Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b455a2a-af1c-3c95-bf46-f9ae6d3cfc44.roa
File:                     3b455a2a-af1c-3c95-bf46-f9ae6d3cfc44.roa (raw, json)
Hash identifier:          8YwcJXkEr8dNuq+Sr0sy8t7GbWt5czMEgDDyhVslrZk=
Subject key identifier:   65:F1:AE:91:29:99:70:AD:90:50:B8:66:9D:5F:FD:23:BC:90:78:34
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F600BCB6162DFE92D09780
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b455a2a-af1c-3c95-bf46-f9ae6d3cfc44.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     14203
IP address blocks:        208.184.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f6:00:bc:b6:16:2d:fe:92:d0:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=5f3c686c-27cf-440c-bf8a-3a8f401fe653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:51:d2:e3:07:e6:0d:a9:76:0f:66:72:07:
                    05:bf:39:31:38:f2:41:67:68:6f:be:43:21:a5:da:
                    ce:f3:e8:02:c5:51:3d:86:38:80:cf:4e:e3:d1:2a:
                    1d:cb:45:43:9d:7b:cf:7f:98:ca:54:6f:c9:7f:9b:
                    db:7a:7d:0b:4c:d3:fc:81:07:96:66:76:2b:38:20:
                    97:af:2d:98:8f:63:ae:0c:ab:b0:53:d1:63:d8:47:
                    6d:bd:65:ca:0b:81:92:9c:68:2d:60:f3:59:7a:c1:
                    95:73:67:eb:d0:0b:61:f8:06:d1:4a:8a:f4:0c:f1:
                    64:4c:75:10:28:e4:09:c9:76:85:1f:df:6d:72:d3:
                    ea:13:a8:78:67:bb:eb:d5:8a:68:3a:f4:48:14:2d:
                    d3:3a:07:13:eb:de:18:2f:fe:42:fb:03:d3:36:da:
                    0f:26:e2:83:14:91:d3:59:61:0f:96:a8:02:36:51:
                    f1:50:02:76:48:22:20:04:64:35:6d:f1:d2:67:b1:
                    3b:3b:fa:e3:81:68:e2:0e:24:72:94:32:4c:79:fe:
                    51:f6:b2:53:2f:7e:c9:0c:b7:fe:26:a0:dd:bd:9a:
                    b6:9a:71:e3:3c:f9:36:98:77:a1:31:f9:e4:36:95:
                    e9:06:62:64:d6:09:b1:7e:11:b5:d2:19:44:2b:06:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F1:AE:91:29:99:70:AD:90:50:B8:66:9D:5F:FD:23:BC:90:78:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3b455a2a-af1c-3c95-bf46-f9ae6d3cfc44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:67:1a:ba:55:bf:84:10:50:1c:23:73:c0:c4:96:69:aa:76:
         cf:be:48:92:9f:6e:ee:e4:6b:d7:ee:11:22:1c:7c:c6:96:3a:
         6e:af:61:a5:bb:d5:ca:2b:9b:d2:5e:36:be:09:fc:79:bd:3d:
         d5:dd:c2:ab:de:34:a7:39:9d:db:e1:fb:6f:71:58:32:36:6f:
         32:7a:88:07:58:28:6d:76:3c:28:3d:9b:03:c4:7d:bb:fa:9b:
         79:ac:ee:22:9e:4f:30:be:4f:11:28:8e:d7:60:d6:99:e2:fd:
         6c:16:4a:65:15:5f:1b:e4:e3:7f:a9:c0:27:fe:a1:ca:05:d0:
         5f:e7:5c:49:b2:0a:b9:c6:40:50:bf:c1:a8:11:5a:ac:99:4e:
         58:c6:0c:69:ad:58:70:78:8a:86:a2:e8:77:d6:07:26:e8:d1:
         d7:d8:cd:cb:2f:94:85:7e:4d:a1:15:d3:51:b7:75:cf:7b:12:
         be:72:5d:a3:e7:84:ec:11:0e:00:63:73:cf:20:0d:3b:f8:e6:
         b6:ed:87:5b:9d:38:09:4b:1f:5d:43:1f:2e:70:8e:ac:c4:c5:
         12:04:ce:d5:46:1d:cb:2a:73:c1:59:72:e1:74:3a:e5:70:0d:
         f9:d9:4f:68:e5:6a:7e:81:c2:70:4a:4c:39:f9:40:04:07:c0:
         b0:1b:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:55 2024 by rpki-client on console-fra.rpki-client.org