Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa
File:                     517c1ed1-2fb3-3723-ad55-68791be7cf98.roa (raw, json)
Hash identifier:          Iu0UyVEk2xLqq7qJ6IHDAsPWSHsem2Mt50tYOYroXSg=
Subject key identifier:   63:93:C6:83:7B:0A:F0:F9:42:B5:BE:04:78:E1:C9:CB:07:35:5C:DD
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285847C8D9E3D1B420D37E65BD8600
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa
Signing time:             Wed 06 Nov 2024 02:00:28 +0000
ROA not before:           Wed 06 Nov 2024 02:00:28 +0000
ROA not after:            Tue 04 Feb 2025 02:00:28 +0000
asID:                     137922
IP address blocks:        138.43.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c8:d9:e3:d1:b4:20:d3:7e:65:bd:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Nov  6 02:00:28 2024 GMT
            Not After : Feb  4 02:00:28 2025 GMT
        Subject: CN=8ee87bab-1d23-4568-9603-80bdd3a0a598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bf:b3:de:dc:2c:cd:26:58:7b:7c:61:a9:76:
                    90:60:d3:a1:f5:b6:31:1c:14:2c:14:6e:48:c0:5d:
                    9c:bc:2a:e4:11:86:7c:2a:08:53:77:db:f4:ea:ef:
                    37:9c:e0:0b:34:56:40:34:32:10:1e:20:55:b8:f0:
                    0e:fa:6c:18:c6:8d:da:e3:86:f8:a5:33:20:31:81:
                    e3:e6:d7:98:77:d2:09:67:67:e4:b3:b6:88:d5:5a:
                    1d:be:be:24:f1:19:3f:e9:ba:35:52:55:ab:f2:7d:
                    8b:54:d1:50:68:13:64:52:ee:ba:6f:40:10:2c:4c:
                    84:bf:43:81:10:d2:6c:22:a1:15:75:3e:22:76:c7:
                    33:c6:c1:e7:d6:de:a3:2a:b1:b2:55:39:64:ef:3a:
                    ce:4e:fe:b6:83:75:2f:8e:04:70:04:73:99:1e:0e:
                    b7:d9:18:8a:e0:81:c5:9a:9d:4f:e6:e3:97:e8:b8:
                    cc:33:cc:74:77:51:e5:a8:f0:75:8d:04:c9:2d:e4:
                    d5:ea:a9:95:17:40:cd:ef:8c:d7:06:1a:2d:2f:67:
                    60:c0:cd:9b:19:fa:98:36:59:69:81:6b:2e:5e:38:
                    84:f5:40:2c:fc:3d:a5:c3:7e:df:f7:dd:e7:29:db:
                    71:73:53:52:11:a5:83:f1:c3:ad:3f:9c:00:66:cc:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:93:C6:83:7B:0A:F0:F9:42:B5:BE:04:78:E1:C9:CB:07:35:5C:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/517c1ed1-2fb3-3723-ad55-68791be7cf98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:d8:c6:32:04:c5:05:6b:4d:3a:84:89:08:d4:2c:0f:3d:03:
         b2:84:c2:51:d5:f9:e4:98:87:ae:65:92:f3:a0:9d:d5:6c:bf:
         73:61:5c:f9:db:66:4e:72:4d:cc:d1:08:41:07:ac:73:65:bb:
         25:e8:51:29:ca:4d:c9:61:ad:3d:6b:e8:18:1a:d2:35:73:90:
         55:4d:34:8c:4e:0f:76:7a:eb:dd:b6:7a:ed:66:a2:15:30:ad:
         0b:f3:3a:0a:49:6a:36:ca:30:d3:ca:e7:d2:14:6e:63:93:ba:
         45:b3:2e:15:64:ca:3f:f0:0a:5a:e7:69:cf:f3:5d:d9:9f:aa:
         6c:a5:f8:5b:37:92:93:eb:53:13:aa:41:34:d5:77:c5:c2:3c:
         ef:8c:13:e1:02:b9:bc:07:75:39:eb:37:aa:8d:3e:44:ff:67:
         a3:89:a6:d2:e8:a6:6e:33:c9:50:fa:25:69:cf:ee:4d:53:35:
         d4:7b:63:3f:6b:a8:fe:a4:7f:68:d1:c6:72:04:83:b1:92:8e:
         64:27:b7:a8:38:b2:9d:69:4c:42:d9:5d:85:43:7b:15:2b:ba:
         d8:d7:15:7f:67:a1:d2:33:88:ed:75:25:15:7a:33:3b:19:30:
         6e:0b:cd:b7:a2:6d:8c:8e:5f:9b:31:de:87:6d:3c:a4:34:46:
         f6:8f:6e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:54:01 2024 by rpki-client on console-fra.rpki-client.org