Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
File:                     b7fb26c9-27d4-3d17-b963-60799756d2e8.roa (raw, json)
Hash identifier:          l296Mg4yUix39omtCcmgTzoU4sMcZCWFa9rvGGswAVw=
Subject key identifier:   38:09:A8:41:00:DA:DC:37:C2:85:76:81:F6:81:BA:C5:C6:13:4E:47
Certificate issuer:       /CN=4963bfd3-9105-4443-98df-fbdc0a641c60
Certificate serial:       010D0C9F43285847888658FD1BA0884E0D38E100
Authority key identifier: B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa
Signing time:             Mon 14 Oct 2024 01:00:31 +0000
ROA not before:           Mon 14 Oct 2024 01:00:31 +0000
ROA not after:            Sun 12 Jan 2025 02:00:31 +0000
asID:                     6079
IP address blocks:        209.135.184.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:88:86:58:fd:1b:a0:88:4e:0d:38:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4963bfd3-9105-4443-98df-fbdc0a641c60
        Validity
            Not Before: Oct 14 01:00:31 2024 GMT
            Not After : Jan 12 02:00:31 2025 GMT
        Subject: CN=4cb6de1b-9631-4ec8-90a5-741d612d0e21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a8:b3:ae:c1:4b:54:6a:d1:48:22:07:a3:83:
                    23:a3:29:ea:a7:34:bb:5d:63:5f:32:6e:da:70:8a:
                    58:f8:ab:af:58:8a:32:d6:3c:60:00:45:36:ff:7c:
                    58:cf:03:c2:b5:10:a8:ba:95:ad:2b:26:76:5f:c9:
                    d4:eb:f4:ef:b8:63:66:44:7e:8b:f2:23:90:1d:d3:
                    0d:ad:f7:70:9e:d3:5d:a5:c5:17:3f:84:3c:9d:4d:
                    32:e4:85:fb:3e:2f:6e:95:ee:25:52:fc:bf:35:24:
                    58:09:4a:f9:1a:96:e3:25:1c:5f:7d:16:5f:07:e3:
                    c1:4a:af:67:c7:df:48:fd:93:9c:48:4b:a1:d5:27:
                    ee:72:8e:17:38:d9:90:46:81:d1:a9:77:c7:33:6b:
                    dc:40:95:33:3f:66:5e:5b:27:b7:a4:d8:57:5f:79:
                    e9:e2:66:89:e2:58:4f:b0:74:89:f2:af:cb:d1:eb:
                    5d:c6:d6:fa:c7:71:bc:3e:b0:51:af:a0:02:c0:88:
                    12:08:b7:5a:b9:51:ea:55:35:ca:71:e4:7c:b4:2c:
                    71:d2:c6:53:3c:85:4a:00:2b:f2:24:1c:10:d9:ce:
                    14:c1:8f:9d:80:b7:ff:80:53:ed:72:b0:e7:9f:e1:
                    d1:e2:0b:d4:5f:ea:9e:d1:4d:49:b6:6a:a7:76:98:
                    ae:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:09:A8:41:00:DA:DC:37:C2:85:76:81:F6:81:BA:C5:C6:13:4E:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/b7fb26c9-27d4-3d17-b963-60799756d2e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60/4963bfd3-9105-4443-98df-fbdc0a641c60.crl

            X509v3 Authority Key Identifier:
                keyid:B0:09:EB:5F:5F:5E:E0:E6:08:CE:3D:CB:28:9F:3B:28:FF:C2:95:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4963bfd3-9105-4443-98df-fbdc0a641c60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.135.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:a6:f5:ad:28:36:bf:cc:86:b6:a4:ed:94:cf:c7:d3:6c:2e:
         18:f0:42:93:51:13:c5:4a:96:bd:e4:24:e2:7a:b8:b3:c2:18:
         6a:76:b6:cb:42:60:2e:eb:30:36:fb:63:f3:28:14:c7:12:14:
         1e:a8:1f:8d:cd:8f:6d:fa:27:d4:24:1e:41:2a:15:9d:b9:70:
         60:87:a8:7a:f9:a7:32:22:b9:18:2a:a7:18:f8:08:0a:4d:e2:
         5c:38:b9:fd:b7:82:ae:2a:fe:3f:96:54:8b:2f:5d:1c:57:c6:
         11:67:1a:57:74:68:b7:7f:38:62:47:45:f8:91:4f:cb:5f:e2:
         e9:c5:6c:01:25:44:37:c3:c0:32:15:2a:00:dd:30:b9:e6:14:
         c0:a5:8a:0f:22:dc:9a:3b:c9:e3:54:f1:74:ee:7f:c4:5d:eb:
         54:63:11:42:ca:1a:0a:44:86:e8:15:cf:70:f0:0a:cd:72:d4:
         5c:a8:d7:fb:b5:46:60:e7:57:5f:3f:cc:08:2d:e7:f0:5d:24:
         8a:61:56:c1:d4:4e:12:27:24:a5:d8:5e:4b:41:5e:6e:e6:f3:
         e8:c7:5a:62:a0:58:d3:2b:e9:70:83:ba:13:d1:0f:80:25:bc:
         d4:8c:8b:7e:ed:1d:50:82:f5:b9:5b:fa:7b:41:06:ba:76:a4:
         b0:af:e8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:28:35 2024 by rpki-client on console-ams.rpki-client.org