Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
File:                     55a4b51a-6d67-315f-a016-1c040d115980.roa (raw, json)
Hash identifier:          jKt8c9U3D7SLstgJDAp9DNNNE8pfaFNOPq+UaXFNnoA=
Subject key identifier:   55:00:18:BF:E4:04:04:FA:1B:49:84:B6:BC:00:27:C7:9B:39:C2:5E
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F43285845802571974E33716CB00CB300
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
Signing time:             Wed 10 Apr 2024 15:24:59 +0000
ROA not before:           Wed 10 Apr 2024 15:24:59 +0000
ROA not after:            Tue 09 Jul 2024 15:24:59 +0000
asID:                     21693
IP address blocks:        192.234.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 May 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:80:25:71:97:4e:33:71:6c:b0:0c:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Apr 10 15:24:59 2024 GMT
            Not After : Jul  9 15:24:59 2024 GMT
        Subject: CN=ca731186-1f81-4cd8-8ae6-ebcd902a1c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d5:9f:d4:b5:92:d5:85:98:7a:99:b5:5e:43:
                    82:2a:0e:41:b2:ba:55:c5:10:00:b4:79:03:02:a7:
                    ce:a0:9c:98:00:9e:d2:e6:00:95:fc:22:98:09:e2:
                    5a:88:6c:ac:8d:f9:6b:ef:14:7c:0c:20:3f:52:7d:
                    7a:9f:e2:36:da:b4:7a:c6:3c:c4:79:5e:73:72:d7:
                    63:85:41:af:d3:3f:03:d4:b5:df:7e:92:e0:59:b2:
                    df:9e:0a:9b:d2:45:1c:ea:e7:3a:47:c7:7b:c3:d7:
                    bc:f6:6b:57:20:64:3b:1c:a8:67:70:a9:e6:cb:79:
                    a8:9a:18:8c:17:90:5c:d8:15:9c:b2:b0:56:37:48:
                    a4:a2:76:1f:54:63:cf:e1:29:8b:25:89:8e:a4:85:
                    6b:1b:7a:ea:e9:f2:65:f4:9b:0b:5b:16:10:4f:d2:
                    a5:5c:d9:94:35:2e:9d:37:2f:86:e4:6f:04:de:3a:
                    6e:a6:27:2c:f9:24:c6:e7:15:0c:07:66:19:21:d4:
                    64:e4:4b:d7:4e:e1:d9:07:52:70:6a:e7:e4:38:aa:
                    2c:be:83:56:13:85:57:0d:f4:15:d6:8a:2d:6e:04:
                    37:1d:4b:88:df:86:34:fc:90:45:43:66:0d:30:ce:
                    b3:2e:28:00:32:46:15:20:89:2d:7a:16:65:55:55:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:00:18:BF:E4:04:04:FA:1B:49:84:B6:BC:00:27:C7:9B:39:C2:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:ee:26:dc:09:62:5e:ce:45:86:04:71:97:74:21:4c:44:
         74:b7:60:36:8e:98:7b:a2:1a:45:db:92:98:7e:4b:6b:e5:94:
         c9:69:37:ba:86:2c:e1:ef:87:c6:02:72:bf:28:e1:3a:00:e2:
         87:3e:51:3b:cb:02:52:58:92:b9:86:62:4b:3b:fe:cf:f5:a5:
         99:60:e1:5d:10:1e:c6:8b:d7:51:ef:1b:19:a7:33:5d:e5:d7:
         66:f0:9a:bb:9a:c8:ee:2b:c2:b5:50:8e:22:b7:9b:3b:25:1c:
         3b:41:d3:7b:e8:4b:28:db:49:45:b7:9c:30:78:25:d1:4c:40:
         63:ee:60:28:2e:26:c8:67:6e:ba:31:f3:7a:ac:ef:78:c4:23:
         47:59:40:7a:66:82:ef:18:cb:ef:6a:51:cf:c6:0c:56:2d:a7:
         e8:88:6b:ec:f2:8a:1b:bf:af:86:59:a0:cf:e2:6c:04:76:1b:
         e0:a8:7a:a7:7e:c6:3d:d9:d1:1f:70:9d:d2:97:86:04:67:df:
         83:1a:23:48:b3:63:b8:d2:10:5e:c6:6a:83:f4:6d:93:aa:a1:
         53:6d:2d:4f:2f:9c:e3:6f:2d:f1:de:e5:62:ec:9d:bf:9f:ee:
         d3:25:34:56:67:f2:9f:cf:86:1e:54:06:3a:6e:10:03:3d:30:
         55:81:c4:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 20:11:49 2024 by rpki-client on console-ams.rpki-client.org