Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
File:                     e0931627-c998-367b-977e-2116409a07e9.roa (raw, json)
Hash identifier:          2EK/JrOeRyAS2arZUVOSJ5HAaIkmcilV59BuO/gblLg=
Subject key identifier:   8F:F2:C7:AC:8F:95:6E:43:01:B7:A6:2E:1D:FD:0F:BF:95:30:5B:6A
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F43285847EFEF85B478499D676465F520
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
Signing time:             Wed 20 Nov 2024 02:00:39 +0000
ROA not before:           Wed 20 Nov 2024 02:00:39 +0000
ROA not after:            Tue 18 Feb 2025 02:00:39 +0000
asID:                     46133
IP address blocks:        2.57.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ef:ef:85:b4:78:49:9d:67:64:65:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: Nov 20 02:00:39 2024 GMT
            Not After : Feb 18 02:00:39 2025 GMT
        Subject: CN=93c8f063-5e94-4de0-ae94-8f328fac9586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:b4:a9:b1:15:fa:9c:61:76:99:f3:d0:af:
                    e3:ba:9f:2a:f9:47:68:b3:0c:1c:9e:c0:5b:18:05:
                    9b:e1:fa:e7:44:bc:f6:f1:3d:0d:24:1f:03:dc:4a:
                    01:c8:04:49:75:f5:a4:1c:5a:4c:ed:19:71:b2:93:
                    8b:b2:90:79:b3:77:00:b1:38:af:63:b8:60:ed:8e:
                    c5:90:8d:ba:47:f2:d6:ee:c0:5c:cc:9e:76:7d:9e:
                    90:5a:ac:1f:69:b3:c5:58:b2:6c:c3:75:e3:5d:2a:
                    99:9c:bf:c6:b8:48:9d:06:2e:9e:ea:66:c8:3f:1e:
                    6a:11:71:3a:b2:79:5e:a3:66:0a:a4:70:4c:ba:3b:
                    bc:7a:8f:16:20:8f:81:43:7d:5d:73:b6:7d:48:59:
                    8a:71:6c:f0:ff:d4:54:2b:63:e1:84:c2:9a:74:38:
                    cf:75:dc:4f:e9:e5:61:de:64:f3:aa:e5:8f:ab:2b:
                    27:47:b4:27:b3:fe:1f:13:8c:cb:c4:16:b5:ed:0f:
                    38:23:0e:46:f4:4a:ec:c6:1f:d6:45:56:32:a1:08:
                    a6:9e:51:9b:57:f6:2b:e2:a9:9d:09:32:5c:de:e8:
                    73:49:1b:bb:89:7a:ca:29:ed:cb:ad:6e:f6:7d:16:
                    0e:94:a6:49:55:65:e8:f9:34:c2:39:f0:2b:0f:91:
                    a5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:F2:C7:AC:8F:95:6E:43:01:B7:A6:2E:1D:FD:0F:BF:95:30:5B:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:99:ce:14:e2:08:fd:d9:89:72:9e:eb:f5:04:65:81:0f:23:
         23:ad:46:0d:8c:c1:a2:fe:2f:a4:77:7f:7a:e3:48:f6:9e:45:
         83:b7:de:1f:d4:d5:d5:36:5e:ed:41:59:cb:0a:c4:11:ba:ee:
         37:4a:7d:e4:34:17:1a:2c:44:c1:3e:e6:f4:42:e2:b3:04:31:
         51:74:5a:15:28:f0:9d:3e:7d:53:68:41:cb:f0:e5:70:b4:1a:
         4e:96:47:25:5b:65:c6:1a:67:e2:41:d2:02:89:30:16:97:6b:
         0e:c6:56:95:13:36:3b:02:a8:b2:87:1e:e6:2a:df:01:36:6d:
         54:1b:63:23:15:07:92:02:b5:28:dc:e3:69:d6:db:c1:c1:97:
         23:3a:6e:a7:02:89:5e:87:c6:cc:28:f9:1d:61:69:a9:56:3a:
         a2:f4:39:8a:3d:b0:91:67:d9:87:67:55:67:2a:a2:b4:49:f1:
         c7:2b:99:20:fa:a2:1c:dd:dc:f4:dd:58:0d:f3:f7:29:58:b0:
         c2:a8:51:32:e1:d7:0e:4c:59:6e:4a:ea:04:5a:36:fa:c3:7d:
         d8:41:59:65:0b:bc:aa:36:5f:7e:f7:e4:bb:f1:04:b0:ed:c0:
         b1:8c:e1:f5:2a:7d:5b:9b:2c:40:9d:53:3f:06:a2:58:95:b6:
         a3:8c:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:52 2024 by rpki-client on console-ams.rpki-client.org