Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05255bc2-91a4-3655-a1b1-0d80f0157305.roa
File:                     05255bc2-91a4-3655-a1b1-0d80f0157305.roa (raw, json)
Hash identifier:          tjh+ZKariGJmzJ5S/SwohIdqqj2YGzqYU7knupLGWUM=
Subject key identifier:   28:B7:CC:4A:7F:DC:1A:77:36:F2:13:FE:8A:61:61:02:D7:23:6B:4D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A763E1226648CADDF280200
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05255bc2-91a4-3655-a1b1-0d80f0157305.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     397942
IP address blocks:        2001:438:6f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:3e:12:26:64:8c:ad:df:28:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=a2a2554b-0d2f-430a-b5d7-11b200653ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:05:8a:cd:b9:94:9d:f9:09:b5:d0:fa:7a:af:
                    f8:4a:3f:ff:4b:6f:48:9e:a1:c0:b3:92:b4:51:98:
                    78:f0:6f:5e:d8:34:eb:38:f1:e0:a2:28:01:c9:29:
                    96:ff:63:74:b0:8b:75:57:2e:b0:53:db:e2:2e:83:
                    62:0d:f6:5a:ff:b7:5a:44:ef:bf:71:5c:af:c2:89:
                    3f:b2:23:fa:3f:7b:06:85:d6:66:2d:df:c0:ed:56:
                    a0:e2:cd:4f:2a:51:4c:0c:c1:b5:9a:48:df:b6:ff:
                    dc:5f:3a:0d:07:a9:d1:77:fd:3c:b0:e8:ff:8f:45:
                    7e:35:ce:6c:37:20:51:8c:01:12:e2:31:6a:76:2e:
                    fc:28:58:f5:ca:66:61:7e:c8:e1:59:ec:09:e0:e2:
                    a3:cd:8e:c3:f2:ff:4d:5a:71:aa:86:86:dc:3a:36:
                    e0:6b:81:91:f4:5f:90:81:79:01:8f:b0:ea:ff:7a:
                    d5:87:e4:2f:8b:56:76:a9:bb:a0:9a:5b:7a:51:a1:
                    ee:27:26:f6:b3:e9:e4:be:d2:65:40:a4:12:99:a6:
                    c7:7d:03:79:f9:2a:62:bb:22:96:6d:56:51:4b:7a:
                    c2:9a:2d:a8:d5:30:ab:d3:5d:b7:2c:a1:75:63:6b:
                    95:47:73:ad:34:92:75:1c:74:19:35:6b:f0:8b:89:
                    1e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B7:CC:4A:7F:DC:1A:77:36:F2:13:FE:8A:61:61:02:D7:23:6B:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/05255bc2-91a4-3655-a1b1-0d80f0157305.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:438:6f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:06:bb:2b:84:d4:c5:81:28:28:29:83:6f:6b:68:f1:05:90:
         bd:da:68:2e:a8:f2:40:f9:72:51:93:f0:0a:d8:7c:d3:2f:0b:
         38:99:5f:40:7e:c8:dc:d6:55:49:74:03:62:60:03:9b:5e:e7:
         27:8b:b8:fa:f3:9e:1b:72:fd:e2:1c:ac:9b:79:c7:54:27:72:
         c7:8d:eb:c6:9a:4f:af:57:84:e6:fe:a4:bd:48:19:57:1c:fe:
         ca:4e:2d:2b:a0:f6:59:70:ed:9b:00:41:eb:54:ea:48:28:6e:
         e1:1c:b1:c0:a6:58:00:e3:9d:a9:e1:c5:23:df:96:14:77:02:
         77:24:ff:cf:8f:09:23:ca:21:18:4f:a6:fc:d9:4c:f3:66:18:
         ac:81:37:c5:fa:b2:1c:c6:c3:f5:09:b5:2b:c6:60:5c:db:89:
         00:b4:2e:85:44:73:fb:55:e6:f6:a6:b7:7b:41:72:1f:54:a3:
         d8:a4:6a:12:10:cc:00:b8:bc:13:b4:93:fa:72:44:75:9d:e5:
         b8:23:ef:48:80:a4:ff:c1:d6:b4:d0:b1:93:b6:55:bf:90:ee:
         c2:0f:2c:c3:b4:41:77:f2:b5:a3:94:f7:88:7b:4e:84:55:fb:
         b3:2c:56:d8:1f:a9:ea:20:70:2f:28:4d:67:05:58:f5:1c:56:
         d3:61:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:54 2024 by rpki-client on console-fra.rpki-client.org