Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa
File:                     e3e04aed-b26a-36b2-8c93-d3312cb16705.roa (raw, json)
Hash identifier:          gsg4AmM7qLrULZtvKw6vWHwexWhpEkZTjSH4cpEDBDY=
Subject key identifier:   66:A2:0A:8C:8E:86:F0:7A:34:9B:02:F0:B9:18:91:77:92:82:F2:23
Certificate issuer:       /CN=03e67bc8-299e-48ec-b739-e66ab6f422c7
Certificate serial:       010D0C9F4328584765A0ED0D7852296469CCF600
Authority key identifier: 12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa
Signing time:             Tue 01 Oct 2024 13:00:42 +0000
ROA not before:           Tue 01 Oct 2024 13:00:42 +0000
ROA not after:            Mon 30 Dec 2024 14:00:42 +0000
asID:                     6579
IP address blocks:        134.153.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:65:a0:ed:0d:78:52:29:64:69:cc:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e67bc8-299e-48ec-b739-e66ab6f422c7
        Validity
            Not Before: Oct  1 13:00:42 2024 GMT
            Not After : Dec 30 14:00:42 2024 GMT
        Subject: CN=63435606-a76e-47fb-aaab-b8db529cfa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:5d:9d:a8:1c:01:85:fd:15:7b:10:89:20:
                    63:c4:45:bd:bd:33:bd:99:09:9b:dc:48:bf:54:0e:
                    f5:08:0f:cb:59:9a:a6:d0:f9:70:8c:bb:b7:ad:45:
                    83:4e:c4:15:80:0d:65:af:bb:a3:9a:d2:86:3a:0c:
                    59:63:49:74:e6:c1:77:8a:f9:77:50:1d:e9:4f:3b:
                    46:87:4c:78:9e:0f:bd:ad:20:1c:23:d1:4a:4f:e2:
                    36:ab:47:f3:46:5c:6d:5b:9d:52:6b:f2:7f:71:52:
                    20:3f:af:14:85:bd:c2:11:07:2c:f6:d2:44:dd:21:
                    20:fd:1e:fb:df:93:a7:e8:32:0d:4f:52:da:9e:4c:
                    1a:5f:b8:0d:88:1b:ab:f8:dc:4e:13:44:8b:23:bb:
                    58:0b:4c:08:c6:74:94:80:2c:4a:f5:42:9e:e1:f7:
                    47:59:40:a5:2f:29:a0:ee:96:e4:4a:e3:5f:e1:f5:
                    a2:83:e6:1e:a7:5f:8b:32:c1:5f:d8:b0:b6:85:f6:
                    c8:8d:8a:31:77:ff:e9:6b:50:14:4b:43:7d:fc:c4:
                    48:c1:15:00:2e:87:52:73:75:76:25:9a:c1:14:ee:
                    de:7e:31:48:ff:0d:da:90:41:db:ce:d4:71:27:c7:
                    24:06:76:de:ac:50:7e:8c:b6:5b:eb:f7:87:f1:f8:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:0A:8C:8E:86:F0:7A:34:9B:02:F0:B9:18:91:77:92:82:F2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl

            X509v3 Authority Key Identifier:
                keyid:12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.153.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b7:fb:f9:0f:91:d9:c2:21:3d:e7:ba:35:bf:2e:da:89:96:b7:
         fd:78:3a:28:34:ef:46:2f:21:53:cd:c7:9c:1b:9a:a1:3b:44:
         2a:64:99:fd:6b:7c:a2:19:ef:a9:ac:c2:8b:9e:f2:cd:36:34:
         9a:63:8c:59:6c:2e:7b:6c:87:c2:3a:05:d1:7d:a1:f2:ec:d0:
         ed:7a:ae:b7:58:76:9e:0e:da:a5:3a:42:21:30:72:d6:48:0b:
         52:90:7b:dc:e6:f3:be:34:a8:00:c8:d5:c3:eb:ad:70:2d:31:
         3e:51:02:a9:fc:5d:af:5e:e9:3c:ad:a6:bb:f0:89:6a:91:86:
         1e:7b:7a:a6:4c:18:9a:00:1a:0f:f6:ae:94:89:43:b5:67:5d:
         4a:ff:a2:d8:f9:f2:37:fc:27:0f:ac:c5:7d:85:51:f6:6d:d7:
         e0:cd:e9:12:3a:db:a2:26:95:4f:64:35:d7:e5:e2:59:09:d5:
         61:1d:22:f3:24:3f:a0:6b:dc:17:0c:b2:ff:5f:ff:17:c0:ec:
         43:df:d6:b6:78:93:32:b9:7c:f2:56:34:67:f1:a9:ce:ef:a8:
         1c:a6:62:ee:72:15:72:e6:dc:29:44:64:c1:7e:43:27:a7:e7:
         87:15:9e:eb:f3:82:a8:40:7e:46:e9:77:07:16:ab:45:e6:7e:
         34:bf:37:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:20:43 2024 by rpki-client on console-fra.rpki-client.org