EB45B0A8BD19E812A0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b3eb040e-4f77-3090-b986-e394f37ae1b7.roa
Signing time:             Sat 13 Apr 2024 01:00:25 +0000
ROA not before:           Sat 13 Apr 2024 01:00:25 +0000
ROA not after:            Fri 12 Jul 2024 01:00:25 +0000
asID:                     394161
IP address blocks:        209.133.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:86:d8:71:eb:45:b0:a8:bd:19:e8:12:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Apr 13 01:00:25 2024 GMT
            Not After : Jul 12 01:00:25 2024 GMT
        Subject: CN=f8d0a9ae-b631-4e5c-87a2-a694ad172177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:77:95:3f:60:72:ac:c9:2f:51:91:5f:ae:
                    e8:27:ea:19:f2:a7:dd:18:2b:fc:ae:ec:13:f0:a3:
                    a9:2e:ef:87:57:28:ea:00:12:75:ef:a7:c4:79:a9:
                    c0:10:40:e0:a7:df:58:4f:c1:31:80:5c:72:71:0a:
                    ca:1b:ea:73:7b:57:c8:6e:56:bf:bc:2b:62:5e:e7:
                    cb:d3:24:a4:24:ca:fb:b4:7d:53:28:c4:ca:cb:40:
                    95:14:39:7b:89:6b:c2:ca:46:f5:8f:1f:bd:06:04:
                    54:d5:3b:67:e9:b6:d8:47:e4:65:cf:4d:5f:bf:60:
                    e2:f4:ff:3c:58:6e:43:a4:73:62:db:0f:26:76:b5:
                    27:a9:56:6f:1e:19:7d:03:af:83:91:7e:44:d3:ad:
                    e8:df:5b:c2:8d:cd:f7:90:3f:9d:5f:32:66:27:2e:
                    20:75:b9:d4:3f:b6:d0:7e:01:ea:8f:7e:20:34:de:
                    07:de:9d:89:06:bf:19:cf:bb:97:2d:ad:cd:5c:7f:
                    26:78:cf:75:e8:b2:73:23:f7:79:51:62:05:cc:35:
                    0c:0b:e0:25:fd:e4:d3:bd:f5:46:3a:02:db:99:a3:
                    e1:7f:c7:61:91:bd:f8:01:32:c5:c9:3e:eb:6f:7c:
                    d2:e8:e5:65:a1:68:82:59:36:77:0e:1e:2a:14:03:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3E:43:1D:36:14:3C:6B:29:19:C7:E2:B7:EF:AF:9A:C6:32:37:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b3eb040e-4f77-3090-b986-e394f37ae1b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.133.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:14:54:b1:70:d2:dd:57:55:6f:c6:6c:20:5e:a1:4b:00:2d:
         6d:35:09:e4:9e:65:f6:8b:d0:e4:f5:9e:b7:ca:6e:ce:09:ef:
         b4:83:fb:6d:9a:4a:48:f7:ca:95:3a:12:29:2e:e9:99:20:91:
         81:ef:e7:1c:8d:a0:c1:2d:95:32:c0:21:17:ac:8c:c6:27:3b:
         a1:f1:04:25:59:b6:90:69:e9:12:28:38:c2:4f:14:ee:eb:fb:
         0b:ff:07:c7:55:9f:e5:3f:4b:90:37:c6:6d:d5:83:7b:f0:7b:
         b5:f8:ec:00:ef:36:a9:45:c3:9c:2d:60:a6:3d:f9:5e:ea:61:
         3a:51:6c:fa:b3:3c:88:11:94:34:55:0b:d8:ab:e6:30:4f:19:
         b1:70:e6:05:5d:5f:be:5b:1f:d3:0f:ec:6d:fe:c1:56:36:e5:
         37:32:19:6c:3b:7a:b8:1d:ac:4c:a6:a0:fd:06:f1:5f:fd:19:
         a1:32:ce:e4:ca:54:ed:e6:23:2f:83:30:47:6a:f8:d7:de:2a:
         42:d4:a3:d8:9e:94:91:43:ce:07:67:f8:34:e8:ef:10:ed:7d:
         c1:06:ae:c4:1c:9a:1f:a6:61:79:31:3b:ff:93:e6:35:68:04:
         05:da:36:24:a4:07:26:46:e6:eb:88:b8:f2:c1:f6:80:4c:eb:
         15:85:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 02:18:17 2024 by rpki-client on console-ams.rpki-client.org