Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/39810158-ca17-3365-b3a8-8d5352e8ae95.roa
File:                     39810158-ca17-3365-b3a8-8d5352e8ae95.roa (raw, json)
Hash identifier:          ktsGeX6E7h8qX/knhEc9Gh79cr6URM6lWuljecnuiFQ=
Subject key identifier:   AC:AB:35:1A:5E:FC:BE:2F:AD:1B:FD:28:A4:E6:49:93:04:59:03:75
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F432858472405C78F11DD419721BCB680
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/39810158-ca17-3365-b3a8-8d5352e8ae95.roa
Signing time:             Sun 08 Sep 2024 01:00:31 +0000
ROA not before:           Sun 08 Sep 2024 01:00:31 +0000
ROA not after:            Sat 07 Dec 2024 02:00:31 +0000
asID:                     393960
IP address blocks:        172.93.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:24:05:c7:8f:11:dd:41:97:21:bc:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Sep  8 01:00:31 2024 GMT
            Not After : Dec  7 02:00:31 2024 GMT
        Subject: CN=2925d534-3b5b-4542-b29a-c23ab2ddb381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8a:62:58:20:59:d0:6b:37:d1:f8:8a:19:45:
                    ae:ff:d2:f0:6f:56:86:c4:18:cf:cb:04:cc:d1:79:
                    dc:99:0f:b2:c0:32:ec:60:90:1c:c0:6e:7f:0c:e9:
                    49:a5:13:b6:b1:ee:f2:cb:92:85:dc:db:45:af:d0:
                    70:db:cf:94:ce:9b:c1:2f:05:61:4c:8c:81:c6:88:
                    bf:12:59:a0:1f:ab:6d:43:51:7a:b7:08:e5:0c:4c:
                    e3:0d:f4:33:72:f2:0d:c1:92:24:14:99:b3:0b:c9:
                    5a:43:86:3c:b8:d2:08:f2:7a:1a:b7:60:1f:65:f2:
                    46:a9:0c:a0:45:9c:4e:4c:0a:5d:8a:38:df:33:5a:
                    66:a9:e9:bd:4b:ef:bc:5f:42:54:ef:cc:51:d6:08:
                    09:47:91:58:ef:9c:f2:34:81:76:7f:4b:b7:7b:fa:
                    45:1c:f1:e5:9b:77:8d:e0:1f:1d:86:42:be:8e:2d:
                    de:bc:e5:78:4b:bc:83:3a:57:80:9f:2c:89:42:61:
                    d8:7a:13:88:7a:ab:07:92:d4:25:90:64:f5:13:7f:
                    bf:7c:43:0d:57:3a:1c:56:1e:20:32:d2:99:68:67:
                    e9:51:b5:a4:2b:65:23:05:01:01:b2:22:7e:fa:f2:
                    e7:0b:88:73:92:8a:14:d6:21:9b:de:68:a4:21:f6:
                    1a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AB:35:1A:5E:FC:BE:2F:AD:1B:FD:28:A4:E6:49:93:04:59:03:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/39810158-ca17-3365-b3a8-8d5352e8ae95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:79:2d:01:7b:5a:76:93:c5:8f:23:4c:82:df:70:c3:e0:16:
         10:51:1a:d5:97:b4:f7:c6:28:21:bc:33:30:3d:7e:00:5e:d9:
         44:fa:13:06:1d:fa:d8:f9:e2:01:3f:89:8d:db:f0:8b:87:60:
         da:a2:e9:89:68:c5:04:1a:9a:d2:56:c8:4f:ed:35:3c:19:f7:
         56:1b:aa:fe:47:c6:7c:f8:13:49:dd:8b:46:5c:1e:69:72:30:
         11:6b:48:cc:2e:10:6b:98:cb:60:67:d2:4b:dd:78:1a:6c:df:
         76:05:84:bf:f3:3f:48:75:31:63:71:94:a9:5c:e1:64:4d:26:
         31:f7:83:6c:d8:d1:e3:2e:46:a6:59:0f:06:4f:00:16:37:a4:
         11:ff:01:07:71:c0:c1:5c:27:9e:99:cf:28:5a:78:d2:3f:b5:
         06:8c:8d:dc:dd:02:f1:54:ae:c2:df:c7:d0:55:62:47:1b:a2:
         70:cd:92:e4:f8:b2:cb:eb:77:21:8f:ce:ad:70:8f:02:e8:2a:
         a4:e5:ae:cd:86:cf:04:9d:c9:4a:22:b9:11:73:c0:65:b6:88:
         d2:27:db:91:a0:01:2c:cd:5e:b2:63:d8:b0:d1:a9:89:fb:08:
         e6:a2:45:19:52:32:cc:1f:09:b1:b4:0b:d9:e3:f6:59:33:ae:
         15:d4:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:25:32 2024 by rpki-client on console-ams.rpki-client.org