Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/424c6fc8-8c83-3d25-8f6d-d808fe217f7b.roa
File:                     424c6fc8-8c83-3d25-8f6d-d808fe217f7b.roa (raw, json)
Hash identifier:          /D/AqeVaRBy7p6DXJiik3c3sYcsAjpBz96AuHkFJRck=
Subject key identifier:   A8:A7:37:D3:E2:3E:86:3A:3C:7B:43:84:07:7D:42:98:8B:06:9C:2A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A7634D954BEDC6E3B415380
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/424c6fc8-8c83-3d25-8f6d-d808fe217f7b.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     3131
IP address blocks:        64.184.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:34:d9:54:be:dc:6e:3b:41:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=fbefe5c8-84a4-4464-9852-4faffab9459e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:24:16:b3:53:2f:97:a8:d8:58:ba:e1:60:
                    6e:70:2e:28:73:24:20:c3:b5:03:12:d6:e5:1b:f7:
                    48:d5:9b:27:8f:3d:47:1c:10:a3:d1:cb:f2:10:7b:
                    33:0f:32:a3:ee:43:f8:eb:b3:b0:e2:8f:51:60:b4:
                    f1:0e:d7:b0:fd:7e:1b:47:9d:60:dc:18:5b:67:52:
                    44:ce:79:4d:37:8d:74:69:88:5f:05:2f:f6:93:13:
                    aa:6d:2b:8d:9d:07:83:2f:a7:58:92:b9:d8:24:b0:
                    0f:3a:ef:be:73:8a:1f:2c:71:b0:6f:f7:94:12:e6:
                    dd:b6:91:c1:eb:a3:66:f0:d4:31:8e:64:bb:f3:d3:
                    21:34:d7:fa:f2:a9:68:1a:36:34:33:23:39:81:6c:
                    e2:09:ba:e2:48:bf:ea:6f:fe:d4:fe:4a:37:16:81:
                    e2:b9:ac:9d:79:49:06:01:39:6d:ee:c4:5c:93:bf:
                    f0:f8:fc:84:9f:15:ce:f5:70:4e:45:b5:ac:47:6b:
                    e2:23:64:08:7d:6f:bf:78:d6:25:fa:71:8e:ef:63:
                    3d:32:47:22:c8:2c:de:4b:1f:51:ea:dd:c1:65:b0:
                    ee:27:08:9a:12:4e:a6:d9:ef:d6:39:1b:83:1a:a4:
                    17:b0:be:73:b0:fa:e2:55:ff:fd:b9:72:0f:d7:6e:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A7:37:D3:E2:3E:86:3A:3C:7B:43:84:07:7D:42:98:8B:06:9C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/424c6fc8-8c83-3d25-8f6d-d808fe217f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:b2:c0:3f:dd:58:97:5d:b2:22:89:7d:63:b0:61:74:2c:
         f9:f0:77:be:57:54:ee:ba:9d:19:1f:55:67:c1:34:83:63:30:
         1b:48:1b:77:1f:77:3e:80:7f:17:73:48:eb:64:a1:7f:50:ff:
         72:9a:71:cf:4c:d4:d0:d3:42:ec:66:06:e1:96:39:d2:1c:8f:
         aa:12:14:4e:02:48:25:fd:e8:d5:40:91:e7:e4:95:cc:1a:6a:
         bd:ea:48:03:5a:cb:33:56:8e:0b:1d:fb:5c:99:ab:bb:ff:28:
         b4:8e:71:8a:5c:8b:2b:08:1f:57:bf:d6:d5:e1:29:5a:06:93:
         b8:a8:ad:ca:18:1d:a7:ce:56:47:f3:3c:d5:43:89:28:3c:52:
         90:9a:ed:12:0d:9e:39:79:79:34:e4:c9:a9:c5:ed:70:31:62:
         5f:09:70:0b:99:bd:8a:59:19:b4:48:d8:5b:97:98:b9:ca:ed:
         5d:f6:bb:06:d1:23:1f:56:a7:4e:9d:81:5b:f3:49:1d:ac:94:
         cc:36:67:48:4f:e5:29:8c:27:8c:a3:b0:ed:2e:4d:be:e8:4a:
         c4:7d:2c:96:4e:37:1d:96:38:9b:14:76:b3:53:42:10:97:81:
         e4:40:4b:ce:61:e8:56:6c:5c:57:42:e7:53:63:18:1c:50:5f:
         fe:ed:31:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:55 2024 by rpki-client on console-fra.rpki-client.org