Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
File:                     55a4b51a-6d67-315f-a016-1c040d115980.roa (raw, json)
Hash identifier:          5spzbU6L+hUx9T1RHqjkBJyLd0uC603ISoBFs1r9CRc=
Subject key identifier:   12:0D:E0:24:28:53:46:95:1E:61:F4:EC:05:C0:FC:B0:33:95:C7:80
Certificate issuer:       /CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
Certificate serial:       010D0C9F432858473FF0A3D2F34A3373DDB86900
Authority key identifier: 65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa
Signing time:             Wed 18 Sep 2024 01:00:30 +0000
ROA not before:           Wed 18 Sep 2024 01:00:30 +0000
ROA not after:            Tue 17 Dec 2024 02:00:30 +0000
asID:                     21693
IP address blocks:        192.234.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:3f:f0:a3:d2:f3:4a:33:73:dd:b8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3981f6b8-c323-411d-b6b8-03bb44d2adb1
        Validity
            Not Before: Sep 18 01:00:30 2024 GMT
            Not After : Dec 17 02:00:30 2024 GMT
        Subject: CN=e823c87d-afd8-4bc4-bac1-886eb08daab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:e1:9a:41:16:31:76:c2:85:09:fb:3a:3c:
                    75:33:71:ca:ec:0a:9c:e7:4c:cd:4d:cf:8e:00:31:
                    f7:ba:7c:aa:9a:3a:8b:a5:d6:67:64:5c:25:cf:5b:
                    04:1a:48:fa:5c:b8:a7:f5:d9:63:60:80:c8:2b:9b:
                    3a:58:7b:3e:05:38:40:8a:b2:56:42:88:1b:4e:64:
                    07:b8:bb:42:8c:85:fc:81:c6:50:16:ff:77:37:75:
                    64:72:ff:80:b4:80:86:55:1d:38:8d:6f:64:eb:cd:
                    a6:0d:d5:8b:65:03:e2:b0:88:d7:74:fb:94:1d:aa:
                    8f:32:82:a9:6c:d5:e2:8f:a0:fb:c3:1c:b3:86:41:
                    d0:af:ca:f4:c3:a0:69:8a:d5:eb:18:3d:ef:fd:5b:
                    a9:66:b7:58:9b:58:37:cf:7b:be:d6:0c:d4:e1:b7:
                    b8:82:ff:85:07:a6:e5:6f:3d:62:8f:cc:cb:8e:be:
                    88:5d:06:78:a8:36:fc:e7:55:97:87:c7:59:96:68:
                    85:ec:7d:ec:18:76:35:d3:1b:e3:32:99:dc:82:21:
                    9c:dd:39:2d:18:61:90:61:bc:42:fa:83:79:4c:64:
                    cd:3d:bc:5a:01:5f:03:e6:b0:94:c1:e1:58:47:75:
                    c2:b0:d1:31:58:da:5d:06:61:ba:3e:93:5d:82:75:
                    2c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0D:E0:24:28:53:46:95:1E:61:F4:EC:05:C0:FC:B0:33:95:C7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/55a4b51a-6d67-315f-a016-1c040d115980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1/3981f6b8-c323-411d-b6b8-03bb44d2adb1.crl

            X509v3 Authority Key Identifier:
                keyid:65:C1:6F:A7:39:A0:7A:F7:DE:CA:41:22:DC:8E:56:E3:F7:BC:74:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3981f6b8-c323-411d-b6b8-03bb44d2adb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         df:6e:ad:ab:06:45:fd:3c:d0:e2:70:94:0e:a6:17:3d:97:ed:
         0d:f9:99:b3:ec:f9:b2:7b:12:d8:1c:08:33:cc:a3:da:ff:0b:
         d3:bd:03:8c:06:fd:ab:ec:2e:0a:a5:3a:4f:d0:b7:2c:b8:1c:
         ce:d0:1d:da:b3:36:75:ba:04:34:c5:8a:56:ad:f6:85:a5:24:
         b2:8e:c2:bb:fc:5f:42:d9:9c:52:89:92:c8:a3:de:54:a5:e5:
         7e:8e:2f:dd:86:61:87:34:ad:ce:74:1d:2a:3d:ad:90:b9:9f:
         66:d4:7e:a1:3e:29:05:09:1e:b4:c6:ac:b0:99:33:f1:9d:0d:
         fb:e1:36:f6:17:ef:2a:18:cb:ce:a8:5d:d2:1a:87:b8:15:44:
         a3:35:63:5a:00:9e:5e:25:53:eb:6d:10:17:c2:56:b7:b8:15:
         1d:fc:5a:74:dc:1a:89:4f:78:38:e9:62:43:5c:3a:64:f0:91:
         fb:94:e4:21:79:24:0c:d6:41:36:44:b8:fa:9f:b9:3f:fa:c9:
         f8:30:5a:09:f6:07:e8:1b:83:11:db:69:81:96:6e:17:b6:7f:
         14:ef:51:a2:3e:e6:96:02:a7:10:84:2c:46:19:0f:97:51:d3:
         4a:ae:90:17:fe:16:aa:b8:cd:94:2c:f6:5f:6e:cf:36:ce:1e:
         43:11:0e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:35 2024 by rpki-client on console-ams.rpki-client.org