Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7ba07f01-04f1-3162-ad24-2be7d09c087e.roa
File:                     7ba07f01-04f1-3162-ad24-2be7d09c087e.roa (raw, json)
Hash identifier:          ecgHA79yHDYBjXVqOozPoPjxGRrTqVhsXfBCz/QL3M0=
Subject key identifier:   68:B2:AB:E8:37:A4:E4:30:DF:C6:E8:F6:D0:F3:2F:10:AD:06:FB:69
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858475EA62AA58443F4CFE0DF3F68
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7ba07f01-04f1-3162-ad24-2be7d09c087e.roa
Signing time:             Sun 29 Sep 2024 01:00:32 +0000
ROA not before:           Sun 29 Sep 2024 01:00:32 +0000
ROA not after:            Sat 28 Dec 2024 02:00:32 +0000
asID:                     6461
IP address blocks:        128.177.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:5e:a6:2a:a5:84:43:f4:cf:e0:df:3f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 29 01:00:32 2024 GMT
            Not After : Dec 28 02:00:32 2024 GMT
        Subject: CN=f97a4907-d5a9-43a0-8a16-90264a659cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9d:4e:86:5c:6d:c7:6f:28:38:72:e8:ce:37:
                    5e:99:cf:d2:b9:6a:2b:fa:b3:a7:7f:26:a3:a2:09:
                    79:e9:0b:ec:3b:59:17:23:39:c7:96:89:d5:6f:53:
                    81:41:c7:5a:f2:9a:f5:f3:67:ab:04:36:07:df:9c:
                    7f:80:90:9a:11:b3:1d:9a:4d:8a:db:46:84:29:16:
                    19:7d:a5:42:e1:08:fe:7c:33:66:30:04:10:83:96:
                    06:68:fd:f3:f2:fc:0d:aa:8e:b7:24:d6:f2:c8:b6:
                    d6:6e:c1:b7:f9:4d:37:e7:9c:31:02:ca:b2:aa:a3:
                    7a:cd:1e:44:8e:e3:50:c7:ee:b3:3d:4a:be:b7:85:
                    66:c9:63:c0:f4:6a:89:a9:47:58:bd:ac:03:1c:08:
                    ca:90:88:4a:f2:17:ad:b1:8c:65:ca:20:af:50:6a:
                    8f:1b:25:96:e0:87:1f:88:06:92:1e:d6:b0:d6:70:
                    ee:c6:67:07:c4:06:27:4d:b4:06:14:fb:cd:e6:f4:
                    da:fa:cc:cc:18:d8:04:7b:71:5e:64:e8:94:2b:d9:
                    60:dd:7a:64:cc:47:8c:82:15:26:71:84:6a:f4:af:
                    ee:d1:06:13:57:7e:0f:b3:71:80:22:29:97:26:de:
                    51:f9:55:87:ff:f5:a4:ae:05:41:1b:0c:c4:f9:a9:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B2:AB:E8:37:A4:E4:30:DF:C6:E8:F6:D0:F3:2F:10:AD:06:FB:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7ba07f01-04f1-3162-ad24-2be7d09c087e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:30:cd:79:3d:9a:9f:a3:a2:dc:b6:01:8f:a1:b4:f3:ed:91:
         85:c5:f0:0e:d1:a6:57:a9:50:ad:ea:f3:d6:2a:a6:81:19:60:
         e6:23:40:3d:f9:39:2b:a9:d3:c7:1b:67:28:9a:bd:86:93:8c:
         c5:ee:e1:b4:33:fd:31:3e:d7:18:ce:a1:95:31:f5:97:e4:0c:
         b2:1b:08:73:4b:b9:22:b3:85:92:84:03:c8:dd:99:e8:bc:f0:
         e8:c5:14:df:9c:5a:0a:6c:5a:6c:8e:46:a0:16:2b:ba:88:b8:
         2e:d3:ae:d0:3e:46:9f:48:43:26:65:7c:51:6d:16:86:1e:85:
         66:93:8d:5a:07:67:b7:5e:80:c2:bc:cc:bb:7d:ca:3b:27:2b:
         af:51:f5:6a:f7:b4:55:20:b0:2c:d5:d9:51:19:05:6c:09:93:
         32:54:32:d9:c2:d1:e0:0a:a6:7b:2b:68:20:39:5f:8b:11:18:
         50:df:b4:db:0a:33:a9:ab:29:78:8b:31:47:06:7c:da:82:7e:
         93:6c:32:b0:2d:2c:e9:77:a6:3e:a8:89:9a:e8:c5:b2:1b:03:
         e9:b1:9a:2c:ce:36:c7:5a:66:6a:dd:fd:f6:2f:fc:23:b0:3b:
         72:61:7a:01:66:fc:ed:de:0f:72:85:25:5c:fb:50:67:ef:7a:
         24:58:08:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:27 2024 by rpki-client on console-fra.rpki-client.org