Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa
File:                     4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa (raw, json)
Hash identifier:          9mwjSKa/oaP6EYWpJLTZSjYfQmDilOjczRUglisNl8Y=
Subject key identifier:   33:3D:CB:E2:3A:ED:9E:2F:78:E6:A0:8D:B1:DA:93:08:DC:6D:5D:98
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475A763805F1D29883F9087980
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa
Signing time:             Fri 27 Sep 2024 13:00:41 +0000
ROA not before:           Fri 27 Sep 2024 13:00:41 +0000
ROA not after:            Thu 26 Dec 2024 14:00:41 +0000
asID:                     4997
IP address blocks:        208.39.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5a:76:38:05:f1:d2:98:83:f9:08:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 27 13:00:41 2024 GMT
            Not After : Dec 26 14:00:41 2024 GMT
        Subject: CN=042bfb15-64e9-49ef-9089-b746d70793ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:a3:7f:c6:80:75:6e:fd:03:2a:75:5e:f8:
                    75:9a:c7:87:52:d6:72:af:2f:bc:1b:95:f8:2f:2e:
                    5f:e3:ee:19:75:06:6d:81:2e:19:30:2e:e2:22:dc:
                    ba:a5:2c:05:72:7e:10:43:30:f9:71:b5:8d:2e:20:
                    3f:27:4c:bc:6d:52:39:55:7d:ad:b7:fc:ce:1f:c8:
                    a5:f5:96:75:51:b2:f4:d1:51:22:94:b4:4b:83:75:
                    83:71:72:84:86:a5:e6:27:2e:4a:ec:1a:0c:ef:15:
                    20:ef:5a:0c:bb:12:2c:3c:0d:96:67:45:eb:ea:96:
                    c0:2b:73:1e:ef:0c:13:aa:64:47:b7:ce:e7:ff:22:
                    4b:71:e0:71:0b:c5:0b:3e:b3:70:dc:c2:da:5a:e7:
                    99:3f:e6:e3:6f:d3:89:42:d4:3b:81:2d:0d:16:81:
                    1e:c8:c2:ed:16:0b:ed:f5:f7:3b:f8:42:b6:ec:be:
                    8c:16:0d:4c:67:93:c4:35:93:19:58:84:ba:fc:86:
                    ed:d3:d5:92:d2:ea:8f:6b:3a:00:bb:fc:53:2a:2a:
                    eb:e5:d9:0d:41:48:9c:44:1f:15:18:0e:77:71:0d:
                    79:f4:ca:46:a4:7d:7a:96:97:2b:54:1d:a9:80:e2:
                    80:cb:20:13:8e:6c:4c:d6:57:a7:40:4c:d2:c4:8e:
                    74:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3D:CB:E2:3A:ED:9E:2F:78:E6:A0:8D:B1:DA:93:08:DC:6D:5D:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/4a1fa385-b948-3156-bcf0-e256e5ad2b98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.39.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:78:d3:ab:83:e5:3b:df:57:70:85:e6:e5:cd:d6:43:76:14:
         ee:9e:e3:2d:56:19:54:8c:be:1f:fc:35:17:1c:89:11:25:8f:
         22:66:44:74:98:ac:59:b5:2c:7e:31:5c:6e:b4:49:d9:34:fb:
         a5:16:ba:c1:b0:ee:0e:c9:5b:57:2c:bc:e0:f1:21:4d:8f:02:
         5b:c7:92:2c:8e:93:c0:e0:57:b8:28:f4:28:28:3d:91:14:3d:
         4a:2c:4e:42:20:66:8a:13:06:d8:e8:90:27:2e:4d:c6:e7:54:
         c1:f6:da:0f:88:5d:ac:ac:f8:4d:54:1f:08:12:ce:e0:92:be:
         fc:d0:32:17:bc:d5:13:9a:75:36:c0:29:9e:6f:e1:88:ff:30:
         62:8e:00:1c:a1:2a:a7:41:e8:b3:0c:ce:3e:39:4a:53:63:54:
         a5:d7:91:e3:72:af:c7:47:2a:33:dd:55:c9:2b:5e:24:83:65:
         bd:11:24:c8:a7:d0:9d:5a:c7:4b:3e:e8:35:0c:66:f1:a0:2b:
         57:59:67:61:92:67:f3:b6:5b:e7:d5:ea:ca:af:8d:a2:8d:c8:
         9d:51:d5:3a:81:63:4a:99:af:86:b4:7a:68:f7:49:04:97:77:
         f2:c8:69:e8:98:90:3f:42:1f:5c:8b:d7:95:4a:35:d1:30:d9:
         16:60:6d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:39:48 2024 by rpki-client on console-ams.rpki-client.org