Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa
File:                     66f75ba9-003e-34dc-a4bc-f550c61baac1.roa (raw, json)
Hash identifier:          m3a/Q/4RmP7NqOvR89JnYEyOMChFz5y08/+ROtA23m8=
Subject key identifier:   81:9A:2A:AC:F2:D4:89:94:DC:19:93:EC:76:64:01:01:2F:D1:B8:48
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F6003DD6BA000060ECA1C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     395006
IP address blocks:        208.184.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f6:00:3d:d6:ba:00:00:60:ec:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=1a5b8ff3-4b0c-41f1-8845-1354cd319b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:bd:21:d2:cb:19:13:bc:62:56:77:4e:a9:
                    4c:96:01:a0:7a:a9:98:d0:ee:3e:6f:55:4f:56:94:
                    4a:a4:23:0e:b1:35:77:16:ee:a8:00:44:3e:3f:5f:
                    b6:ec:03:8e:ab:bd:7e:68:9a:99:d0:71:e0:37:7a:
                    e3:b7:28:b6:b2:89:07:86:91:7e:6b:6d:ff:92:3a:
                    6d:f3:df:bb:9d:0d:2f:24:a4:cb:b2:07:8f:8e:a4:
                    2e:94:cd:39:95:f6:a1:4a:ed:80:14:be:a7:fb:85:
                    bd:62:c3:6e:ed:02:e5:57:f9:18:42:7f:71:24:1f:
                    40:5e:01:7f:53:fc:a2:3a:6c:65:c7:b2:d1:61:9c:
                    bf:95:52:ce:83:f0:db:50:a0:17:db:6a:61:45:56:
                    09:29:ec:35:75:96:29:91:0f:5b:61:2d:13:06:38:
                    39:11:3a:eb:98:df:47:6f:71:d6:42:1b:35:0a:7e:
                    fa:61:88:57:a6:11:08:76:aa:94:a2:29:7e:5b:65:
                    42:4d:ee:44:8f:48:c5:db:e5:5d:df:3a:32:f3:cb:
                    01:82:86:b4:be:5b:f9:63:87:ae:89:86:c8:ff:b4:
                    2d:73:2d:a1:b7:7c:fd:e5:5b:a7:03:1e:2b:5d:02:
                    55:7a:d9:63:5c:b7:6a:32:0b:ab:db:d2:82:a5:1d:
                    21:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9A:2A:AC:F2:D4:89:94:DC:19:93:EC:76:64:01:01:2F:D1:B8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/66f75ba9-003e-34dc-a4bc-f550c61baac1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:a3:40:db:84:2c:0f:4d:26:65:ef:f4:76:2d:5e:e7:81:7a:
         fb:67:b6:88:2f:d1:3f:ad:82:e1:03:52:cf:e4:30:43:b8:6d:
         5c:02:bc:dc:ee:d8:37:e2:80:7c:2e:74:79:a4:b6:80:09:e9:
         ec:95:94:8d:4b:63:ab:a8:99:b0:c1:ce:c3:fe:4b:89:76:61:
         43:1c:da:a0:67:67:91:5b:4d:be:82:49:b0:ad:8c:6b:24:1c:
         85:0f:44:f8:02:6c:32:92:92:2b:41:d5:23:7d:c2:81:40:c9:
         b9:c0:c4:6f:a1:85:5b:95:05:da:86:37:7a:0d:c3:fd:ed:a0:
         57:50:2e:29:cd:21:1c:8e:f7:47:9c:68:06:7a:f8:30:68:6d:
         08:e3:f2:ec:fe:8d:f3:b7:65:69:7f:75:8e:91:12:db:20:af:
         4e:8a:c7:71:d0:34:57:02:63:d5:24:7b:cb:33:15:27:0d:5d:
         10:f5:83:20:ea:64:3c:30:de:f7:f2:e9:29:f9:fe:77:be:c0:
         d7:ba:a9:05:87:c7:64:4b:61:e5:80:25:99:14:3f:22:12:dc:
         cc:c6:11:35:2e:a2:7a:df:bd:9b:29:68:6e:28:1a:12:d7:0b:
         de:0e:87:b7:18:2f:ee:66:40:8e:c3:23:f0:9e:46:30:b8:8f:
         9c:d7:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:55:54 2024 by rpki-client on console-ams.rpki-client.org