Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7f11806c-33c3-3dc5-b20c-81ac0008d0df.roa
File:                     7f11806c-33c3-3dc5-b20c-81ac0008d0df.roa (raw, json)
Hash identifier:          omGLH8zDGqgq3DvZMIsbqrVL61tDd7erxFwEY5QqjRM=
Subject key identifier:   C4:89:D6:B1:0B:97:7E:F5:5F:5E:59:F8:93:BA:97:AE:C9:B6:4F:50
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584738F5FE4300293CAB20EECA00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7f11806c-33c3-3dc5-b20c-81ac0008d0df.roa
Signing time:             Sun 15 Sep 2024 13:00:42 +0000
ROA not before:           Sun 15 Sep 2024 13:00:42 +0000
ROA not after:            Sat 14 Dec 2024 14:00:42 +0000
asID:                     40618
IP address blocks:        207.126.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:38:f5:fe:43:00:29:3c:ab:20:ee:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Sep 15 13:00:42 2024 GMT
            Not After : Dec 14 14:00:42 2024 GMT
        Subject: CN=ecef7457-ec17-47f8-afbc-81a9b844af6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:9a:39:12:29:fb:ab:9a:00:07:2c:21:08:
                    3f:c9:4a:84:64:b6:f5:21:c4:83:69:4f:b3:9f:fc:
                    6d:f1:5d:f7:2c:02:af:e4:fb:bf:ed:ce:e0:e3:3b:
                    e6:99:ca:23:bc:cf:5a:49:59:69:85:61:f5:ce:b0:
                    00:86:d4:20:10:13:2f:7b:8f:83:4e:1b:ce:51:ee:
                    b8:3c:bc:40:c9:80:a2:fa:5e:2e:86:45:41:5f:3d:
                    54:c5:c7:a8:28:bd:49:1e:46:94:ac:05:38:6c:66:
                    c7:a9:fe:ab:f2:34:05:3b:c0:c8:3b:b8:ef:10:50:
                    47:00:9f:be:ae:5a:b6:96:c9:ac:a3:9b:a7:49:ac:
                    56:9a:c0:17:33:97:2b:06:7a:4d:4b:0a:88:d0:e0:
                    86:93:96:0b:ef:f3:2f:61:dd:94:29:e0:de:99:eb:
                    40:4c:0f:ad:75:4b:55:68:5c:16:4c:95:5b:99:82:
                    26:83:fc:9c:2a:27:62:c2:fb:fd:d6:be:6b:f4:9d:
                    73:8c:7f:3a:af:3c:12:f6:28:92:3c:18:c6:9d:0b:
                    cd:5e:78:36:f1:0e:72:da:ce:34:9b:c6:40:56:71:
                    c9:39:5e:38:9b:7b:d2:49:8a:b5:6a:e0:19:82:4b:
                    be:c0:b7:1b:64:7e:cb:04:58:ff:54:f8:6a:6e:fe:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:89:D6:B1:0B:97:7E:F5:5F:5E:59:F8:93:BA:97:AE:C9:B6:4F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/7f11806c-33c3-3dc5-b20c-81ac0008d0df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.126.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:da:02:6e:eb:37:2b:77:43:8b:05:05:6d:9a:5b:fb:57:
         3c:41:79:6a:e3:ad:33:77:ff:31:31:a3:c3:80:9d:ab:57:e6:
         61:f8:ab:cd:fa:08:fb:4f:72:89:78:86:c3:f2:5d:43:6b:77:
         67:f4:a8:39:7b:ce:db:1f:af:84:bd:b5:c9:d4:f8:6f:dd:06:
         b5:90:bf:e0:1f:64:c3:42:36:03:40:12:47:e6:41:f3:52:e6:
         31:09:3c:e7:02:db:5f:50:fb:8e:40:cf:58:af:74:84:2a:b5:
         74:cb:42:c8:2b:ac:0f:8b:45:4e:c1:6a:25:18:76:2a:eb:1a:
         4c:52:0f:a1:94:fb:fe:52:c1:ba:7d:52:00:60:2a:b3:10:dc:
         c9:2a:e9:d2:07:ff:e9:99:4d:93:25:20:a8:a1:f8:e7:9f:2e:
         84:a7:9d:fb:34:7b:67:8a:e8:fd:2a:e9:9b:16:09:e7:1f:47:
         e4:16:c2:dc:cb:78:6e:f1:e2:0a:aa:cc:66:5a:35:3f:e3:ab:
         c2:e7:0b:bb:8d:82:5b:98:f7:1f:05:99:1f:2e:12:33:5e:a7:
         3e:d8:a7:af:64:1f:f8:e8:f8:61:9f:2b:6c:54:a6:b5:d9:48:
         d7:f2:7f:f1:24:08:21:00:3d:2e:a0:00:ca:a0:d8:ee:35:bd:
         36:a9:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:30:27 2024 by rpki-client on console-fra.rpki-client.org