Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54fbb1bf-0aea-3582-b2d5-2b6273c1bf03.roa
File:                     54fbb1bf-0aea-3582-b2d5-2b6273c1bf03.roa (raw, json)
Hash identifier:          E17UFrJVI5Sf/2vqF87iC9/tn8GiV2c3fXgwfak9Yno=
Subject key identifier:   FF:2B:E7:39:20:15:39:0C:BA:37:0A:4D:D1:C8:D2:6D:B1:72:6E:C9
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858473095FFBC1ED3D209E06AB440
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54fbb1bf-0aea-3582-b2d5-2b6273c1bf03.roa
Signing time:             Thu 12 Sep 2024 13:00:41 +0000
ROA not before:           Thu 12 Sep 2024 13:00:41 +0000
ROA not after:            Wed 11 Dec 2024 14:00:41 +0000
asID:                     4474
IP address blocks:        64.124.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:30:95:ff:bc:1e:d3:d2:09:e0:6a:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 12 13:00:41 2024 GMT
            Not After : Dec 11 14:00:41 2024 GMT
        Subject: CN=68b9d159-e577-4cd0-948c-dfda4123b2da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:3a:30:33:4b:b0:d1:22:da:9c:77:c8:71:
                    57:be:36:45:f6:a8:b9:26:6e:df:e4:df:b3:5a:b7:
                    55:7c:4e:6a:8b:9c:c3:36:53:88:e1:24:8f:23:53:
                    44:9a:24:9b:d3:8b:86:4e:a1:89:98:a1:e0:4c:a5:
                    8b:93:92:3c:87:6b:ab:9f:80:52:a0:34:6f:26:f1:
                    13:31:f6:61:06:19:4d:0e:b9:aa:90:6e:1c:de:27:
                    90:86:1f:a7:f0:98:cf:22:02:b0:9e:0b:57:94:6c:
                    d5:64:3c:5b:55:2b:8e:ed:b8:da:57:45:4a:fb:0a:
                    e0:68:8e:e7:8e:f7:3a:0a:80:6a:a2:98:3c:70:d8:
                    eb:70:7f:65:d1:8f:b8:84:40:e0:01:0e:fa:01:56:
                    7f:d3:2c:17:ed:b6:0d:bb:e5:e3:03:99:b4:28:92:
                    be:d1:e2:15:00:70:47:f8:e0:b7:70:60:73:f7:ee:
                    09:b3:d7:12:db:31:ae:34:a1:4d:51:94:96:c7:05:
                    d9:78:17:a1:31:2f:f7:0c:2b:24:f3:d8:5b:12:78:
                    83:1d:a0:c2:9a:09:15:43:8c:30:4e:bd:c6:bd:1a:
                    4b:0a:f8:f3:cf:15:54:42:51:a1:c9:a6:b1:4f:1e:
                    47:c0:63:68:ac:67:4b:4c:9e:e5:4c:dd:05:c8:72:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2B:E7:39:20:15:39:0C:BA:37:0A:4D:D1:C8:D2:6D:B1:72:6E:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/54fbb1bf-0aea-3582-b2d5-2b6273c1bf03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9e:05:bb:1a:4f:87:d7:97:2b:d3:a5:a9:b7:e3:c7:6e:87:
         5c:91:25:e6:3c:ae:48:7a:c9:f9:64:d7:06:49:3b:92:0e:52:
         84:8f:09:f6:69:8f:4b:dc:05:8c:0b:a2:c4:61:fe:12:11:f9:
         27:b1:73:9e:ad:2a:c9:80:89:dc:8e:f4:db:14:0e:ab:92:5d:
         89:0f:7d:dd:28:0c:c0:21:f6:d6:fa:6b:c5:2c:a1:6d:0b:b3:
         a1:69:e8:a0:90:68:57:b5:83:00:86:38:46:2e:b7:16:16:52:
         84:48:13:be:e0:59:ea:93:a3:35:53:1a:ff:d2:01:58:c1:d2:
         14:ce:2b:be:46:31:92:95:71:fb:6a:98:9d:1e:29:4f:f8:be:
         a7:8e:14:a0:1b:85:92:bd:23:86:8d:d5:78:83:2d:da:f5:71:
         8a:a4:0e:2c:9e:d9:6d:88:f9:5f:48:27:c8:46:4e:ff:88:b9:
         df:f2:ed:4e:89:dd:cb:28:20:0b:21:f0:d6:fe:c9:b8:fc:b5:
         57:19:4b:e8:9e:79:a2:c7:c0:d4:ab:92:d2:fd:ab:2b:b3:e7:
         30:95:2f:25:f0:d0:cb:e4:a9:2f:ec:77:01:18:80:2e:98:53:
         76:65:b6:cc:32:48:7d:88:09:7e:9c:7f:37:c0:68:ca:68:2b:
         b2:47:57:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:54 2024 by rpki-client on console-ams.rpki-client.org