Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
File:                     8b83c5d7-df69-3e4e-8d87-019ffe414958.roa (raw, json)
Hash identifier:          3o6nmASVmNdrRQ8Xn/Kut8zazCfwnVKDQ3gc/3KaV4s=
Subject key identifier:   C4:EF:EB:4B:CF:53:05:A4:CF:2E:6A:98:92:D5:87:E3:80:E5:67:9B
Certificate issuer:       /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
Certificate serial:       010D0C9F43285847E78F6732DAD95D8BBCFFDD00
Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa
Signing time:             Sun 17 Nov 2024 02:00:28 +0000
ROA not before:           Sun 17 Nov 2024 02:00:28 +0000
ROA not after:            Sat 15 Feb 2025 02:00:28 +0000
asID:                     64123
IP address blocks:        128.254.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e7:8f:67:32:da:d9:5d:8b:bc:ff:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d
        Validity
            Not Before: Nov 17 02:00:28 2024 GMT
            Not After : Feb 15 02:00:28 2025 GMT
        Subject: CN=156f419f-6e09-4c23-aa35-2157a90afdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9a:b2:cf:1f:71:09:28:45:d7:b9:ec:c5:f6:
                    88:71:a4:8d:f1:d2:88:5d:9a:0c:e5:61:60:14:d8:
                    19:c4:ce:2b:7d:af:77:92:6d:d7:3f:c8:94:52:91:
                    94:4e:9c:a6:9b:ad:e5:4c:c3:cd:23:27:82:98:2d:
                    a2:07:d1:e4:0f:4e:6e:d8:2c:0a:47:0e:6b:21:50:
                    c8:74:a0:f9:ac:26:b5:da:68:38:7c:44:4f:d9:4e:
                    ab:dd:d2:94:8c:6c:31:57:6b:fa:51:75:6a:50:fb:
                    6d:a2:93:a5:8e:77:de:c5:59:0a:68:e0:22:93:56:
                    89:a6:d6:59:b4:d6:ab:53:77:07:32:3a:52:36:b8:
                    7d:32:ed:ff:17:27:c6:51:fb:8a:0a:cb:70:d0:f1:
                    55:a6:cb:07:b1:21:b1:53:65:80:33:88:87:4a:52:
                    f3:b0:24:ba:66:f4:f5:03:d0:4d:39:6d:f3:a0:43:
                    9d:dd:b8:2e:6e:03:78:57:e6:ec:05:9e:30:8c:94:
                    98:6f:cf:ac:91:9a:62:6e:bb:0e:0f:31:dd:84:d6:
                    f6:50:d6:02:2a:da:03:e6:01:b2:9f:6f:75:50:2d:
                    97:20:ea:b6:ed:ed:1c:89:29:c4:a0:79:74:9e:70:
                    1c:5e:27:b3:fe:f8:71:23:a1:18:8b:67:4e:89:17:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EF:EB:4B:CF:53:05:A4:CF:2E:6A:98:92:D5:87:E3:80:E5:67:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/8b83c5d7-df69-3e4e-8d87-019ffe414958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl

            X509v3 Authority Key Identifier:
                keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:82:04:bc:f9:d2:de:c3:61:60:5b:f5:b0:2e:1a:cd:84:e8:
         3e:e7:d6:62:6c:a9:b8:0c:cd:57:54:f3:57:30:90:46:f4:b3:
         f1:38:07:4a:a3:4d:8a:bf:65:28:9c:bb:fd:d2:5d:3a:4f:26:
         f3:d3:7f:bb:52:e4:ad:32:1c:b3:d5:6f:66:0d:ec:8b:c1:5c:
         25:61:5b:f7:4e:47:0c:8c:83:04:2a:54:06:ca:14:7b:ed:f7:
         90:8c:3e:dc:5a:f5:31:9d:7f:be:b3:78:bf:3c:6a:87:e0:f8:
         86:cc:6e:c5:04:10:12:48:75:ec:1d:14:5c:e1:8c:aa:13:c4:
         05:9f:e6:a5:a7:c8:37:33:fb:f4:df:98:c5:11:cd:b6:6b:68:
         8f:35:01:05:1c:53:f0:0c:77:03:78:ee:b1:87:22:a3:41:ef:
         0c:1c:90:74:4d:a3:e2:69:bd:9a:13:bd:c2:7f:d0:a7:7d:23:
         d9:7c:5e:d6:fa:1a:a8:8a:00:df:a5:09:16:b7:75:68:30:ae:
         c8:ac:b6:cd:fb:9a:d6:e4:84:87:91:8b:02:a8:45:7a:cb:d2:
         62:91:35:f7:f2:74:c7:7b:1d:82:1d:a0:40:44:6e:a1:63:7c:
         4a:8e:c9:09:6b:fa:23:f9:7d:95:17:58:a1:a1:73:97:b2:57:
         5f:f0:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:23:08 2024 by rpki-client on console-fra.rpki-client.org