Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa
File:                     1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa (raw, json)
Hash identifier:          fKnottBvcOgTwD8qlS0dv5IjtO1uiZtiTM9JwPBiTIA=
Subject key identifier:   80:57:B7:FD:B8:C6:EA:65:3D:64:87:15:0A:03:D4:B6:C4:E1:36:72
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475EA6322CBA02CF0ACAA97400
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     16503
IP address blocks:        216.178.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:32:2c:ba:02:cf:0a:ca:a9:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=0291ac65-e86a-4012-a463-306c3f8bdb2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:36:c2:4a:aa:ff:ed:d4:13:8c:19:e8:46:
                    74:f0:25:89:4e:80:39:55:11:ef:23:af:2d:5b:63:
                    51:e0:71:8a:63:cc:d5:8b:2b:05:78:26:4f:ce:cd:
                    1e:06:61:76:d0:3c:34:4f:3d:54:f4:c5:87:a9:c9:
                    dc:26:5c:ab:56:7f:cf:bf:cf:d3:45:74:6b:20:bb:
                    eb:64:f9:46:09:0c:e7:af:5a:ec:2a:f2:93:33:59:
                    b2:bc:d7:36:fb:9e:74:48:7e:3b:52:76:1f:a9:85:
                    ec:ec:6f:d9:3e:6b:aa:32:93:4d:6b:3c:9a:79:16:
                    e5:1b:df:34:9b:9b:48:58:ba:a1:1e:d0:9f:9d:87:
                    e5:5f:b9:11:46:33:cb:e7:fb:4e:bf:38:de:b1:f8:
                    cd:2f:e6:01:40:b0:0c:49:c1:2b:94:81:e1:38:70:
                    ac:c2:f6:c7:59:6f:f9:63:ec:1b:4e:95:36:45:b4:
                    89:80:05:27:cb:83:9a:e3:bc:c6:95:e3:6f:71:1d:
                    0e:03:38:5b:19:68:ba:b6:55:5a:7f:3d:bd:8f:03:
                    fd:56:8a:62:e2:c6:7a:aa:06:af:d7:ae:88:cb:53:
                    33:ed:f3:5f:33:d5:b2:c6:59:52:e2:ac:ec:4a:86:
                    bf:65:25:83:85:f5:2d:e8:2d:b1:a8:72:90:8e:d9:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:57:B7:FD:B8:C6:EA:65:3D:64:87:15:0A:03:D4:B6:C4:E1:36:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1ae3bd2c-0ec0-35d7-a14f-8160821990fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.178.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1c:25:2f:0e:9f:47:76:3e:8e:66:a3:4b:cb:70:a6:65:8d:
         b5:f3:cb:54:17:35:b4:f0:1f:0d:94:96:38:7c:d0:66:64:e2:
         c4:70:2f:2c:39:99:2b:d7:72:ea:30:85:96:e3:80:b9:b1:4f:
         f9:b5:e5:73:8d:72:da:bd:2b:1f:c1:77:93:c3:81:95:4d:a0:
         19:bf:60:d4:3b:89:22:1e:47:55:fc:aa:05:f9:f0:1e:1b:8f:
         05:ee:79:85:54:17:a9:3d:3c:33:85:df:e8:cd:66:ec:80:10:
         79:dc:b2:86:7d:d7:db:6d:e6:95:c3:56:9c:e3:9a:1c:09:a0:
         23:40:a1:05:9b:75:a8:77:51:00:c2:42:ab:da:7d:fd:a0:6a:
         a8:0a:cc:94:09:e0:34:fb:30:9d:1d:0a:63:15:00:2a:d2:51:
         93:c1:62:94:47:3a:a2:b0:56:73:36:bb:35:a8:69:cf:b2:e4:
         89:e3:26:8c:12:32:8a:b8:b5:77:7a:08:84:91:3f:b8:be:76:
         bc:c9:f0:fe:39:8f:df:73:9b:0a:78:04:db:f5:81:33:ab:dd:
         28:33:8a:96:bf:7d:90:3f:c8:bc:fa:0b:d9:20:a8:98:9e:fc:
         8c:3a:32:df:43:b1:76:e5:00:49:1c:8a:ee:bd:bd:01:d2:b9:
         85:25:2d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:27 2024 by rpki-client on console-fra.rpki-client.org