Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/9366f5d7-6390-3c77-a2b3-4662604874ab.roa
File:                     9366f5d7-6390-3c77-a2b3-4662604874ab.roa (raw, json)
Hash identifier:          kCUOHl7CJXBCES8cWxTfPElTu/2tlRKgd+zN6AbN8+0=
Subject key identifier:   AE:54:F0:5E:55:C6:05:C8:53:6C:B7:C9:9A:B1:26:11:EF:8A:3C:85
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F432858472C65E4EBFDD7A537FB784D80
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/9366f5d7-6390-3c77-a2b3-4662604874ab.roa
Signing time:             Wed 11 Sep 2024 01:00:31 +0000
ROA not before:           Wed 11 Sep 2024 01:00:31 +0000
ROA not after:            Tue 10 Dec 2024 02:00:31 +0000
asID:                     202276
IP address blocks:        163.120.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:2c:65:e4:eb:fd:d7:a5:37:fb:78:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Sep 11 01:00:31 2024 GMT
            Not After : Dec 10 02:00:31 2024 GMT
        Subject: CN=a6994ced-21c3-432b-a5b5-61bf758f442f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:99:4d:af:bc:f2:31:b2:81:d4:4c:c6:0c:
                    04:21:81:92:9d:7e:86:1c:fb:34:6f:36:64:dc:b1:
                    0e:8f:8c:f5:80:e0:66:db:e5:e7:7e:3d:f9:21:c8:
                    c7:bb:68:ca:45:1f:18:b9:44:28:05:ce:50:78:2b:
                    58:f9:4d:a0:ca:4d:d6:2d:b8:1c:c7:ed:d9:28:e3:
                    8d:76:77:6b:7a:c6:cc:d2:ad:43:4c:94:7b:b7:44:
                    38:b4:e9:b3:85:4f:56:8b:3a:1b:ba:43:8f:eb:fa:
                    55:27:e2:d8:8f:b9:db:38:55:74:95:75:41:83:ff:
                    16:4a:26:5d:96:c2:3c:fa:a4:19:70:5b:3f:02:a5:
                    b5:23:44:00:96:58:33:be:9d:d5:5e:3c:f5:73:15:
                    a3:dd:be:ea:d5:cb:40:6e:4a:a8:73:98:92:c5:3d:
                    d8:cf:21:6a:7e:bd:ee:2a:1d:2b:c5:4b:cc:d0:63:
                    b2:aa:c6:37:f3:fc:a9:e7:f1:03:5a:50:b9:32:95:
                    8b:d7:3a:2a:32:7a:ca:0c:8d:0c:1d:92:c6:90:b4:
                    d4:2f:04:b9:f7:d1:0d:dc:96:33:22:f5:63:97:2d:
                    2b:28:de:d1:44:6f:3f:d3:c2:37:c0:e4:a2:68:6c:
                    fc:55:7f:53:79:f2:f2:1a:06:df:e7:d8:2e:6c:e0:
                    3a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:54:F0:5E:55:C6:05:C8:53:6C:B7:C9:9A:B1:26:11:EF:8A:3C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/9366f5d7-6390-3c77-a2b3-4662604874ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.120.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:5d:a8:a1:90:07:4d:35:3e:de:70:4b:1a:10:8e:b6:99:7f:
         d0:22:8f:64:c4:3d:4c:b3:bf:26:b8:78:f0:6c:72:ab:a3:9b:
         1e:c4:f6:75:65:66:90:66:a3:d8:15:a7:ce:4f:bc:c8:ad:85:
         bf:94:1e:c7:19:e3:5d:f9:b7:47:35:52:49:6c:03:a0:96:8c:
         f5:a8:c4:ba:6f:88:e8:f9:ce:2e:27:e9:ac:ba:6f:aa:28:0f:
         0d:07:30:84:be:b2:0d:b9:76:8a:fc:3b:00:c2:79:92:fe:e9:
         7f:fb:79:db:5c:60:ba:66:ca:59:65:31:e9:73:22:1a:81:66:
         53:00:5d:74:46:30:95:5c:57:5c:fd:8f:0d:34:93:c9:c8:a4:
         d9:a5:1c:ac:e5:d2:65:a6:a8:23:86:03:e4:cb:37:c3:28:65:
         41:e6:a6:fb:a5:18:4c:af:7f:8c:02:74:ac:7a:7c:b1:13:cb:
         05:89:b5:84:60:a5:e3:14:a2:d5:cf:ef:7f:05:e3:41:1a:d8:
         dd:f8:16:3f:f0:ca:ef:17:72:e4:3d:d0:a9:dd:b9:e2:bd:0f:
         64:72:7b:29:a2:46:e9:fe:23:f3:67:32:98:de:64:fe:b4:60:
         7e:ad:bd:d0:cc:8e:a5:87:36:62:7c:59:d7:e3:82:eb:8f:07:
         f3:4f:fc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:07:00 2024 by rpki-client on console-ams.rpki-client.org