Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
File:                     d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa (raw, json)
Hash identifier:          Hm4NnhMzS41PsFY1JcMBUbreSUX65aC5qzJhXMeLfTs=
Subject key identifier:   9A:60:BF:A0:2E:C2:66:99:1C:4A:13:10:B2:94:6A:86:46:5D:48:CF
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858463984303819383D6001136980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa
Signing time:             Sun 16 Jun 2024 01:00:26 +0000
ROA not before:           Sun 16 Jun 2024 01:00:26 +0000
ROA not after:            Sat 14 Sep 2024 01:00:26 +0000
asID:                     17025
IP address blocks:        2001:438:38::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Jun 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:39:84:30:38:19:38:3d:60:01:13:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 16 01:00:26 2024 GMT
            Not After : Sep 14 01:00:26 2024 GMT
        Subject: CN=fe4636d2-36b9-47fc-943d-a3ebd44e8732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:37:74:27:54:9f:ff:65:77:88:8c:65:61:
                    a1:93:79:a7:ff:14:d5:a5:30:13:2d:02:0d:2e:c3:
                    b5:b8:78:f9:31:6b:56:7c:dd:80:62:6e:d6:be:0d:
                    d2:0c:d2:11:60:08:75:7d:95:1f:24:92:8a:86:9d:
                    e3:a2:e6:28:b3:f2:b6:6f:8a:b2:4a:07:d2:2f:d7:
                    0c:fe:78:82:ef:82:17:56:2a:27:9d:15:2e:80:87:
                    80:00:35:18:ff:a6:74:6a:e4:74:5f:96:cb:e6:8d:
                    93:01:45:c5:dd:de:61:7c:3f:af:3a:f7:72:76:6f:
                    6f:de:f4:44:75:03:3c:7e:e4:a6:26:2b:43:47:7f:
                    96:15:2f:24:ae:96:65:8b:c4:8b:1e:87:77:2f:30:
                    72:1f:fd:c6:11:cd:0e:4f:49:a8:b5:f1:19:74:3a:
                    19:e1:06:f0:77:2f:c3:4d:2c:e6:4e:29:d5:24:6b:
                    e2:50:f4:86:f7:ad:bb:17:38:4f:7d:1c:ff:1d:6d:
                    26:d8:03:2a:b3:ab:cd:3c:60:2d:61:3f:29:37:00:
                    b0:e3:81:3a:0f:77:ba:1a:e3:8b:69:16:c7:ec:90:
                    aa:f9:87:8a:c1:85:5b:f8:93:68:78:29:9e:f5:9c:
                    52:5f:df:ee:6b:a6:cb:cd:4e:cd:bf:7a:1e:d7:f0:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:60:BF:A0:2E:C2:66:99:1C:4A:13:10:B2:94:6A:86:46:5D:48:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d6b5b73f-0db1-3713-8df0-d820f1ae2950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:38::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:32:f2:d5:19:9d:fc:a0:e0:dd:57:3b:2b:92:71:7d:62:ed:
         66:c2:14:af:b6:5f:9a:c7:ea:30:53:99:0d:f8:71:58:3f:1f:
         98:ac:81:af:0e:95:e7:4a:c2:8a:e6:e6:4f:a4:46:69:4c:c1:
         a5:d2:8a:a0:d7:3b:b4:d7:9f:0d:20:eb:13:4a:09:01:ea:98:
         43:b2:a1:f1:58:21:49:3a:ef:16:fe:85:48:bc:12:0c:8e:6e:
         d8:79:c4:71:bb:47:3e:ea:0b:9a:72:8f:1f:78:ec:c5:d1:ec:
         c3:08:3b:17:da:45:c1:de:ba:2f:2e:b8:10:36:cf:29:f0:83:
         3f:12:f8:76:51:4e:c5:5a:79:26:2d:83:6e:a3:c7:fd:86:30:
         d8:92:c8:ee:a6:4e:47:39:57:45:7d:02:14:d2:54:2d:a9:cf:
         f4:1e:6f:80:7a:22:34:fb:a0:ed:69:a5:9d:4e:73:bc:89:6b:
         e6:90:30:38:1b:53:2d:c3:0f:72:10:c6:e6:b0:6b:91:cf:5f:
         71:c8:b3:85:d3:24:ef:09:e1:a6:38:62:40:92:e1:26:2e:77:
         4a:be:0b:e0:8d:15:68:78:a7:93:6c:fb:55:18:fc:72:61:65:
         68:82:f5:1e:ca:86:28:c0:55:46:47:49:ae:e8:26:44:35:a8:
         98:2e:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 01:55:38 2024 by rpki-client on console-fra.rpki-client.org