Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
File:                     540b4125-24a3-3589-9314-18a5200c0692.roa (raw, json)
Hash identifier:          MgifKSOQMC9Q4InplR3/SsE/bIGxPX4SRLTja4/KPlo=
Subject key identifier:   16:45:5D:AD:BC:13:1C:D7:35:84:28:67:DC:C8:91:7C:7A:16:DB:19
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584757AB7114E0E4E26F416BF040
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa
Signing time:             Thu 26 Sep 2024 13:00:41 +0000
ROA not before:           Thu 26 Sep 2024 13:00:41 +0000
ROA not after:            Wed 25 Dec 2024 14:00:41 +0000
asID:                     63147
IP address blocks:        128.177.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:57:ab:71:14:e0:e4:e2:6f:41:6b:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 26 13:00:41 2024 GMT
            Not After : Dec 25 14:00:41 2024 GMT
        Subject: CN=1b052dba-f7bf-4e3a-9260-7ee64de038e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:04:9c:ab:bf:9a:40:63:95:5f:88:f4:23:a8:
                    88:50:2f:ac:68:75:5b:6f:7d:0f:73:0b:9b:ba:1b:
                    02:02:6e:ff:f6:ee:56:f4:d5:7d:35:f9:f9:4f:ef:
                    b6:c6:63:ff:c4:fc:e2:c5:a3:a6:5f:aa:64:7a:ee:
                    22:96:ce:d1:40:bd:0f:e2:88:1d:0d:1d:91:3b:fc:
                    84:a9:60:d3:3a:77:64:84:3b:fe:8e:48:b3:82:dc:
                    4e:69:6a:c1:f7:12:96:9d:6f:2a:16:b4:49:5a:f4:
                    ea:b1:55:3a:82:8c:16:92:fe:05:4a:31:77:b1:88:
                    c1:41:49:39:98:c1:d2:f4:0c:54:b6:20:2c:0f:71:
                    1b:aa:f6:79:ac:e1:a3:22:c9:6b:52:f5:a6:58:c9:
                    83:cf:29:82:2a:ec:5f:6f:d7:96:46:81:e5:64:34:
                    79:bc:c6:98:af:ea:dd:22:db:1e:96:f7:23:6c:8d:
                    06:e6:b2:aa:46:fa:1c:cc:c0:00:23:16:7e:d7:66:
                    d9:b8:b3:14:40:89:f2:b8:f7:7b:cc:da:45:3f:29:
                    42:d1:2d:55:47:0a:c3:8b:74:d7:87:8c:1e:32:de:
                    bf:f8:cb:cb:86:ad:f9:50:c9:71:c2:cf:6c:fc:a0:
                    7f:b6:1d:dc:0d:fb:3f:72:70:fd:be:33:10:ec:81:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:45:5D:AD:BC:13:1C:D7:35:84:28:67:DC:C8:91:7C:7A:16:DB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/540b4125-24a3-3589-9314-18a5200c0692.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:5e:f6:d0:d0:05:34:98:1e:1a:f1:c3:56:e1:50:7a:60:7c:
         71:9b:59:ed:02:e4:fd:05:ac:b9:b2:56:fd:de:82:f8:06:82:
         27:b5:41:6c:9c:b2:d1:5b:18:12:08:ec:49:a1:39:76:7e:2d:
         09:d1:99:06:c9:22:af:f2:79:65:62:45:1b:86:68:10:76:fd:
         f3:56:9c:00:32:6f:12:2e:cd:db:15:64:7c:3f:88:6c:85:0f:
         bf:c1:87:67:07:be:50:5b:88:c4:4a:2d:47:7b:0b:16:99:0f:
         43:94:86:bd:01:43:5a:2e:03:2f:4c:3d:a7:38:0d:f0:22:71:
         58:19:ef:e1:58:de:b1:5e:21:b1:28:a1:7a:35:66:30:12:c4:
         9b:b5:83:27:2e:79:30:d3:27:59:7b:ef:7c:d6:db:af:ae:f9:
         4a:52:ff:95:63:a5:0e:cb:19:6d:b5:89:3f:d3:42:f6:e0:56:
         97:3b:04:cc:29:4c:77:34:45:f4:c4:8d:a3:5e:8c:6f:72:d8:
         8f:ba:ce:c5:d1:df:04:a0:ee:77:eb:3e:71:6b:06:3a:47:c0:
         a0:03:02:0c:04:62:79:27:42:d6:82:30:99:06:9a:ed:3c:a6:
         29:9d:8a:51:3d:a9:81:f8:76:4b:e7:12:8e:56:8c:4e:fa:7b:
         3d:50:0d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:24:56 2024 by rpki-client on console-fra.rpki-client.org