Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
File:                     54bd93e4-37b5-30b1-9400-97c9f6177c01.roa (raw, json)
Hash identifier:          KtKGrpauVq+C7YyM3huf+vVut8EPByhuuGl4krNaldA=
Subject key identifier:   0A:CD:0D:74:AC:FC:5F:EF:E7:F4:4A:74:52:D5:DB:1E:0F:98:CC:F5
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285847C1DF4A0B12EBF7C069D50500
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa
Signing time:             Sun 03 Nov 2024 14:00:49 +0000
ROA not before:           Sun 03 Nov 2024 14:00:49 +0000
ROA not after:            Sat 01 Feb 2025 14:00:49 +0000
asID:                     9009
IP address blocks:        172.94.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:c1:df:4a:0b:12:eb:f7:c0:69:d5:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Nov  3 14:00:49 2024 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=7c119bae-6289-4be5-920a-51d5ae38a182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:df:2b:56:c8:44:2f:91:fe:31:4e:81:d7:
                    5d:f5:9b:75:b8:c0:2e:51:82:78:03:48:ef:d2:2a:
                    c8:7c:03:88:b7:91:55:30:45:69:bf:36:a7:95:16:
                    08:d3:cc:6c:70:63:99:2d:88:af:53:c7:c8:06:dc:
                    e0:ab:92:46:a4:62:6b:6c:e3:76:aa:68:35:32:0a:
                    5b:41:ff:10:9a:53:8d:f5:ad:ae:de:f6:75:10:5d:
                    8a:ba:69:33:5e:2d:ca:d7:b6:64:8b:54:90:23:56:
                    59:c9:f1:9e:bb:c0:3a:0b:87:84:02:27:95:38:25:
                    d6:53:e7:94:82:e1:41:2c:59:0e:18:1c:0f:8b:92:
                    6c:97:ed:d3:59:fb:b0:14:68:65:f5:d4:9d:14:27:
                    07:1c:30:62:59:1d:ee:fa:8b:fd:69:0f:9e:eb:4d:
                    d9:75:96:40:11:f6:6d:b0:40:70:26:d5:18:53:42:
                    c9:57:df:ae:ec:1d:2a:e7:4a:f6:3b:a4:52:7c:25:
                    fe:ba:64:1a:cc:b5:11:90:8e:e1:59:23:4c:a8:ba:
                    75:39:0b:8b:c9:7f:4f:ce:b3:8a:f2:3e:63:da:0a:
                    22:4c:90:26:17:db:6a:6d:0b:08:85:a6:05:f0:f0:
                    b4:8d:62:41:0a:c8:b6:8d:0b:a7:dd:31:95:03:77:
                    9c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:0D:74:AC:FC:5F:EF:E7:F4:4A:74:52:D5:DB:1E:0F:98:CC:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/54bd93e4-37b5-30b1-9400-97c9f6177c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:de:36:ec:e5:87:1b:bb:2e:74:e3:f0:45:70:3b:7c:7f:81:
         ad:65:06:88:8f:88:be:64:67:15:d5:78:f1:06:c2:9b:24:c3:
         44:2d:3c:b4:c1:d5:65:4b:c6:f2:6c:03:51:82:68:b0:b6:37:
         bd:c9:50:7c:7e:77:56:b9:82:c2:bf:ba:78:1f:d3:00:e8:79:
         18:83:1c:20:87:95:fe:8b:20:45:db:fd:98:7e:ac:14:dc:4e:
         b2:fa:3b:d1:6c:7c:6a:33:f3:ef:8d:de:50:01:b1:a3:b0:d1:
         39:b4:49:c5:39:af:55:53:ee:8a:0d:bf:f6:d0:e9:51:3e:cb:
         7b:9a:89:7a:47:79:12:e6:4c:8b:39:e3:05:b0:68:f9:0c:3f:
         7b:ef:07:df:df:49:f7:22:bd:8f:c1:bd:ac:24:09:d1:57:84:
         88:bb:61:e1:bb:2d:76:d1:9b:cd:53:86:5a:0d:6e:3c:da:5e:
         5d:59:16:37:2a:33:f4:2f:21:e9:dd:a3:02:d6:e4:82:87:e9:
         63:27:98:00:ca:2f:e0:91:41:6e:6d:be:44:f0:dd:b9:a2:8d:
         4b:95:a0:b5:47:b2:43:5f:91:5d:d1:01:30:fc:5b:ae:81:eb:
         92:82:48:de:19:dd:44:9c:25:96:2d:8d:ad:6d:da:5c:e6:26:
         f3:91:da:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:36:41 2024 by rpki-client on console-ams.rpki-client.org