Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa
File:                     430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa (raw, json)
Hash identifier:          4IGYqNX1JhIa42olvJOLq2m94rW+Zzf7S/dczujH0gA=
Subject key identifier:   F1:F1:66:96:86:50:36:17:40:2F:B0:2F:9C:80:D7:F8:CC:19:87:C8
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584746EB5B9E61EA365C283791E0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa
Signing time:             Fri 20 Sep 2024 13:00:42 +0000
ROA not before:           Fri 20 Sep 2024 13:00:42 +0000
ROA not after:            Thu 19 Dec 2024 14:00:42 +0000
asID:                     53256
IP address blocks:        199.36.64.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:46:eb:5b:9e:61:ea:36:5c:28:37:91:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 20 13:00:42 2024 GMT
            Not After : Dec 19 14:00:42 2024 GMT
        Subject: CN=c862a9af-fe68-4c5c-86f1-fe3c17e58c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:06:68:6e:38:e8:b5:29:35:15:68:4e:6a:
                    c8:57:f6:bb:6d:84:8f:9d:8c:d0:24:a9:cb:06:b6:
                    43:88:3c:e7:88:2e:df:14:4c:fb:14:ba:fd:36:7d:
                    ce:da:a6:a2:08:ff:ed:78:4a:54:4d:a2:9f:24:70:
                    9c:40:07:9c:ec:9a:54:8b:60:dd:08:80:ff:2c:1e:
                    03:14:e2:b0:6f:6c:c6:c8:43:bb:15:4e:5c:74:64:
                    34:7e:db:e6:b4:2f:79:17:ee:7f:75:64:a2:79:62:
                    88:50:25:a3:4c:7f:59:34:cc:d2:5c:22:89:33:7e:
                    de:62:56:41:eb:25:bb:e7:2a:03:b8:07:d1:d6:47:
                    f2:76:04:70:f0:9a:c1:86:a5:08:40:8c:f6:f3:3b:
                    e9:4a:b3:84:ec:6f:fc:1a:83:a9:02:b1:33:11:53:
                    f6:68:41:a3:d1:a0:9f:64:70:1f:86:33:2f:9f:b2:
                    53:d9:6f:33:a9:c8:d5:96:d5:d7:2c:5f:a6:92:d8:
                    d8:8f:0d:84:a3:1e:ed:62:8c:c2:a2:2d:97:f5:fb:
                    14:fc:d0:05:41:b5:99:95:cf:e8:07:e1:ed:ee:73:
                    f2:57:80:0f:70:0d:d3:9a:4b:d2:1c:5a:5c:b4:bf:
                    40:86:cc:e7:a1:b7:9e:12:0b:3a:30:fb:66:c0:c9:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:66:96:86:50:36:17:40:2F:B0:2F:9C:80:D7:F8:CC:19:87:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/430e64c0-85e0-32d9-a7b2-dcb778e7b103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:06:f2:34:53:2a:9a:10:a1:ff:54:aa:99:d7:9c:a6:26:37:
         06:2e:33:27:8c:d2:ba:99:81:42:43:f4:94:b3:f6:8c:10:28:
         b2:a8:c8:49:30:93:22:94:1a:a1:68:f9:94:8b:fe:27:3f:f0:
         4e:8d:45:01:0f:21:3a:d4:a3:0a:3d:0c:17:bb:6f:5a:b5:d0:
         97:43:a2:cc:22:f6:0c:eb:da:8e:5c:a4:72:e1:4a:a8:33:34:
         32:40:5f:b6:6f:2d:76:2f:73:f2:20:56:18:77:30:c6:38:ef:
         18:92:b7:ad:e2:9b:64:38:63:a2:86:5b:8e:dc:ea:9c:02:3c:
         c2:55:fc:19:8b:e5:66:06:34:95:b7:f1:8e:88:25:c5:d8:df:
         19:a4:2f:9e:74:44:20:21:0e:31:d4:c0:cb:6c:4f:8a:be:7d:
         a9:ba:f3:c6:00:42:49:e8:b5:de:72:e5:78:71:55:11:0d:ac:
         3a:a4:5d:ec:79:66:cd:5d:fb:f8:40:80:bd:5c:c4:d1:40:eb:
         31:bc:63:a1:e1:b9:91:ef:b6:e2:85:9f:31:ce:4a:a7:90:e4:
         f7:95:d3:2d:04:c6:7b:51:18:4a:2f:88:75:ed:e1:f5:13:8e:
         16:f9:30:55:8c:93:6b:d1:58:21:8c:aa:b0:c2:85:c3:f6:30:
         f6:cc:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:27 2024 by rpki-client on console-fra.rpki-client.org