Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
File:                     5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa (raw, json)
Hash identifier:          gSdCw1frx1ntnDWZ2Zkd4weBRyRq/6SONGteRVQj3NM=
Subject key identifier:   B2:3B:AF:31:40:1C:42:58:E1:C1:A1:C9:DE:32:6F:EF:69:E5:5E:17
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285847C3448F8472C325A258AA3D00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa
Signing time:             Mon 04 Nov 2024 02:00:36 +0000
ROA not before:           Mon 04 Nov 2024 02:00:36 +0000
ROA not after:            Sun 02 Feb 2025 02:00:36 +0000
asID:                     13768
IP address blocks:        65.39.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c3:44:8f:84:72:c3:25:a2:58:aa:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Nov  4 02:00:36 2024 GMT
            Not After : Feb  2 02:00:36 2025 GMT
        Subject: CN=872c3135-b592-4828-9ae5-6a080f8fa423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:51:26:b3:69:d5:30:03:e6:d3:5c:ac:3b:df:
                    26:6d:85:7c:77:e7:0a:45:d0:27:b5:c8:ac:96:79:
                    ff:e5:15:fc:77:2f:6a:6a:a7:98:f6:1b:1b:8d:a2:
                    d6:bc:d8:15:13:c8:7f:6f:21:dd:23:57:6a:f8:2d:
                    ab:35:e0:3c:65:9b:c1:c9:90:23:c8:da:00:83:b4:
                    a9:8b:44:c4:ac:c1:51:81:e6:f6:f3:2e:68:d1:08:
                    9d:87:99:eb:af:c3:d8:b8:9b:c5:2c:81:4e:2e:53:
                    4b:8f:be:b8:9f:1d:a4:40:22:c0:10:b9:49:16:d6:
                    64:a3:da:49:12:59:7b:5f:1e:90:78:2a:51:da:25:
                    73:e1:1b:3f:76:72:97:6d:b6:8e:bc:80:3f:33:a3:
                    f9:17:3c:4d:94:02:37:bf:d4:26:db:46:b2:ae:80:
                    27:12:ae:60:f5:64:1c:78:ce:fe:a6:39:5d:89:05:
                    f5:b9:78:3f:20:e0:8c:5d:71:72:dd:ac:b3:8b:e6:
                    7b:dc:c6:76:aa:86:90:85:0b:08:62:79:f7:53:bb:
                    d1:75:03:17:51:0e:c6:90:3e:5f:44:9c:d0:f7:40:
                    85:9f:93:25:54:2a:32:91:8e:04:9e:99:13:99:19:
                    13:62:d7:b8:25:0e:e9:e1:79:bc:58:cb:4e:d3:c5:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:AF:31:40:1C:42:58:E1:C1:A1:C9:DE:32:6F:EF:69:E5:5E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/5b1bd7dd-3f00-3a3c-922c-f7ee131e636f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:85:1f:bc:4e:04:93:fc:ae:d6:be:2b:fc:63:7c:aa:9b:30:
         69:c3:52:e3:e4:2c:95:27:09:65:bc:da:3a:24:e0:cd:26:71:
         0f:cf:cc:c4:e7:6a:f4:2b:3f:9e:f0:8e:cd:14:61:7e:87:5b:
         4c:91:cc:a0:da:85:04:36:24:eb:d8:db:ca:c6:72:d9:80:47:
         cf:12:92:ea:35:aa:14:6f:c3:7f:a6:99:c4:be:d6:9c:97:39:
         71:95:b3:84:ff:d7:12:a3:ae:f3:f9:68:63:e4:8c:f9:3b:3a:
         12:3f:e1:63:7e:a7:ee:a6:40:96:b9:ad:58:c2:f8:e4:4e:94:
         08:98:72:cd:22:6c:1b:ae:b6:39:fe:de:61:2e:3d:0a:79:35:
         b6:da:2f:27:fd:0a:e2:f3:45:76:fd:97:cb:79:59:99:e6:4d:
         dd:05:8f:6e:a2:cf:e0:de:32:c7:51:d5:be:f5:89:16:c3:b6:
         5e:7c:5d:05:90:83:2b:b4:4c:a4:f6:53:5c:73:d3:a8:b4:5f:
         9b:ab:06:3f:cb:46:36:d7:53:e0:3b:8f:e7:a6:ea:f9:85:f2:
         f7:e4:ac:5c:81:91:cc:09:88:44:45:8f:ef:e1:7c:ec:73:64:
         39:bc:6d:07:60:cb:bf:3b:d4:9f:34:91:c3:51:8c:50:be:39:
         2e:08:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:12:50 2024 by rpki-client on console-fra.rpki-client.org