Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
File:                     3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa (raw, json)
Hash identifier:          FkURtoUavplMiVGJQxwhSUeVZQQSP1kX3AP3cfxZqIw=
Subject key identifier:   8D:A2:58:D1:97:28:1D:C7:F4:B4:12:DB:58:3C:D5:FC:35:BF:B4:AA
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FD05535637CDA4EDAC80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     4997
IP address blocks:        208.39.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fd:05:53:56:37:cd:a4:ed:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=dbd151ef-0279-46c0-9edf-125198b42b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c8:a1:7e:02:ce:79:2c:73:a6:45:47:13:e0:
                    ef:d7:49:a4:d6:5a:c0:f2:64:b1:ba:bd:e6:6d:ab:
                    21:41:18:b2:a0:71:76:96:d9:41:7a:60:65:df:31:
                    23:dd:0a:57:25:11:d5:91:1b:39:76:e8:e0:4a:d6:
                    f6:fd:e2:18:ec:e1:bc:ae:e6:ae:5d:e1:74:90:95:
                    56:72:13:2d:8f:6d:a8:43:45:25:37:8e:97:d5:40:
                    cb:42:c1:8d:94:ca:4b:15:d8:33:21:2b:05:ac:cf:
                    5b:2d:18:bd:d1:d2:54:5c:37:73:59:46:de:93:04:
                    db:63:ec:d9:34:c3:14:2b:f3:37:61:10:47:2c:78:
                    29:67:84:23:2e:37:5d:0a:62:25:56:24:60:9b:fe:
                    02:ea:52:05:a9:41:c3:57:e6:e7:bb:56:e7:05:9e:
                    80:cb:59:68:27:64:de:30:d8:2e:15:12:cd:c7:37:
                    ab:70:32:9e:f1:79:87:d3:1c:27:64:79:e3:f9:51:
                    ea:16:14:9b:a7:cc:25:f4:6f:b8:86:37:0d:2c:d3:
                    68:b2:18:9f:32:86:1e:4b:58:9f:72:c7:2e:73:c4:
                    6f:5f:a8:d9:d0:e6:6a:6e:6d:be:b1:7d:dd:c8:ab:
                    29:c1:e2:fa:a1:61:b1:ba:64:b7:da:46:e9:b9:67:
                    89:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A2:58:D1:97:28:1D:C7:F4:B4:12:DB:58:3C:D5:FC:35:BF:B4:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:81:46:d8:fe:77:fd:2b:27:5d:ad:66:3b:63:b6:16:f5:a5:
         03:50:e2:da:9e:1c:ff:e0:55:38:87:4f:df:ac:64:6c:82:05:
         e9:0b:4b:b0:d5:8e:61:66:0c:08:38:f4:45:b3:33:cd:64:66:
         ce:05:96:00:43:4b:b2:0a:53:48:ea:91:d5:b6:cd:4c:14:e8:
         3b:51:f3:5d:64:52:67:a5:8f:0f:e9:73:3c:e4:ad:1b:65:56:
         06:70:7b:65:d1:3f:e7:36:d9:41:62:61:17:d4:a5:94:2f:ef:
         cc:36:61:c0:30:ed:ac:00:b7:8b:7b:fd:67:ff:56:e1:4e:dd:
         d0:cb:98:1b:5e:cd:73:66:34:5c:6c:c4:41:2f:4d:c6:1d:bb:
         ca:2f:55:66:ea:7a:3c:03:8f:dd:b2:c0:c6:20:6b:e1:43:f8:
         d3:4e:a7:bd:7d:77:76:f4:2d:a4:86:54:22:b0:8a:cf:2c:b7:
         35:5f:05:5a:21:90:f2:1e:b3:2f:f4:7e:98:a3:b2:6f:7e:4a:
         3f:eb:ff:ce:39:14:f8:7d:6a:04:a1:7a:11:43:16:37:06:4a:
         97:d4:d6:10:28:da:56:da:5d:b2:01:43:d4:8e:6e:d7:80:e8:
         9e:89:12:38:50:4d:1c:7c:0d:94:87:7c:7c:26:cc:4d:a4:f4:
         ee:dc:2a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:55 2024 by rpki-client on console-fra.rpki-client.org