Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa
File:                     d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa (raw, json)
Hash identifier:          MuCipwG17Mn2+WwOVYHby3l+VS0YCapJkKQd26uUjnI=
Subject key identifier:   3E:73:69:6C:01:94:1B:E5:EC:BE:83:5B:24:69:A1:B2:81:82:9B:D8
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F43285845B64E09B9D832582B72544940
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa
Signing time:             Tue 30 Apr 2024 01:00:25 +0000
ROA not before:           Tue 30 Apr 2024 01:00:25 +0000
ROA not after:            Mon 29 Jul 2024 01:00:25 +0000
asID:                     396905
IP address blocks:        138.43.60.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Jun 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:45:b6:4e:09:b9:d8:32:58:2b:72:54:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Apr 30 01:00:25 2024 GMT
            Not After : Jul 29 01:00:25 2024 GMT
        Subject: CN=fd5314ea-a67d-4c51-b0ae-17325e591deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:a3:a8:a7:e3:dc:b0:8f:99:d3:74:b7:07:
                    31:45:6c:7a:f4:90:f4:ca:1f:5b:da:c5:08:e4:1d:
                    3a:9a:16:30:8f:2f:57:24:b8:63:63:a6:d5:06:1c:
                    6c:0c:69:34:5b:e7:80:c1:35:f2:c1:cb:96:19:77:
                    89:5e:05:27:78:4a:fd:f0:2b:c0:f5:ef:26:2c:d4:
                    e4:e1:87:c5:46:9c:16:39:2b:43:23:67:68:23:36:
                    ea:55:87:fc:ae:ec:d2:a4:49:79:7e:03:34:bd:71:
                    3b:79:8d:5f:75:8c:dd:92:c1:65:67:06:85:a7:ad:
                    45:c0:42:4d:4a:85:7d:9b:c2:ed:41:01:d2:c0:d6:
                    0a:1a:e0:1a:6c:38:48:7a:6e:70:50:e4:89:fc:64:
                    ac:48:b7:25:f5:86:07:94:cc:c1:cf:35:c2:e5:d2:
                    59:4d:12:ef:a5:4b:f1:b3:b0:d8:2a:79:39:11:25:
                    67:d1:e3:e8:c0:c4:69:e1:f6:12:11:c4:f6:3e:31:
                    4b:a7:a6:13:cf:d0:83:da:5d:d2:5f:fe:8d:45:ae:
                    0f:9d:2e:f0:ca:1a:8c:23:41:53:67:5a:84:29:a3:
                    2a:6f:c8:b6:07:a1:2d:69:0b:c4:6f:be:f3:74:03:
                    b8:e2:35:7a:64:bc:2b:fc:bc:63:fc:45:78:11:3b:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:73:69:6C:01:94:1B:E5:EC:BE:83:5B:24:69:A1:B2:81:82:9B:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/d3e85c0e-d465-3bc1-95c4-cefe0ab3e840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.43.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:b0:88:d8:bd:98:bd:9d:91:a6:c8:53:e1:b3:22:ae:fe:53:
         32:eb:8f:ac:8b:9d:2c:e2:43:3b:94:65:3a:c9:90:d8:a2:c2:
         45:e0:29:98:d5:fd:42:9d:ca:da:b6:51:5e:be:d2:33:b0:96:
         c1:d5:e9:26:c7:10:ff:dd:8c:af:6d:54:37:a4:1d:dc:66:7f:
         7a:9d:e1:d8:d1:a8:b7:d3:10:da:c1:21:39:7c:1f:67:8f:31:
         6a:b9:20:0d:4a:71:f8:d5:fa:c5:2a:3f:34:92:56:60:d8:96:
         dd:78:0b:36:8d:97:c4:67:63:bd:9b:39:eb:fc:e4:60:00:fc:
         4e:4f:e8:21:75:31:45:01:8e:c2:83:9c:a9:40:5a:31:97:71:
         0e:72:5e:82:e4:6b:98:50:73:d8:b1:7e:48:0a:fa:d7:28:33:
         cf:55:67:93:d0:2f:81:ff:ff:1c:2c:a5:cc:93:44:15:46:2d:
         d6:9e:a8:fc:24:2b:aa:98:da:8f:7d:19:ec:de:9c:71:8b:72:
         c5:ab:bd:23:29:a1:14:67:8b:fa:f7:67:34:fc:da:6c:5a:9b:
         1d:a4:56:63:af:0a:17:15:ab:75:ec:08:32:65:e3:70:19:94:
         2b:b7:e3:8e:3b:f6:c8:25:4a:6b:de:27:13:ac:e2:82:35:da:
         72:1f:43:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 20:57:30 2024 by rpki-client on console-ams.rpki-client.org