Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5174f2b3-b31e-3a2f-a9a9-dcb3872ff1e3.roa
File:                     5174f2b3-b31e-3a2f-a9a9-dcb3872ff1e3.roa (raw, json)
Hash identifier:          NE59dyYerpX8/cu1FVTp522j7SlSpoOYoz2XQ4TNBIo=
Subject key identifier:   FD:31:80:BB:47:D6:C2:7D:B0:C9:E7:5B:73:84:6E:F7:44:36:85:18
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475EA6296CBEC10F8ACD37FFC0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5174f2b3-b31e-3a2f-a9a9-dcb3872ff1e3.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     16503
IP address blocks:        66.45.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:29:6c:be:c1:0f:8a:cd:37:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=d19681ba-fd39-46c5-8ff9-6eca8ddfd5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:7f:d8:c8:8d:b7:6b:6b:fd:78:f6:7f:a1:
                    b9:8a:c7:7c:d4:57:47:7d:e3:c5:da:0e:4a:15:0f:
                    c2:44:29:84:72:29:8f:81:52:d2:5b:c8:d2:da:41:
                    f3:32:a0:56:bc:7e:0a:9f:ca:98:58:e4:47:5f:14:
                    2c:f8:0d:34:76:a4:80:de:31:f6:e3:fa:1c:e6:0b:
                    10:90:00:45:75:1d:93:2b:c9:89:d5:c4:01:e4:05:
                    a6:ad:18:f1:34:f9:63:34:92:95:89:9c:cf:07:3d:
                    95:70:dc:fb:9a:5b:9a:38:22:68:d5:ff:b9:cf:b0:
                    86:07:51:4e:68:8c:7c:27:33:71:d9:30:e5:68:04:
                    75:8d:76:23:8f:03:60:92:13:73:24:5b:e7:99:8c:
                    d6:95:a5:97:fc:b4:84:c4:00:12:5c:78:b9:43:43:
                    98:86:5d:34:3e:9d:16:e6:d8:87:b0:6f:10:5a:af:
                    c0:8b:d6:a0:89:ed:17:f8:e0:15:ed:ef:34:cd:1b:
                    0a:ee:63:33:6c:57:35:6d:3c:23:d1:9c:db:99:8e:
                    37:a5:8b:41:d0:e7:35:fd:88:f3:24:29:d2:d6:1b:
                    40:d2:e5:3d:19:6e:94:fa:a8:69:d6:c1:2c:c5:13:
                    d2:97:d2:82:a2:0d:1d:b7:04:93:fe:3b:b2:a3:9c:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:31:80:BB:47:D6:C2:7D:B0:C9:E7:5B:73:84:6E:F7:44:36:85:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/5174f2b3-b31e-3a2f-a9a9-dcb3872ff1e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.45.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:ab:07:e0:b4:94:36:38:6a:9f:8d:c9:27:2d:4d:6e:53:
         94:5e:bb:2d:af:a6:3e:4c:f1:db:2e:5e:97:5b:28:27:f3:e0:
         16:b9:ef:5c:04:4e:54:59:c7:cc:1d:78:8e:2e:3f:b0:ad:7c:
         08:28:92:c1:2b:ec:1b:8d:cb:a1:9c:05:9d:a5:71:50:fc:45:
         8d:12:68:d4:6d:39:87:04:9e:0d:9c:cc:aa:be:1d:b2:13:c4:
         52:74:b7:77:01:fa:86:a9:2b:7c:e2:53:b8:d1:96:a2:87:8f:
         18:20:92:3c:47:c4:ae:1a:01:bf:22:e6:df:cc:26:0a:19:e8:
         b8:21:49:89:dd:c3:3d:21:88:54:48:cb:71:b7:33:3f:03:8e:
         46:81:d9:e2:d5:dd:33:6b:60:37:d4:89:f6:6e:52:7a:3f:28:
         a2:1c:30:8e:ee:24:f8:04:77:2b:eb:82:6a:cc:0d:5e:0e:52:
         e7:0d:b1:28:fe:cc:56:c9:a2:07:2c:85:e9:16:1c:42:21:3e:
         17:e8:42:d6:ad:e2:5d:00:e6:d6:36:28:6c:6f:30:22:bb:a7:
         18:7c:a1:ec:42:86:1a:06:cb:63:3b:e1:e4:0b:4a:30:2b:81:
         ee:ec:ef:42:9e:56:34:4b:db:6c:12:e7:ad:7a:9a:8b:04:40:
         33:c4:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:56 2024 by rpki-client on console-fra.rpki-client.org